Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c83a1c8e-6302-3e41-86f3-e47adba9c5cb.roa
File:                     c83a1c8e-6302-3e41-86f3-e47adba9c5cb.roa (raw, json)
Hash identifier:          7Ci0Loc5O6a8OcDGOIMHH35s2oxGuOlT/GjYL5kZhXY=
Subject key identifier:   33:79:F9:F3:50:F9:09:49:6D:DA:D6:12:82:38:6B:1C:CC:38:15:85
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C845C13A9DEF6C6E0C3B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c83a1c8e-6302-3e41-86f3-e47adba9c5cb.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.194.74.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:45:c1:3a:9d:ef:6c:6e:0c:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=ba09316f-ee4d-4104-84cc-c083fca17243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:75:87:7e:37:80:8b:92:ba:a7:2c:c2:c2:35:
                    5c:39:41:24:b1:36:0f:4c:a4:9c:45:25:cc:37:d7:
                    bf:89:6a:81:04:65:70:19:b7:6f:0a:fa:ed:b5:ab:
                    7f:bc:22:18:b7:68:5c:90:6d:cd:20:82:d1:d9:1c:
                    54:4b:a0:4b:15:d8:63:cb:1a:08:66:bb:8d:e9:d7:
                    a2:80:7a:61:7b:49:fb:22:de:5a:1e:de:17:e8:b5:
                    c0:78:20:0f:15:17:29:e5:a8:24:e9:4c:03:94:ce:
                    4c:44:6a:91:27:19:13:4a:41:80:50:60:ef:27:bb:
                    1f:85:ac:17:14:30:7a:06:34:a3:b8:7f:3c:6e:8f:
                    9a:79:68:c7:dc:77:b6:0b:45:df:a7:d8:88:dd:7d:
                    6b:f3:88:31:c9:09:e3:a8:2e:a6:9b:59:65:5a:10:
                    dc:96:ae:90:f0:86:7f:4c:da:88:5a:67:f5:6d:04:
                    31:71:26:64:3c:5d:84:2d:35:bf:71:cd:b8:92:4d:
                    98:11:a3:28:55:e6:54:c1:b8:64:79:2d:b9:6b:61:
                    58:64:ec:b9:72:0c:32:d9:54:cc:5b:5e:e3:d5:f4:
                    eb:ba:29:ec:8d:5a:df:03:49:6e:6d:15:7c:4e:89:
                    05:4c:15:b1:95:6b:33:6f:a4:54:6e:9c:bb:a4:36:
                    85:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:79:F9:F3:50:F9:09:49:6D:DA:D6:12:82:38:6B:1C:CC:38:15:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c83a1c8e-6302-3e41-86f3-e47adba9c5cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.194.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:cf:68:ab:6a:ea:6e:16:84:f4:e6:ba:11:59:3b:cf:05:90:
         1d:c4:e1:c8:6f:1f:65:c3:5e:48:66:c8:6e:64:3c:a7:99:50:
         8e:65:ad:f8:b0:e1:5c:97:b2:6f:b4:d9:5f:1f:d6:4d:1d:d5:
         17:87:4f:6a:3d:e0:d1:9c:63:2a:6f:51:14:f7:13:c1:da:c7:
         11:89:87:06:eb:9e:b6:72:db:62:f1:48:16:1d:d9:f3:37:71:
         d6:31:12:10:f7:a1:ca:12:8b:98:b9:bc:25:2d:29:09:2c:2a:
         52:05:f8:da:19:e5:e1:b9:d9:14:e0:45:8e:91:4b:5e:64:d3:
         c3:2c:d2:da:a0:10:e7:d8:b6:4e:b7:3d:26:ca:20:9f:c4:cd:
         fe:cc:3a:7d:bc:35:18:b4:34:22:fa:bd:1a:57:35:20:1e:4f:
         e1:3e:d5:17:32:75:24:2c:2f:b5:9b:a2:a6:68:1d:c1:71:e7:
         01:2e:69:b9:be:e3:6a:2b:1e:8d:d0:f6:df:de:ba:76:fd:5b:
         04:db:f7:34:2a:d6:3f:46:72:34:ad:97:d9:83:f2:2a:93:2a:
         77:48:55:a1:e2:5f:eb:41:1d:c8:28:af:e6:de:14:5f:06:96:
         33:13:bf:c9:fe:a7:d1:84:32:4b:75:62:f1:64:c9:49:d1:18:
         df:5c:ba:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:45:26 2024 by rpki-client on console-fra.rpki-client.org