Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cea68f0c-ab1e-3b67-a432-e60ea64ee494.roa
File:                     cea68f0c-ab1e-3b67-a432-e60ea64ee494.roa (raw, json)
Hash identifier:          WQXidcDKW+MuYSSnCr6fgIIujew6vDaCc/X59H4+cBo=
Subject key identifier:   8A:08:12:00:F7:A7:13:1B:34:DB:30:02:8B:8B:25:20:47:67:66:EB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E604083D36C98005B93700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cea68f0c-ab1e-3b67-a432-e60ea64ee494.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        98.219.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e6:04:08:3d:36:c9:80:05:b9:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=bf0f5d52-10a7-4bf9-ab04-c1f2eb09e321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2b:60:fa:d8:1f:b2:d2:da:92:64:26:2e:66:
                    ae:e4:79:9f:03:3f:f0:2e:6c:8f:e8:c1:7b:3e:8e:
                    a0:40:bb:90:00:8f:13:10:2e:3f:93:6c:a0:3d:15:
                    e5:7e:5f:6d:ec:22:3e:68:74:39:62:d4:3e:7a:4c:
                    0b:f8:e0:62:90:37:18:58:ec:b7:17:3e:16:ae:16:
                    03:3c:5f:9a:cc:78:9e:f8:5d:35:b3:61:fe:64:34:
                    4f:1c:9b:56:e4:02:2e:7a:cd:72:27:5b:bf:63:62:
                    c9:be:08:04:49:82:0e:77:72:ac:d3:e8:2a:95:b8:
                    66:39:d2:a6:ac:35:0e:31:a9:4f:07:0d:64:ba:46:
                    02:d3:2e:e2:9a:6d:eb:c1:35:35:6a:48:31:c8:62:
                    8b:26:9b:db:a6:b1:7c:2d:1a:d2:b1:d2:62:3c:b1:
                    49:5f:d1:1e:43:c5:4a:3f:03:ff:b0:43:b6:b2:95:
                    f5:1f:2e:86:07:6a:9f:a6:7e:cb:ac:b4:97:05:96:
                    77:2b:fd:8b:c3:d6:91:fa:fb:c0:75:12:6c:6f:e9:
                    c3:c8:45:e8:e9:6c:ed:d5:2c:10:ca:f5:2f:7e:1f:
                    9f:97:04:22:0d:3e:79:8a:23:8e:a6:4d:d8:b0:36:
                    54:40:27:17:c9:60:61:1e:d1:8b:29:83:2a:29:c5:
                    8b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:08:12:00:F7:A7:13:1B:34:DB:30:02:8B:8B:25:20:47:67:66:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cea68f0c-ab1e-3b67-a432-e60ea64ee494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.219.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:88:1f:37:85:b7:a9:08:e8:2d:e4:1e:61:d9:b0:f0:16:aa:
         65:0a:62:a9:7c:5d:d3:92:54:73:93:1d:03:d8:d7:f7:3a:fc:
         4c:bb:fc:e2:af:87:5f:29:b7:d6:03:7e:30:2e:b4:80:94:06:
         0e:58:e3:e3:02:93:6f:f1:f6:03:91:77:26:28:09:3f:94:81:
         8b:37:bd:9f:30:2f:95:e5:e4:05:a6:1c:75:d6:4e:07:3e:fb:
         da:71:6d:c1:55:01:01:bd:6a:1b:6b:b4:b9:33:8f:71:fc:50:
         af:1a:e8:2e:8b:97:d4:98:bb:4b:03:75:ac:2f:60:57:dc:8c:
         5f:9d:f5:4d:3f:ff:e9:01:36:6b:56:8d:6a:d5:da:01:ee:8a:
         f4:cb:ba:90:a7:e0:54:d6:2f:aa:79:83:5e:e4:85:f1:2f:21:
         1a:f3:52:d4:c7:54:1f:ed:e2:00:ec:cc:06:cd:a9:9c:98:d2:
         02:de:46:d8:31:22:5d:7e:f7:96:b7:a8:99:11:ba:bc:68:e9:
         6d:55:74:5c:c8:f1:23:ed:ad:5a:c9:17:d3:de:dc:20:d4:f6:
         e3:27:f2:74:2d:ee:56:90:45:1d:50:7a:b1:b9:ce:af:6a:10:
         f2:d8:47:9b:21:c1:bf:7c:06:e6:2c:ce:69:d1:ac:1d:43:68:
         f9:cc:93:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:32:39 2024 by rpki-client on console-fra.rpki-client.org