Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d077159d-e0c4-3045-acf7-be507b1c2a2e.roa
File:                     d077159d-e0c4-3045-acf7-be507b1c2a2e.roa (raw, json)
Hash identifier:          D3jS3lvtzj0/KoV1i5l7E6Gul65jQtJVbWMp43Gq6GM=
Subject key identifier:   71:91:72:52:5E:E7:F8:6E:90:7D:F6:18:2F:B9:BD:03:2D:96:B8:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DA3600FEE286E7D8AF580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d077159d-e0c4-3045-acf7-be507b1c2a2e.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        98.47.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:a3:60:0f:ee:28:6e:7d:8a:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=e1868253-b8b6-4183-8fa0-1eae1d08ce0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:7f:44:e6:48:19:59:aa:f4:b7:2c:1b:9c:
                    6c:f4:7f:52:51:c3:79:52:5e:4d:bc:f1:cb:65:e5:
                    e5:15:42:f1:bd:24:d3:d0:b1:d8:b8:3a:25:09:60:
                    8b:f8:f2:88:7e:3e:b7:f2:0f:a3:4f:78:11:1c:2e:
                    bd:e1:12:ee:44:7a:20:e3:5e:ed:68:12:c5:a6:47:
                    1d:a9:63:44:c2:11:77:d0:50:a9:6f:88:b3:c6:4e:
                    f2:29:a5:62:33:d0:f7:67:92:81:4a:ab:35:b4:ee:
                    29:fd:36:eb:0b:8c:10:31:e4:13:91:34:94:17:b7:
                    69:33:34:95:27:ad:7c:62:82:03:4b:70:9a:55:20:
                    41:96:31:73:26:3c:ac:50:8f:d5:83:1f:42:cc:23:
                    34:cc:c2:2b:dd:29:2d:24:c4:90:b2:39:d8:3c:b8:
                    87:85:d9:04:a4:9e:cc:24:b7:8c:7b:2d:86:05:5e:
                    94:73:1b:8d:18:e4:81:a9:70:73:78:53:e9:9c:65:
                    7c:10:47:b1:ca:a1:1d:5b:8f:c4:6c:92:7b:3d:2f:
                    4c:3d:93:37:f1:a5:f3:88:56:42:9e:db:ec:8c:3a:
                    54:d5:d8:28:1e:6c:a2:58:ca:83:b9:94:c5:8b:bb:
                    dd:6c:6a:31:f2:e2:be:2b:21:1d:b2:47:df:d4:9e:
                    bc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:91:72:52:5E:E7:F8:6E:90:7D:F6:18:2F:B9:BD:03:2D:96:B8:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d077159d-e0c4-3045-acf7-be507b1c2a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.47.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:64:56:5d:0a:ee:ae:47:80:37:f8:34:7b:ff:7d:df:c4:be:
         5a:c3:28:78:a8:52:ca:c1:1c:17:5a:c1:a7:b7:75:91:c5:93:
         71:41:d2:3f:73:5d:3a:ec:c0:fd:28:c5:20:35:46:86:9e:3d:
         f2:89:fe:8a:28:75:15:14:28:57:4c:45:55:3c:a7:df:d2:63:
         56:e2:7e:c9:4d:cb:90:93:e1:1b:8b:df:ac:51:56:ef:0d:cf:
         84:05:f2:a9:10:84:0d:67:bf:ef:fb:49:71:d1:d0:0b:a3:43:
         06:a4:4a:8c:24:e6:98:0d:12:1e:1f:24:42:24:64:b9:0e:a7:
         1b:2c:29:c5:57:36:3f:75:c1:cc:97:74:ea:95:7c:75:70:91:
         59:cf:46:54:69:41:32:1d:c5:96:6d:8c:49:75:25:84:ed:e1:
         76:95:00:cc:38:53:04:7d:03:35:5a:ff:8c:0c:59:21:ab:40:
         0c:05:50:52:34:55:b2:d4:54:60:ce:2a:f1:e6:ff:44:02:4f:
         52:27:cd:79:53:ac:8b:f3:fd:d0:d3:a9:74:4e:cf:da:8f:ca:
         ee:d9:53:7f:ef:66:29:af:43:48:41:11:55:2c:ed:1e:94:3f:
         80:e5:df:83:48:2c:41:f8:13:9b:1f:1f:b4:95:b7:53:bc:00:
         d9:db:22:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:35:17 2024 by rpki-client on console-fra.rpki-client.org