Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0a34d15-c7d4-3e57-b10e-0b1ee0e2cd97.roa
File:                     d0a34d15-c7d4-3e57-b10e-0b1ee0e2cd97.roa (raw, json)
Hash identifier:          9Ljhl0R72Xou5YVdozvZzJW2KlJnv7RbRaR5DvmFuLQ=
Subject key identifier:   D8:A3:F0:C0:4D:60:CB:2A:CE:F0:40:D1:28:29:63:06:B3:31:A7:A4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CA9251341FE9C44224300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0a34d15-c7d4-3e57-b10e-0b1ee0e2cd97.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        98.212.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:a9:25:13:41:fe:9c:44:22:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=767bb3b6-c573-430d-884d-7b8cd98b4b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:84:51:2d:d8:6d:d2:01:f9:9b:d1:cd:33:d1:
                    e5:34:dc:e8:e5:17:72:37:22:76:9a:8a:46:ec:7e:
                    7c:a8:18:1d:bd:fb:4d:d3:0f:41:10:f0:d2:11:07:
                    d7:dc:17:1e:21:09:8a:51:27:0c:10:43:21:90:66:
                    05:c8:70:db:97:34:48:db:cd:25:2e:8e:91:06:61:
                    a7:7b:97:23:a1:1a:27:1d:a9:31:34:47:b0:f2:ac:
                    03:7a:02:1e:69:a8:23:a1:6b:07:51:ce:b3:7b:02:
                    20:d1:3a:19:f1:6e:a7:aa:6b:a3:28:49:82:c2:cb:
                    58:6c:b7:ab:94:7e:40:9f:69:0d:e4:a6:0d:27:c5:
                    f1:4d:53:f5:b4:17:25:de:44:b6:b6:a8:33:84:ee:
                    11:ae:6b:7f:9d:52:ec:55:1d:39:d9:07:05:53:c9:
                    12:20:fb:51:5e:05:ab:bc:4f:01:46:14:ff:bc:e3:
                    04:ca:16:93:46:e9:61:3d:da:55:72:bc:e2:48:36:
                    0d:08:a4:ce:8f:d3:dd:1f:e6:72:dd:f4:d9:4b:fa:
                    93:ad:be:77:a3:1c:1c:e5:04:be:fd:8c:c3:66:88:
                    b0:2a:f8:ef:4f:29:d0:24:3a:69:03:39:e6:9f:7d:
                    7f:d5:6d:07:91:eb:f4:f6:da:48:cc:9f:e1:41:81:
                    4e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A3:F0:C0:4D:60:CB:2A:CE:F0:40:D1:28:29:63:06:B3:31:A7:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0a34d15-c7d4-3e57-b10e-0b1ee0e2cd97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.212.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:23:0c:1b:e3:2e:97:6e:82:70:29:b9:df:2e:39:27:fa:8e:
         a2:d2:15:e8:6f:4f:09:2b:8c:c4:31:59:9b:a3:68:53:0d:b9:
         69:18:45:eb:87:9b:55:f8:f7:e5:70:42:19:81:82:99:66:39:
         4b:d4:c9:53:b9:b5:92:2d:ae:37:b8:43:88:f3:f6:fb:11:43:
         10:89:ba:e1:d2:c1:b9:be:57:f5:fd:05:19:64:5e:0d:11:07:
         71:d2:3e:dc:ac:c5:dd:1e:61:c8:4e:70:b0:ff:bb:30:2d:0b:
         9d:bd:c6:1f:4a:1f:6f:bc:6a:ef:13:29:52:76:ac:de:99:3a:
         05:68:a6:dc:57:57:7f:66:52:92:0f:87:6b:94:fa:1a:fc:f7:
         70:08:22:b3:be:98:1c:9d:26:cc:f8:1e:76:fa:7e:60:f6:e0:
         48:03:02:9d:d2:8b:71:38:d9:75:53:5d:ed:05:48:f3:82:3f:
         fd:af:35:c5:1d:2d:1d:63:a3:cc:9c:18:6f:4c:46:f9:06:cc:
         53:47:61:bf:7e:b1:57:6c:4d:55:55:0f:89:6b:b8:ed:8f:a8:
         ee:43:9f:1d:71:c8:4e:a5:68:fb:76:00:5e:52:d0:35:13:d8:
         0b:58:d4:6b:7e:72:89:2d:f8:97:0c:7b:c3:01:50:04:b7:16:
         fc:4e:20:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:19:28 2024 by rpki-client on console-ams.rpki-client.org