Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d49f6036-43ef-3683-9bcf-e553783d143e.roa
File:                     d49f6036-43ef-3683-9bcf-e553783d143e.roa (raw, json)
Hash identifier:          rbhyUrFj6iqo+PHBlaozeJIgLFcHYVhxE8r27RoPZZE=
Subject key identifier:   62:36:C2:C1:1D:00:E1:43:27:DC:F8:12:3D:3B:05:54:A2:38:77:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E605A06A0CA8F9F5E2D4C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d49f6036-43ef-3683-9bcf-e553783d143e.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        98.251.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e6:05:a0:6a:0c:a8:f9:f5:e2:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=0eea1215-d7f1-49a4-97dc-3a00f0498536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d7:ed:26:e6:67:6a:95:c4:06:42:54:b9:ca:
                    30:1a:80:be:09:cc:a5:4b:eb:c2:5d:3e:9b:1f:54:
                    dd:92:a9:93:4d:9e:31:3d:d0:71:65:94:00:95:1a:
                    25:f7:5f:bc:5a:0b:82:1a:af:4c:85:05:f8:59:88:
                    fd:4f:17:81:bc:8e:cc:ee:2f:0e:df:98:fa:a3:53:
                    6d:c8:a1:7f:3e:b9:2f:a5:9e:7f:76:26:08:ac:33:
                    53:c0:92:45:31:99:80:52:78:54:03:87:8f:ac:ed:
                    f1:85:7c:8f:12:a5:05:14:d3:2d:ec:82:b7:d4:c4:
                    a7:e6:57:d8:78:2e:97:55:4f:8c:2b:8d:64:76:f5:
                    df:23:e4:ae:08:3e:69:14:93:a6:05:91:5a:f5:21:
                    a1:96:b8:83:a7:ab:1f:d1:de:0e:75:3b:96:1b:cb:
                    ca:ba:16:4a:ac:b2:68:05:17:a8:d7:a7:dd:29:59:
                    b3:db:18:f2:14:df:8b:b0:f2:97:5f:c5:6e:f7:5c:
                    7e:78:cd:30:c5:f5:e9:37:c3:54:5f:64:b2:7b:40:
                    a6:2c:34:74:f1:2e:4b:6f:20:7e:6b:0d:b9:f3:25:
                    4f:94:f0:33:7d:a4:c6:1a:a5:ec:43:07:5c:ce:f0:
                    fc:67:0e:cd:3f:34:c0:33:63:92:3c:98:37:d3:0b:
                    ec:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:36:C2:C1:1D:00:E1:43:27:DC:F8:12:3D:3B:05:54:A2:38:77:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d49f6036-43ef-3683-9bcf-e553783d143e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.251.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:3c:2f:cb:26:d7:60:b2:6a:29:1e:6c:fd:0e:ec:0a:3e:bb:
         26:fa:a3:e0:4d:2b:6f:b4:8c:d7:67:47:0d:ca:f2:ac:c9:b4:
         18:bb:3b:03:62:97:60:3d:8e:2f:7a:05:81:0c:26:32:c7:8e:
         b9:72:4d:c5:db:78:ef:cd:4e:5a:20:61:97:9b:61:65:21:b1:
         33:ab:bc:1b:fe:31:81:9e:81:57:6a:82:a8:6a:31:b0:97:0f:
         cb:f5:1a:60:5c:d1:e9:8a:5a:c5:0d:2f:68:23:8b:33:9c:5d:
         30:3f:9e:a5:86:34:fc:14:2a:6d:52:50:e4:f8:7b:99:34:58:
         b6:1e:52:12:0e:e2:bf:04:90:fd:65:3c:2e:6c:bb:11:aa:bb:
         18:c7:8c:32:1a:e8:b0:34:d2:10:a7:52:6c:42:f4:2d:cd:f6:
         78:21:b0:c2:a1:0d:1e:3c:de:e5:d0:91:9f:7a:d8:77:ff:69:
         2e:75:6a:ba:2e:84:13:10:b9:7a:02:3f:1f:10:af:d7:ea:1e:
         1f:78:79:3b:ef:13:13:c0:24:dd:6c:31:66:83:f3:5a:c1:11:
         ca:79:ac:57:6f:91:8e:de:db:47:b8:15:3f:ca:5e:36:3a:e1:
         68:b6:04:ba:99:3e:d5:cd:b1:c2:da:00:29:19:f2:c5:76:a5:
         cd:d0:10:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:33:44 2024 by rpki-client on console-fra.rpki-client.org