Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d55b4a1d-1153-3107-b083-360791217aeb.roa
File:                     d55b4a1d-1153-3107-b083-360791217aeb.roa (raw, json)
Hash identifier:          QCzzBc6j/kWidOlcyXuMZJ/ue86E3b0N09hRP3KwcA8=
Subject key identifier:   E1:00:08:63:18:35:78:6B:74:D9:34:BA:5B:9D:6A:28:EB:F1:48:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C86F578EF49B6A65B1A200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d55b4a1d-1153-3107-b083-360791217aeb.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.39.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:6f:57:8e:f4:9b:6a:65:b1:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=f8369cc4-2aee-484b-8186-0a8e0886848a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:36:34:75:b5:41:ce:37:86:81:b0:50:ad:3e:
                    4f:69:21:fc:62:6f:5e:41:92:de:a3:2e:55:26:77:
                    f6:1e:af:69:20:92:65:ce:55:2f:f4:da:db:b3:98:
                    eb:d3:18:20:a8:00:5e:ea:0a:2f:3d:6f:e4:70:d9:
                    12:1d:4e:9d:8a:4d:5b:1c:44:3b:01:86:33:3f:e7:
                    b6:ef:1b:5c:63:a3:bc:fe:2a:5a:07:a8:b2:91:c5:
                    e0:09:95:44:13:d7:f6:bd:4d:4f:be:9a:28:4e:73:
                    3a:8e:23:ae:ce:48:41:6c:da:ed:4e:46:0a:d4:ec:
                    9c:c3:ca:26:4b:bf:15:4e:6c:e4:5d:b2:f6:db:d9:
                    4b:f6:0f:cb:a3:8b:fd:c3:fb:78:a6:b8:36:f1:80:
                    60:7f:ad:81:03:1c:61:b7:4a:e6:d9:1b:23:88:79:
                    ff:80:72:f3:4a:d3:9c:ab:3c:29:ad:9c:ca:47:c9:
                    d7:10:4a:71:4f:ae:ab:d8:62:36:6c:6c:11:94:b9:
                    d7:dd:3e:73:32:d3:c0:de:ca:7e:bc:e7:f5:f1:fd:
                    e4:f1:01:4f:8e:42:82:c3:51:86:5b:0b:d7:87:ed:
                    09:68:23:3e:2b:48:d4:f5:8a:b4:f4:68:48:4d:70:
                    b4:db:2a:ee:37:a7:33:42:35:2f:f3:9a:6c:07:b3:
                    83:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:00:08:63:18:35:78:6B:74:D9:34:BA:5B:9D:6A:28:EB:F1:48:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d55b4a1d-1153-3107-b083-360791217aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.39.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:43:12:89:c4:0d:27:20:0a:79:d1:ab:6e:35:20:6c:25:05:
         9e:4b:9b:e4:27:1f:ff:7a:83:ca:2f:6f:84:99:c1:99:5a:cb:
         bd:d9:6a:9c:7f:ec:e1:ee:af:06:94:3d:31:96:87:d2:26:b5:
         39:af:3d:87:82:28:d2:79:a1:82:3f:f2:2a:3e:aa:03:e6:d3:
         10:b7:88:9b:43:f2:29:9f:64:9a:06:bb:39:97:61:c7:3c:55:
         46:6e:9b:78:aa:6d:55:64:32:d3:cc:8e:65:d4:38:a1:98:7a:
         b4:be:37:29:d3:b7:f1:94:d1:72:b5:41:b7:df:71:9f:91:1c:
         95:4f:90:57:30:ed:a3:b9:a4:9c:9c:fc:9e:da:49:d3:dc:e9:
         d4:93:53:13:dc:2b:7a:39:fe:e6:f1:54:bd:60:23:d1:9f:83:
         3c:af:8e:34:89:4c:e4:b2:d2:16:4f:5f:93:cd:6a:ed:16:d5:
         0e:43:b7:42:45:61:6a:90:40:0a:28:92:1a:bf:05:52:eb:52:
         24:50:30:bc:0d:a7:f4:c1:9d:9b:fc:36:41:cb:91:4e:6b:db:
         6b:55:8d:54:5d:a5:dd:69:1f:1e:b5:45:f5:5f:41:d8:b5:69:
         ff:03:63:a6:ad:52:a9:a2:63:91:dd:b4:ef:e1:d5:3f:ea:37:
         61:48:78:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:13:39 2024 by rpki-client on console-ams.rpki-client.org