Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d604ee3e-f4d2-3a92-8d23-bc3d37c69cc8.roa
File:                     d604ee3e-f4d2-3a92-8d23-bc3d37c69cc8.roa (raw, json)
Hash identifier:          S7KcjNqiCshH2X0eXoODLut3sLZDdYTYhxd7n1Mj1ik=
Subject key identifier:   AC:BA:BC:17:14:2C:58:42:1E:93:D8:EF:30:7F:08:C2:5E:58:68:1B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CD901A0D836CF23177780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d604ee3e-f4d2-3a92-8d23-bc3d37c69cc8.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        98.46.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:d9:01:a0:d8:36:cf:23:17:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=cc389396-ac9f-4758-a47d-0119eda1983f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6a:22:b5:03:a4:55:21:79:1e:df:20:07:37:
                    64:68:8f:07:fc:bf:f9:8e:17:98:fc:52:a1:1d:b1:
                    2c:06:99:f0:62:47:44:21:ad:f9:7e:b2:7f:e8:3c:
                    40:b9:51:5a:6d:a2:80:2b:26:91:d7:92:64:c9:dd:
                    f3:67:a3:cb:15:ee:d8:35:3e:4b:07:e2:cb:b3:ae:
                    df:ea:50:6e:50:34:e4:4e:f6:ec:a1:c3:d3:9c:b0:
                    8b:96:5a:fa:1a:d5:cc:ff:5d:05:53:7e:68:98:92:
                    61:cc:e2:f7:6c:d1:ce:06:ca:c2:9b:ef:4f:10:5e:
                    e6:f9:7a:23:cf:75:d3:ac:df:15:3b:3e:ca:ce:09:
                    ca:15:49:17:52:9e:f9:d4:96:bb:75:8a:c8:15:ca:
                    9e:a5:41:3a:43:14:0f:0c:88:4f:1d:b1:75:3b:62:
                    55:76:9f:04:20:6e:b7:65:d3:56:02:28:2f:b2:bb:
                    3f:61:78:be:6f:f4:31:ed:4d:22:1a:7e:9d:9c:98:
                    9f:66:91:e8:82:00:6e:62:f3:cc:96:82:37:b0:70:
                    30:aa:e9:b3:47:db:73:d7:64:8b:a5:ad:b9:f8:4c:
                    a7:18:ae:df:63:d9:be:0f:44:d7:69:e4:08:46:f4:
                    06:df:81:1c:e3:0d:87:b2:ec:b0:08:9c:67:67:6f:
                    2e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BA:BC:17:14:2C:58:42:1E:93:D8:EF:30:7F:08:C2:5E:58:68:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d604ee3e-f4d2-3a92-8d23-bc3d37c69cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.46.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:35:c6:90:d5:56:a3:fe:30:7c:aa:69:be:54:22:fe:1c:b9:
         6d:3b:bf:51:b5:55:b8:0a:3b:f8:99:35:a0:14:55:b7:ad:b8:
         aa:58:71:8f:89:d9:8c:09:d0:3f:86:a0:e4:67:1b:b3:9f:ba:
         6a:20:10:65:a5:31:98:30:d3:54:8e:d6:3f:57:97:1e:78:c3:
         e3:ac:3e:05:25:bb:9f:fb:2a:dd:6d:b9:9d:fe:c9:1a:35:c3:
         23:5c:06:0d:17:75:b6:91:05:cd:4c:22:b9:26:00:7b:0b:c6:
         cc:89:2f:ff:ca:ca:84:95:f7:cd:85:b2:d3:b3:68:c5:19:d6:
         43:8c:eb:9d:29:e6:f2:a8:6d:03:fa:ee:ce:90:75:6d:01:0f:
         6f:48:1b:28:fe:cb:66:21:16:67:79:df:55:dd:fa:d3:2d:96:
         5a:0b:6b:d9:d1:b1:2c:40:ff:58:b0:12:55:7e:27:45:01:34:
         7d:17:b7:6b:e5:dd:92:fd:7d:14:3f:f2:de:3e:fe:83:53:8a:
         54:08:5a:85:33:a2:a7:50:93:10:12:29:de:ca:ea:2d:2a:48:
         38:07:f2:a7:c6:a7:fc:15:8d:4a:d5:79:8a:ab:a5:ab:ab:65:
         f7:7a:95:ca:80:fe:f9:4b:d2:f5:18:53:ca:2f:50:89:cf:3b:
         1e:3c:f3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:33:58 2024 by rpki-client on console-fra.rpki-client.org