Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d622fbc2-b442-3492-b99c-1065464fd21f.roa
File:                     d622fbc2-b442-3492-b99c-1065464fd21f.roa (raw, json)
Hash identifier:          Xi0HuNStOK8ke3PDTYtnHhwtSHdQ7x2RvJHdy+raQiE=
Subject key identifier:   11:68:5E:9D:52:BF:39:F9:CE:42:FC:77:AA:D8:E6:08:AC:DB:B6:5B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FACEB68978D6346300C4E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d622fbc2-b442-3492-b99c-1065464fd21f.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        98.193.152.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:eb:68:97:8d:63:46:30:0c:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=bbd0f29f-0fc2-430c-8b6a-28daa8ad3333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:88:58:e1:ce:72:9e:03:7f:bf:19:de:f8:
                    14:48:5c:b6:78:f7:d6:c1:69:a9:82:f8:a4:f9:77:
                    8e:c0:ed:b4:b6:02:9b:4d:55:d1:2c:f6:e3:88:fd:
                    cb:64:00:d4:75:41:d4:68:8b:62:43:59:b4:ed:08:
                    25:06:66:f1:1a:35:8d:9c:f2:f6:db:45:ff:cd:f8:
                    88:8c:42:b5:dd:e2:0c:f6:b4:be:d7:0d:53:28:1e:
                    6c:71:9c:80:3e:20:5a:d9:b6:6d:53:9e:a4:a6:93:
                    89:6d:75:30:cf:f2:72:cf:c9:07:81:a1:ed:74:9e:
                    68:c0:4e:55:75:6e:2b:e8:e3:cf:04:b7:83:6d:d9:
                    95:a9:f2:79:ca:42:93:5e:ae:ef:9a:72:bc:f3:62:
                    16:28:c7:81:b7:96:24:e4:4e:ea:c8:11:47:93:2d:
                    65:19:9e:da:5a:30:50:a0:1d:b3:aa:7c:4e:7c:00:
                    c9:6a:6e:f4:7a:dc:70:b7:e6:d1:c1:62:67:fe:92:
                    a6:4a:31:47:64:49:52:52:23:72:73:6b:dd:fa:2f:
                    3f:4b:a2:77:3a:56:ef:f7:c6:49:4e:7f:82:25:b9:
                    46:54:2c:88:41:0b:3f:e7:06:53:3b:40:27:3d:43:
                    41:cc:f2:0e:5c:80:cd:8f:15:d3:38:4f:f2:4b:7f:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:68:5E:9D:52:BF:39:F9:CE:42:FC:77:AA:D8:E6:08:AC:DB:B6:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d622fbc2-b442-3492-b99c-1065464fd21f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.193.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:0a:f4:b4:c1:0f:dc:02:5e:de:16:d0:52:38:c3:b7:9e:0c:
         4c:d9:89:7e:df:5f:2f:00:2f:a8:33:f9:52:5e:66:e2:2f:02:
         03:ee:89:e0:07:73:d0:eb:6d:70:d5:b3:28:c1:04:bc:d9:27:
         3f:72:2c:ad:c8:c6:05:eb:dd:d2:ea:09:bc:ef:8d:dd:6f:88:
         11:87:b2:e8:83:f1:bd:72:ac:37:81:ea:a5:7e:04:7a:7d:a4:
         cf:33:2a:7d:ed:55:8a:65:1d:6c:dd:16:41:a3:71:1e:8a:b0:
         c8:27:f4:5d:f1:09:dd:11:97:ba:d4:c8:87:ce:c3:6f:b4:cf:
         1f:43:46:22:ec:ef:63:1b:95:79:ac:84:7b:27:4d:3e:6b:ac:
         66:9d:35:09:d5:e9:c3:70:e9:34:30:a1:3f:19:c7:71:14:4f:
         88:c2:98:e1:f6:6d:33:a1:a4:de:f1:71:1a:c8:f7:1a:43:55:
         db:b9:7f:b0:70:19:3d:cb:58:e7:ec:ed:48:0b:8e:24:a2:f2:
         f9:7a:25:5f:96:81:92:2e:b1:44:f1:d0:d0:bd:9b:2f:c5:36:
         81:e8:d7:a9:92:32:17:38:49:6c:a2:fc:83:14:dc:b2:3e:ce:
         bb:f5:de:3d:d0:d7:2a:86:0f:41:69:fb:f7:56:5c:d9:f4:78:
         1b:6a:60:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:22:40 2024 by rpki-client on console-ams.rpki-client.org