Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9091a13-55a4-3537-a495-c84e25504b9e.roa
File:                     d9091a13-55a4-3537-a495-c84e25504b9e.roa (raw, json)
Hash identifier:          bbYyDzO1jGJH4s5X3I+7J0EUVg4vAR63uovm9gQMXWI=
Subject key identifier:   83:ED:B8:4B:9E:25:77:8E:81:0B:0E:FE:F7:F4:7E:48:8D:C6:4A:E9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C848020B8FB3AA03E72200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9091a13-55a4-3537-a495-c84e25504b9e.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.195.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:48:02:0b:8f:b3:aa:03:e7:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=aef54633-c826-44ee-a89c-edbbc2bead8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:43:50:5b:de:c4:2b:1b:b8:17:2e:ef:11:
                    b0:61:3c:f7:54:29:0a:12:a4:60:67:b9:a9:92:0b:
                    9d:61:53:19:93:53:dd:54:aa:04:f0:b2:3d:08:27:
                    00:8c:d8:29:4a:ea:92:75:b8:f8:ec:a2:35:a4:5d:
                    67:86:27:f1:96:7b:28:8f:df:75:63:55:c3:e0:67:
                    f1:a6:0c:25:0d:20:42:74:fb:17:d4:7c:04:ab:03:
                    73:c9:8e:91:90:c8:f4:43:0c:c6:bd:c7:03:9f:19:
                    45:d1:ba:b8:1d:18:19:e1:92:1c:d4:60:14:cf:be:
                    76:9a:ff:27:7e:c9:d0:6f:15:52:ab:73:5d:7d:df:
                    fe:0e:1f:81:20:f3:6f:69:d0:c9:50:aa:d8:e7:c8:
                    e8:65:51:b3:19:b3:da:b3:18:7f:1e:05:e0:1f:05:
                    3f:f5:8c:ab:37:93:09:2a:6d:8f:70:f3:9e:69:68:
                    51:1c:77:ca:1a:2d:f6:9b:c4:11:30:59:34:7c:8d:
                    40:7a:aa:8c:c6:e4:83:ab:80:10:da:a8:4b:38:ed:
                    f1:f5:c3:af:08:3d:24:54:1e:38:ed:37:70:1d:8a:
                    ab:e0:89:63:3b:d2:da:f4:da:c8:6e:a2:d7:25:cd:
                    82:8e:a3:35:6d:9a:b9:54:f7:3d:bf:8c:6c:f1:a6:
                    59:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:ED:B8:4B:9E:25:77:8E:81:0B:0E:FE:F7:F4:7E:48:8D:C6:4A:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9091a13-55a4-3537-a495-c84e25504b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.195.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:77:fe:d1:b1:bb:af:5e:3d:ad:62:ad:2a:4c:85:08:3c:d0:
         a0:e4:eb:b6:3f:19:f7:45:49:23:b0:77:e0:0c:36:35:f8:36:
         62:fe:3f:dc:bf:83:57:05:96:f9:6d:2f:04:b4:98:7d:f7:d9:
         78:a0:4a:a5:60:ae:46:dd:6b:f2:8c:ce:c3:11:88:d3:95:3d:
         ff:2e:46:79:aa:b3:79:f4:e6:a3:39:65:c6:17:f9:71:6f:d2:
         01:2c:97:5d:89:c7:fc:b2:bd:5b:18:80:1c:ec:f4:f6:f5:97:
         b1:7f:e5:de:e7:f9:4e:ae:52:f3:bb:78:d7:2d:99:72:bb:55:
         77:50:67:8c:cc:b0:78:1a:10:30:b2:91:ff:76:db:40:70:61:
         f0:4b:7b:45:b8:6b:5f:fa:f8:97:6c:eb:14:5c:34:fd:ec:82:
         96:c5:9c:e7:5d:c4:f5:2b:c7:17:37:0f:61:98:87:60:57:17:
         2f:f4:e9:dc:dc:91:be:c4:ae:fa:aa:85:00:18:02:fe:27:3b:
         79:a3:74:39:2e:1b:63:39:76:81:10:96:ee:67:6d:da:ea:12:
         cb:54:c6:e6:9b:55:96:24:da:ff:81:c4:9f:9a:e2:85:6e:0c:
         41:43:36:c4:b0:29:37:b8:f9:67:e8:39:ad:2a:93:eb:3d:5a:
         d1:02:af:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:14:01 2024 by rpki-client on console-ams.rpki-client.org