Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db8f6df4-cb2e-3c4f-a6d7-b7b4e019d3a6.roa
File:                     db8f6df4-cb2e-3c4f-a6d7-b7b4e019d3a6.roa (raw, json)
Hash identifier:          NDCHtutJXp0Hkck6ihhmfir3ebGnkQ25rY4wSnMDpgM=
Subject key identifier:   B9:AA:44:44:EB:99:9A:2F:AC:91:BE:2D:C4:C3:87:62:5E:9E:A8:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D88ED357DFBA4A8747C60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db8f6df4-cb2e-3c4f-a6d7-b7b4e019d3a6.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        98.207.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:88:ed:35:7d:fb:a4:a8:74:7c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=2d9ce63f-77b2-42b7-9911-7bde2b39d92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:84:f7:d6:b8:d5:9b:07:28:7a:4d:13:3c:
                    6f:4f:9f:e1:29:d9:4e:0f:cd:1b:02:28:7d:09:60:
                    ac:9c:85:55:53:5b:9f:4b:f9:a4:ef:7a:e0:18:14:
                    52:f8:00:ab:f8:6b:e4:db:4f:16:ee:1c:ce:7b:5b:
                    f2:20:ef:ca:ef:fa:2f:67:b5:22:d8:56:3c:fa:1b:
                    c6:19:4d:2b:29:12:ae:e7:0c:d6:a3:2a:35:81:61:
                    d2:9a:c0:48:71:3a:ff:18:68:8e:b4:40:76:56:6a:
                    91:7e:36:e4:a3:d0:31:d4:ec:2f:f1:2c:61:9f:27:
                    14:12:c5:69:7e:34:cd:12:3f:1f:b8:29:6c:6a:b5:
                    cd:19:2e:7e:9d:94:b4:14:b3:9b:b3:8f:44:0d:05:
                    5e:c6:70:72:76:94:9d:86:7f:52:a7:5c:19:f9:49:
                    bc:e9:63:0b:cd:c4:1d:24:bb:ea:e5:2b:e5:6a:24:
                    2b:d7:10:fe:b1:8a:41:d0:e5:d7:92:bf:74:ba:50:
                    3a:66:f9:80:01:00:c0:0a:86:b5:24:97:f1:6e:ea:
                    13:59:f8:8a:8e:8f:08:c8:c1:55:67:49:f5:07:32:
                    cf:c5:b5:c9:da:80:26:2c:39:97:91:79:57:17:77:
                    56:f8:86:7b:d2:aa:f1:42:70:47:06:ef:17:38:23:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AA:44:44:EB:99:9A:2F:AC:91:BE:2D:C4:C3:87:62:5E:9E:A8:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db8f6df4-cb2e-3c4f-a6d7-b7b4e019d3a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.207.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:73:43:ac:a2:54:a8:41:27:e6:b7:49:2d:0f:bf:ac:c0:b0:
         a0:89:5a:3f:da:c7:70:01:d4:3c:48:4c:1a:1c:8b:17:58:25:
         24:e5:15:03:d3:78:bc:1f:5a:f9:59:c8:c4:48:8a:0b:bd:b4:
         ac:dc:f2:0f:d7:c8:98:5a:ec:91:68:99:2e:e5:8b:77:0f:f1:
         b0:6e:9b:f1:22:80:50:49:3b:a9:74:59:4c:15:1f:83:6c:6d:
         8d:20:3e:45:9f:21:4a:09:19:f1:5f:9b:6a:e9:2b:d3:78:4b:
         77:94:bf:e4:41:24:41:07:36:19:ba:5a:77:f6:e1:0c:21:45:
         02:22:e9:5e:b8:aa:5e:f9:90:f4:bb:b9:bb:0d:e0:e8:b4:6f:
         29:f3:0c:93:22:5a:39:43:32:86:be:bd:57:8a:7e:ea:9a:4c:
         27:61:73:91:de:0d:df:16:5e:6d:65:25:69:79:69:2c:2c:6a:
         9f:5b:f5:b8:99:9d:65:97:ec:bc:a9:29:19:14:ca:ac:5a:99:
         e8:93:27:c2:74:bd:98:8d:7e:de:c7:90:40:05:11:2c:9e:f1:
         71:64:62:d0:15:aa:9f:e4:33:c4:c0:bd:4b:36:9d:4c:98:a5:
         82:c2:47:44:09:c0:a9:96:f2:17:c4:dd:12:58:ce:1a:12:b7:
         ac:9f:79:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:36:12 2024 by rpki-client on console-fra.rpki-client.org