Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3c39075-dd4f-3269-87db-cd32f515565e.roa
File:                     e3c39075-dd4f-3269-87db-cd32f515565e.roa (raw, json)
Hash identifier:          8mERS36vZEmavF48rP2B4UFzA5o9TGFEDeWmabMw9oc=
Subject key identifier:   C4:10:52:C0:BB:68:B6:71:1B:88:76:F0:C2:8C:38:0A:F0:71:76:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAFBA16A066C15E8D3B0BB0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3c39075-dd4f-3269-87db-cd32f515565e.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        98.59.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:ba:16:a0:66:c1:5e:8d:3b:0b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=0943d1f4-7513-4e2f-bb82-beed0c347de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e0:ec:fe:06:eb:f8:12:0d:ba:60:70:93:ff:
                    51:c8:3d:67:aa:a9:f7:23:1d:e1:b5:92:07:48:67:
                    66:12:57:44:6d:c5:9c:64:2a:14:ef:a8:ad:89:52:
                    79:ed:a8:4a:e7:1e:85:a9:66:cb:b4:49:5d:2b:1f:
                    f6:47:3d:e9:fc:a9:6e:40:05:4c:17:8c:92:57:14:
                    08:6d:18:91:df:a2:7e:79:52:79:63:90:b7:4e:b4:
                    7b:37:8e:3d:a6:92:f5:4a:59:ca:94:8d:61:af:a4:
                    ef:ee:47:8d:e5:ac:f8:5b:e8:c2:00:90:d5:e8:59:
                    40:d6:15:54:2c:da:8f:cb:ea:9e:0f:73:10:b0:0a:
                    77:09:af:ae:97:d8:b1:05:54:73:3f:22:3a:c9:2f:
                    ac:d4:9d:cc:3c:5b:89:ff:4e:10:74:fe:42:f2:d5:
                    e6:a0:d2:1e:f8:37:8c:21:58:4d:30:62:c3:ec:92:
                    33:8a:6b:fc:55:a9:ba:b7:a8:21:30:17:80:d2:33:
                    73:50:11:e7:7b:b9:3d:76:ea:a6:ed:89:c4:e3:5c:
                    dc:a5:5c:71:b2:2d:e2:d9:89:af:ad:e1:74:be:f9:
                    c4:bd:e6:3f:af:87:63:1e:bd:25:07:62:43:be:d6:
                    e5:48:8e:03:62:30:38:bd:b1:89:60:32:49:e4:d4:
                    92:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:10:52:C0:BB:68:B6:71:1B:88:76:F0:C2:8C:38:0A:F0:71:76:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3c39075-dd4f-3269-87db-cd32f515565e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.59.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:fa:83:39:a7:9c:bc:7f:20:b3:bf:e2:6c:63:0d:c7:60:a6:
         e7:24:13:0d:74:87:d5:80:ae:1c:82:94:fb:45:e7:e0:0e:d9:
         9b:f1:88:57:78:20:38:a0:a1:d3:c1:11:dd:41:3b:45:9c:a3:
         f6:8c:49:94:a9:8e:a5:85:cf:08:9a:6d:bc:fe:3d:da:39:59:
         70:f9:a9:02:7d:4d:23:a3:3d:a6:fb:b1:69:7b:f2:66:9d:47:
         95:00:25:81:7b:43:33:84:d3:ac:6a:72:b4:1f:15:47:31:80:
         7a:84:9e:57:be:f9:91:ee:8b:17:36:8d:f9:09:d0:01:82:76:
         2a:32:ed:c6:75:4e:17:b4:5d:5f:29:48:09:13:f2:5e:f7:01:
         bc:46:b3:fe:d0:58:69:d6:85:4a:a2:f6:0d:70:22:ac:73:8f:
         9b:8a:bb:36:57:1f:20:f7:67:cd:bb:74:2a:f6:24:f2:96:c9:
         fc:f5:c2:2d:ee:d5:36:bd:07:3e:cf:3c:60:9f:01:3e:6e:19:
         e0:d5:7d:60:b2:86:0f:99:99:7b:55:04:d1:cb:71:55:2a:7d:
         d9:30:38:88:16:62:04:e6:ef:24:c0:b3:86:4d:81:46:ad:7e:
         45:d1:07:9c:7d:a4:09:46:90:04:ac:ad:77:b5:b8:b2:6d:4a:
         b1:21:e3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:48:15 2024 by rpki-client on console-fra.rpki-client.org