Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7a3d57d-15fc-31db-888f-a527adfb6601.roa
File:                     e7a3d57d-15fc-31db-888f-a527adfb6601.roa (raw, json)
Hash identifier:          fTOvvbdwbRs+IxBvSLQJUYpQw8ofqamyIKoajkTLnbQ=
Subject key identifier:   48:CE:AD:BB:A2:90:A0:28:64:39:E0:9C:FB:BE:99:07:05:B3:86:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7DEC3107E72C2C489F180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7a3d57d-15fc-31db-888f-a527adfb6601.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        98.243.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:de:c3:10:7e:72:c2:c4:89:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=dabc2ca3-173b-4f00-8db7-5e530a4e09e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:7e:ed:bd:af:3a:2d:d6:66:90:e1:29:c5:
                    ad:6c:73:a9:d5:ce:bb:ad:89:4d:cb:a4:e4:b2:58:
                    c9:95:4d:6c:f6:89:e0:bc:3a:44:a9:f9:c2:10:3c:
                    9d:4e:ae:f4:f9:84:04:73:1e:d2:b3:9a:9d:0d:68:
                    ff:d3:2e:1f:ec:90:89:6c:27:03:81:86:c7:c8:05:
                    6b:92:df:fa:fe:dd:37:6e:b2:c5:18:d1:64:35:8b:
                    e4:1c:b0:ac:d1:fd:03:b3:89:29:98:37:b3:54:93:
                    83:5d:80:cc:93:b7:e2:32:1a:40:a9:a1:f2:f4:6c:
                    2c:f7:12:1f:a6:7c:25:a8:74:fe:7c:16:05:a3:90:
                    e5:e4:57:c9:a7:74:38:37:61:37:a3:5b:4a:e5:73:
                    0d:3b:db:36:51:35:da:5f:44:03:46:3c:ab:e4:53:
                    29:00:1b:ff:50:4e:a1:51:cc:a2:e1:e9:a5:7b:66:
                    4b:db:8d:43:ad:90:4a:3a:b8:13:77:7e:82:f4:ce:
                    4b:5e:ad:eb:d1:30:5e:97:d5:55:8e:82:5e:5c:cc:
                    84:9d:f0:c6:20:e3:e8:77:2d:3a:2f:31:d8:fc:83:
                    c8:47:52:df:cc:50:e2:7f:28:93:50:fa:99:04:20:
                    80:52:76:e9:50:2e:2b:3a:2f:af:ef:75:8a:70:99:
                    74:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CE:AD:BB:A2:90:A0:28:64:39:E0:9C:FB:BE:99:07:05:B3:86:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7a3d57d-15fc-31db-888f-a527adfb6601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.243.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:4b:32:64:51:fa:d4:b4:06:7c:bd:cf:a4:d0:31:5b:e6:da:
         55:19:17:bc:69:de:bb:26:58:6e:78:5f:cd:06:93:21:94:65:
         3e:ae:10:27:91:e8:16:15:3d:80:07:53:1f:b6:73:03:a4:dc:
         0b:a3:0d:f1:b9:07:ee:10:3c:6c:e7:2d:84:8c:19:2b:31:34:
         c8:7c:90:24:62:df:e9:d3:4f:15:62:72:d9:47:73:62:3f:4e:
         49:c9:d9:0c:0f:f3:8c:1c:d8:7b:b0:56:ea:cc:2a:da:38:22:
         d6:af:be:a8:87:55:f8:7f:cf:d0:c1:1c:ad:c3:e7:9a:ef:d5:
         71:11:77:51:39:91:c0:61:e2:84:c2:fa:18:a9:a3:e6:02:57:
         52:a4:ca:75:36:dd:11:4e:dc:8d:d9:83:29:a6:3f:54:78:6c:
         32:be:59:41:e9:03:07:f5:9c:7f:6e:b3:0d:b7:f7:09:bf:c8:
         64:d5:b5:46:c3:5c:10:c8:ae:52:49:48:75:6b:f9:d8:f8:02:
         8a:b7:d1:2b:89:ee:e3:b0:96:33:33:ba:f9:f3:9f:1a:79:32:
         3e:a1:a6:35:ee:6f:40:6f:19:6c:f1:f3:c1:5e:ff:92:9f:7d:
         75:2e:ee:f6:76:b8:15:33:76:99:3d:a4:54:39:a0:f5:0c:eb:
         58:bd:2c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:58:42 2024 by rpki-client on console-fra.rpki-client.org