Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec307eae-c953-3403-b2a2-07f66b7d340d.roa
File:                     ec307eae-c953-3403-b2a2-07f66b7d340d.roa (raw, json)
Hash identifier:          KSy+Znw7BRBATXmQDEQoMNS9CAP34ZhR83B8qUrPcaE=
Subject key identifier:   96:0C:80:A6:F0:C0:CE:7C:46:C4:5A:D2:C7:DC:DA:C0:6C:5D:68:07
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7E26073326FEC1C7C1100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec307eae-c953-3403-b2a2-07f66b7d340d.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        98.243.54.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:e2:60:73:32:6f:ec:1c:7c:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=bf1f4e7f-8804-495b-b8d8-7f9bf1c6dcbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:1c:16:6b:2c:ca:3a:71:18:5a:6e:27:c1:
                    da:c8:ed:48:45:5a:e7:4c:70:2d:23:e4:11:db:f2:
                    a2:d2:1d:8f:f4:a0:ef:55:c3:e9:d4:f9:e7:80:d8:
                    19:09:5c:25:2d:4f:e4:81:b2:c7:11:65:6a:1b:95:
                    90:d2:c7:23:b0:bf:72:ad:8c:c6:6e:96:cb:62:14:
                    05:97:e0:35:a9:2e:58:c0:ca:b7:f6:b8:81:63:a9:
                    7b:91:1d:66:55:c8:15:3a:a0:30:3e:7a:44:33:1b:
                    31:78:1f:70:fb:2a:10:82:39:74:47:52:d5:8a:41:
                    15:bc:cd:09:c2:bc:55:2c:5d:7a:cc:ec:11:84:cb:
                    6c:40:a6:d3:b6:75:dd:05:41:03:db:41:31:3e:0c:
                    70:7e:71:7b:fe:0d:22:ec:8c:d5:2c:21:3b:fc:dd:
                    20:1c:40:ed:2b:ee:74:e2:48:3a:41:8f:01:c3:04:
                    5d:ae:0c:82:cb:50:38:c8:e4:47:e8:de:54:b1:ad:
                    19:d8:97:47:57:24:be:6e:d9:31:61:0f:4e:b4:b8:
                    4b:3c:8c:29:57:81:15:b9:83:ae:dd:43:f5:f9:13:
                    4d:16:ad:e0:ed:8c:aa:8e:96:04:ce:42:2b:e0:54:
                    c2:8f:de:12:4d:b4:8a:8b:04:3c:a0:a8:69:ff:da:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0C:80:A6:F0:C0:CE:7C:46:C4:5A:D2:C7:DC:DA:C0:6C:5D:68:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec307eae-c953-3403-b2a2-07f66b7d340d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.243.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e1:c9:a9:20:32:45:5e:47:e0:ec:57:43:91:8d:46:4b:da:
         8c:1d:74:3b:bf:e9:ef:36:fe:04:ed:42:a7:a5:4f:b5:14:e5:
         a1:e8:3a:f7:bd:b2:b1:fe:a9:fc:3c:d0:92:e4:79:38:04:10:
         43:e1:de:67:62:78:8d:5c:ee:01:de:61:bb:4d:91:ff:db:1f:
         cf:bf:8c:b1:1c:3e:be:1a:80:34:89:a8:a1:cf:23:57:e9:62:
         36:22:9d:84:5f:7b:82:62:b5:ed:a3:78:00:48:8b:08:ab:73:
         e6:09:8b:a0:f3:06:e9:c7:e4:25:db:cd:7a:64:24:ad:a4:b2:
         fb:cb:74:39:6c:d5:2b:42:c5:ec:e9:fa:42:d3:af:a0:d2:e0:
         1c:dd:e7:54:64:54:9d:78:cb:2a:5a:16:37:88:b3:5f:c9:36:
         2a:17:42:a6:69:44:4b:c7:34:4d:ec:3b:bb:7b:d6:79:4c:df:
         b6:79:93:d8:47:e4:8f:6a:76:99:c2:94:6e:12:d1:6d:1b:b9:
         d5:ab:ac:2b:5c:8e:c8:fc:69:61:3d:31:62:d0:c8:2e:a0:61:
         9d:aa:68:7e:95:80:71:38:df:ef:25:db:54:b6:b4:2b:85:fa:
         60:c4:80:8d:3f:aa:d7:6c:cd:36:3a:12:ae:76:45:e5:d4:45:
         27:75:84:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:59:05 2024 by rpki-client on console-fra.rpki-client.org