Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2f423d5-5546-3bbe-ab70-458830b471ba.roa
File:                     f2f423d5-5546-3bbe-ab70-458830b471ba.roa (raw, json)
Hash identifier:          USmEe43esNnY3hAeve8LWWv5V0z8dT1r/d6SFvPJhHo=
Subject key identifier:   7C:59:5F:02:91:3D:F7:B3:86:E6:FA:A2:42:60:32:AC:37:EF:52:07
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C858AF10679B49744AFC40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2f423d5-5546-3bbe-ab70-458830b471ba.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.199.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:58:af:10:67:9b:49:74:4a:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=57e892da-5757-49f7-9a04-66772eb37e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:be:17:f7:33:a7:49:6a:34:79:26:a3:1a:6c:
                    41:dd:a3:d9:fb:30:11:e3:47:21:87:e8:b1:19:b5:
                    33:ef:f1:df:55:2d:58:d6:39:b7:b9:3d:fb:9f:ed:
                    9d:ce:1e:76:de:22:0d:e0:73:1a:60:74:e4:bd:d3:
                    8d:8d:51:e8:47:21:04:02:54:29:7b:bb:dd:8b:7a:
                    0f:b0:58:ed:02:87:d5:29:98:d2:88:ac:b1:a3:89:
                    8a:21:8c:e5:5f:21:c9:40:e1:d6:fd:54:e9:30:40:
                    90:e1:f2:ad:cd:63:cd:63:63:e9:03:41:fc:02:80:
                    96:e1:3b:81:0d:3c:b4:09:0b:92:5b:ec:5b:3d:24:
                    ea:8d:78:53:5e:48:09:e2:28:71:c9:ce:4b:b0:08:
                    70:6c:d1:13:fb:3b:78:14:b9:cf:85:ef:09:02:3d:
                    96:13:80:43:bc:0e:eb:35:fb:e3:8b:25:f7:08:e1:
                    f7:4c:29:4f:9a:f5:10:0b:2d:99:71:66:d1:94:5c:
                    1c:fc:c0:98:2e:26:a6:ee:6f:78:90:7d:c1:c2:82:
                    e4:94:36:55:31:fa:49:a8:b7:ab:0e:c6:33:6c:fa:
                    9a:c2:e0:d6:dc:92:1f:ee:7a:00:af:7b:54:30:44:
                    d2:5e:7c:aa:89:ea:28:83:17:0f:67:2b:95:49:d1:
                    9e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:59:5F:02:91:3D:F7:B3:86:E6:FA:A2:42:60:32:AC:37:EF:52:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2f423d5-5546-3bbe-ab70-458830b471ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.199.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c9:e0:3e:51:3f:b9:4c:40:d3:ef:fe:44:67:a2:45:cc:8c:
         99:75:b9:f2:a6:b8:bb:dd:3d:f1:d5:e0:6c:bc:12:e9:94:e6:
         c0:37:1d:16:35:cd:8a:6f:65:b4:04:cf:6a:bf:c1:f7:1d:0d:
         3d:27:8b:35:47:f3:11:eb:52:5f:9e:27:05:10:97:70:b0:46:
         24:73:f5:aa:4c:dd:e8:56:90:1c:3c:6b:a6:43:ab:09:36:db:
         89:e1:55:7b:06:4d:4f:d5:c7:fc:a8:61:bc:e9:02:c4:4d:11:
         6d:77:11:a6:c8:2c:f0:f0:da:81:1c:ce:76:be:f8:d1:c3:f8:
         13:c6:15:6c:91:52:8c:a0:27:bf:27:d4:fa:48:4c:2b:cf:f3:
         4a:18:d3:7a:16:83:8f:34:8c:23:a8:c4:61:96:3a:97:b0:08:
         3a:65:f1:5d:5e:c0:19:a8:81:94:86:99:54:e7:a0:dc:db:35:
         51:5c:7a:62:94:8c:fb:82:1c:8c:77:21:c5:59:5c:4e:0d:94:
         e9:67:00:82:e4:6a:46:de:2e:a8:7e:2c:e3:64:39:4a:58:1a:
         2a:fc:03:5b:9c:de:e6:d1:9b:2d:27:d7:e2:fd:f9:bf:5b:ee:
         c2:b5:14:b6:6a:47:cd:cf:4b:c2:2a:79:fe:47:b7:05:df:df:
         84:98:8b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:48:59 2024 by rpki-client on console-fra.rpki-client.org