Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f664e0b3-0bd3-327d-9528-7e4661d538bb.roa
File:                     f664e0b3-0bd3-327d-9528-7e4661d538bb.roa (raw, json)
Hash identifier:          hgzND1rMH3BuNEluXhrj1hZV06JzlVAcynMKp9tNjrE=
Subject key identifier:   CD:44:E2:0B:D2:E5:22:38:13:F4:6F:46:79:C4:F0:05:49:2D:57:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB6FEADF637C01B52B7820
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f664e0b3-0bd3-327d-9528-7e4661d538bb.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        98.61.122.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:6f:ea:df:63:7c:01:b5:2b:78:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=e46a39ee-5d9a-4be6-b7e4-eded09bac49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:0f:62:e8:32:63:31:d3:f0:58:68:d7:94:
                    60:8e:81:55:30:66:91:37:df:eb:c0:30:b5:71:9f:
                    92:9d:06:2e:e6:23:4d:4f:5e:75:f9:84:f3:4d:24:
                    a3:92:13:15:15:90:79:4e:30:94:e7:e6:36:00:10:
                    54:09:fd:fc:3e:bd:ba:4a:94:f5:35:2e:4a:ab:f5:
                    1a:2f:c1:7f:3b:0d:4b:6a:00:2d:a2:20:15:58:f0:
                    63:8c:74:16:00:78:47:2c:5e:2b:e3:71:b9:74:d8:
                    4e:95:1e:a5:98:d4:4e:4f:43:50:2f:df:b1:2c:36:
                    71:a5:c2:3d:98:dd:3f:b7:f1:8b:54:6a:99:a8:33:
                    ed:9e:0e:de:27:f3:b9:ed:33:80:ef:0d:5a:35:63:
                    86:ea:f6:46:af:ec:5b:76:6b:d2:ab:ff:a0:e7:94:
                    07:17:1f:47:42:cd:17:9d:0e:2c:17:e4:bc:ac:6b:
                    7a:0e:84:0a:a0:bc:bc:a7:29:b3:60:7c:f5:24:74:
                    73:a2:01:9f:ff:e4:d4:bb:5a:1d:90:59:5e:32:4c:
                    41:5a:bf:48:ae:e0:fa:1b:7b:f3:13:06:50:57:f6:
                    2b:c5:45:55:bd:6b:bf:a7:8d:77:19:4a:07:c2:4f:
                    7a:77:17:d7:fd:a3:43:1b:9a:11:35:0e:30:47:23:
                    f7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:44:E2:0B:D2:E5:22:38:13:F4:6F:46:79:C4:F0:05:49:2D:57:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f664e0b3-0bd3-327d-9528-7e4661d538bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.61.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:a8:b8:1f:fe:ec:27:ec:4b:59:9d:71:01:0b:2f:76:ee:84:
         ad:ff:23:76:e8:11:f8:a7:19:23:a0:d4:57:14:d7:cc:da:c3:
         c1:b1:20:85:e2:64:e8:93:43:b7:15:80:84:e7:6e:a2:35:f6:
         a4:33:ae:ec:4a:32:f6:4a:04:7a:67:e6:44:ad:4c:36:77:05:
         57:9c:c5:c3:ca:c3:b0:7b:8b:e5:87:51:3c:52:52:fe:62:45:
         d9:59:15:e8:12:ce:ec:1c:75:f4:13:e7:99:58:44:f2:cb:b1:
         9c:65:05:39:be:67:ed:ab:6c:1d:5f:c7:7c:83:ce:3f:da:b6:
         e0:bd:e4:91:f6:e0:3d:2c:54:0e:40:d2:b6:60:40:e6:d9:8e:
         ac:08:d8:e4:ab:84:ab:fd:89:e8:6e:cb:8a:1c:87:84:b1:d0:
         e6:46:fc:ff:24:c8:25:6a:a6:2a:06:e2:67:25:f1:11:34:b1:
         c6:96:a0:e4:ed:96:8d:8a:bd:78:a8:db:81:45:5f:3e:a1:40:
         ae:51:bb:e7:79:89:d2:c4:0d:de:73:f1:59:a3:e8:bb:6a:ad:
         84:18:f1:0b:76:97:42:c3:d7:34:d6:5c:5a:97:2e:b4:19:f3:
         dc:4a:7d:ea:a7:ae:a8:fa:a4:c5:de:98:22:cb:dc:eb:08:f1:
         77:d0:42:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:24:35 2024 by rpki-client on console-ams.rpki-client.org