Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/faa79483-b5a8-3587-9ce4-3750163d13fe.roa
File:                     faa79483-b5a8-3587-9ce4-3750163d13fe.roa (raw, json)
Hash identifier:          3GxVWDcdFaMuCJ+y0slB/7jDHq2DXVXgFza1L2xoGCs=
Subject key identifier:   A8:FC:F7:24:5A:C3:25:2A:76:6D:3E:FA:50:6D:26:29:EA:B7:84:81
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9D9E2B0EC9114B88EE5A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/faa79483-b5a8-3587-9ce4-3750163d13fe.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        98.42.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:9e:2b:0e:c9:11:4b:88:ee:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=d0ef1e61-6aa8-4a6e-aa32-b79a91bd97ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:b1:fd:2d:46:e5:3e:b3:3c:d7:3f:ca:68:
                    f4:d4:a6:b8:68:a8:0c:f4:bc:da:62:ef:b8:46:bd:
                    44:1c:cd:81:0c:63:af:a4:29:19:8a:35:72:2f:2b:
                    8d:f7:c5:d2:f9:ae:6e:13:f1:91:94:42:2a:a8:f7:
                    21:fd:21:64:4b:e5:f9:d6:46:b6:51:8d:56:c8:87:
                    11:57:25:e4:00:61:34:2f:44:22:aa:cd:8b:30:aa:
                    3c:02:3e:7f:6c:8d:df:83:b6:69:b1:05:3a:3e:d4:
                    2c:ab:52:f3:5c:ad:cb:38:90:35:b2:45:9f:55:54:
                    3e:b1:56:e0:c5:31:e8:f2:62:9f:23:f7:46:f3:dd:
                    a0:6b:75:a2:f3:dd:11:f1:a1:fb:af:d2:85:55:97:
                    28:97:2f:86:35:71:16:b4:3c:78:50:f6:ce:f1:6a:
                    b2:55:8b:b2:20:6e:96:00:3d:f5:66:92:d3:44:3b:
                    79:c7:39:d4:e0:ff:64:78:2b:27:59:70:42:e6:70:
                    7a:4d:c8:98:fc:0c:15:ad:5b:e4:ee:7e:5d:5b:4f:
                    bb:0b:d9:43:ae:48:36:b0:d6:01:fa:de:ac:96:7b:
                    bc:6e:6c:67:8a:6f:bf:30:80:a3:59:bf:2d:ba:3b:
                    64:3b:d6:d4:4a:75:0e:69:09:84:f6:4e:2d:18:05:
                    77:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FC:F7:24:5A:C3:25:2A:76:6D:3E:FA:50:6D:26:29:EA:B7:84:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/faa79483-b5a8-3587-9ce4-3750163d13fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.42.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:31:c9:90:7a:7b:3f:13:0f:2b:76:56:cb:99:cb:be:14:4c:
         7b:94:cc:dc:b3:43:c4:79:cd:b1:1c:4d:04:07:34:14:7c:47:
         cc:55:bc:30:0d:3c:7e:31:d7:9c:81:3c:0e:cb:2d:60:06:ba:
         e0:8d:56:96:fa:fd:5e:2f:09:9f:3b:d3:89:2c:02:03:31:83:
         51:f8:51:93:4a:85:cf:41:d4:b7:77:e3:7d:88:d3:b2:55:07:
         8f:9d:37:63:c5:41:bc:84:06:94:9f:67:d6:83:52:4b:a3:6f:
         61:79:9a:a8:28:f6:ae:6e:ec:f7:83:4a:79:ff:24:6c:77:bc:
         3b:fb:ce:ba:06:91:9c:7b:e5:6e:3c:c5:8a:19:b4:e0:f5:ae:
         4d:29:29:b2:f3:de:6d:31:0f:72:1a:f9:c2:b8:ae:f6:97:1e:
         a5:b2:59:e2:c4:e7:f3:d1:94:16:d0:30:05:97:44:53:38:72:
         04:db:41:c2:81:05:a6:e5:55:d8:0b:52:e9:60:77:ea:0d:fb:
         c7:0b:ed:87:49:89:9a:a5:85:c4:ff:11:cf:d5:fe:48:d3:48:
         af:6e:dd:98:55:14:f3:0f:63:65:e6:52:97:43:4e:9b:aa:d4:
         f7:e6:25:03:a9:e8:bc:6e:0c:ad:a2:82:99:d6:25:eb:9e:e4:
         1f:fd:11:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:38:52 2024 by rpki-client on console-fra.rpki-client.org