Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ead04ef3-a712-39e6-aeb5-ccd6e50a7fcc.roa
File:                     ead04ef3-a712-39e6-aeb5-ccd6e50a7fcc.roa (raw, json)
Hash identifier:          RZiFqwD3i9B6Bvl0Mk93CesCNj/g8hcpgCyCpsW0ZIs=
Subject key identifier:   44:80:FE:76:7C:7E:E3:E0:23:93:D7:46:53:8D:CD:4B:4E:29:ED:08
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584754E0E1B6C6650970C6362880
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ead04ef3-a712-39e6-aeb5-ccd6e50a7fcc.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     137409
IP address blocks:        98.159.39.0/24 maxlen: 24
                          173.244.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:e1:b6:c6:65:09:70:c6:36:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=895efc06-7664-40ae-a9b1-75f47e933b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:66:8e:a3:81:2c:6f:12:bd:2a:da:d9:1b:30:
                    23:48:ee:41:ee:70:8c:00:48:b0:ef:90:97:3c:41:
                    3b:f7:13:be:44:ff:5e:45:4d:1c:f7:c0:cc:d1:d1:
                    cf:fb:ed:2e:a5:f5:44:ed:ec:a2:6e:ea:28:84:ab:
                    f6:d9:f3:c1:5c:da:f8:8f:fa:92:fa:c1:74:fe:f1:
                    94:2e:eb:d2:98:f6:83:b1:28:fb:5a:25:d7:98:69:
                    b6:e8:d3:67:d6:44:70:f9:fc:18:ec:2d:82:5b:8a:
                    99:c4:2d:39:04:c4:4e:8a:97:26:4d:57:72:0b:17:
                    eb:29:03:a0:fa:13:53:80:5a:a9:2c:a8:2f:6c:04:
                    62:82:3e:1f:f0:fd:b6:b2:41:41:97:e1:a2:c5:87:
                    52:0b:98:60:84:a9:64:9b:6e:b2:5c:2b:a0:7a:bc:
                    42:70:9f:fc:ea:17:44:50:8f:87:2e:01:87:52:4e:
                    d2:5c:24:a7:e2:cd:27:5e:7d:e5:9b:44:48:57:a1:
                    f6:d8:1c:ab:7b:8e:45:59:5a:e5:90:53:fe:6c:95:
                    9c:2c:03:52:14:28:51:99:0d:18:00:a6:e1:b2:bc:
                    45:e3:bd:5e:10:44:fd:96:0f:7e:ca:89:08:b2:e7:
                    07:af:4d:92:95:b5:39:56:cc:72:e1:84:9b:b0:70:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:80:FE:76:7C:7E:E3:E0:23:93:D7:46:53:8D:CD:4B:4E:29:ED:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ead04ef3-a712-39e6-aeb5-ccd6e50a7fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.39.0/24
                  173.244.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:37:a1:d2:41:d7:28:79:3d:89:a1:7e:fa:76:49:57:36:5e:
         e1:d5:a8:51:0a:5d:9c:17:0d:b7:69:7c:e6:a4:77:5e:ce:4e:
         ce:23:29:b4:df:90:3d:d5:1f:92:15:ca:43:ce:bb:da:b2:8c:
         22:d9:bb:9a:bb:74:86:fb:7d:d6:63:de:9b:5b:55:39:6c:08:
         d8:57:73:53:a9:f8:63:8c:f7:c9:ea:bc:16:fc:af:e0:1c:48:
         5f:2c:f8:35:9f:c6:f5:12:e0:3a:d6:d0:c8:7a:ee:84:37:97:
         0f:6a:09:aa:e6:6d:c4:fa:54:ad:9d:99:07:7a:c2:4a:ef:0b:
         e1:de:a1:a2:af:86:25:3e:88:97:20:ff:93:d2:68:95:ca:05:
         4d:d3:d2:51:02:0a:84:ec:0a:41:6a:18:7f:d6:ba:87:01:c4:
         43:fc:de:ab:44:82:df:54:ad:70:42:71:11:0d:5a:9b:53:f7:
         53:00:b5:a8:4a:c8:44:7a:7e:c0:11:6a:73:28:7b:87:89:f7:
         d1:35:c8:8b:a0:35:e4:5f:cb:c8:19:cb:74:08:3c:08:64:0f:
         5b:14:5f:dd:95:97:08:e5:fa:de:e9:a2:81:81:7e:3e:6d:dd:
         0c:15:63:be:72:62:2c:82:1d:02:32:19:f1:d1:81:cf:ae:b4:
         96:f1:65:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:59:50 2024 by rpki-client on console-ams.rpki-client.org