Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/d4080b73-3ff2-3a2a-a0a1-5b1c6a20173a.roa
File:                     d4080b73-3ff2-3a2a-a0a1-5b1c6a20173a.roa (raw, json)
Hash identifier:          XppwOks2ePEqY6e/3KjtkWukHDL3SvruqobNyLPZA0g=
Subject key identifier:   3C:4B:0E:69:05:51:24:8B:DC:38:14:07:E7:10:F4:0A:60:28:A3:EC
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F43285845D933A9EC83CD1A89B0F01400
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/d4080b73-3ff2-3a2a-a0a1-5b1c6a20173a.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     32636
IP address blocks:        98.124.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:a9:ec:83:cd:1a:89:b0:f0:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=96a4255a-7254-4030-9c82-cc1c3e15bf78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a1:bb:38:8e:cf:b4:9a:26:6e:ef:8d:a9:3a:
                    3f:93:b5:bf:a1:81:f6:f5:30:b7:ad:55:f1:ea:78:
                    a8:29:e3:06:6a:5e:1c:c2:cf:43:7d:ce:61:c3:ac:
                    6f:b1:ce:43:8f:14:b4:24:da:7f:85:ae:6b:79:9a:
                    77:e8:86:c3:6b:cb:c7:8c:c0:8b:16:47:66:cc:5a:
                    ea:25:a4:99:19:08:dd:1a:a6:83:19:5c:0f:79:84:
                    1b:21:56:ff:75:a4:69:02:c6:61:56:da:82:29:75:
                    44:82:a6:2e:fd:2e:2f:c2:8e:b3:66:9b:c6:ec:ba:
                    d1:c6:ee:c6:e0:28:b5:32:c5:9a:36:90:4b:09:c4:
                    e2:94:bf:3c:dd:2b:c0:a7:40:ee:46:ce:af:18:e1:
                    8e:16:79:9c:34:9e:b5:a7:9f:78:ac:86:c5:4b:6d:
                    b3:d7:20:f9:6c:08:45:8f:30:cb:d4:1b:75:24:06:
                    38:dc:9d:4e:be:a5:6e:1c:80:8f:42:3f:64:40:07:
                    af:f9:61:3c:3e:b2:9e:90:f6:bf:9d:63:75:45:ce:
                    36:7e:70:eb:46:cd:77:9d:29:9f:79:80:50:89:36:
                    ee:03:72:f4:5e:57:ec:ae:1d:09:6d:af:38:d0:bf:
                    4d:60:01:0c:92:eb:e4:3b:87:4e:1e:9e:6d:d7:67:
                    a2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4B:0E:69:05:51:24:8B:DC:38:14:07:E7:10:F4:0A:60:28:A3:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/d4080b73-3ff2-3a2a-a0a1-5b1c6a20173a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.124.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:63:28:64:a9:6b:dc:63:e8:74:31:a9:d5:ba:15:f3:49:a7:
         63:9e:bd:b0:4d:14:56:6e:df:aa:9b:0a:13:f4:51:83:ee:fc:
         d8:99:36:eb:06:cf:da:58:2c:8b:b9:18:bf:d8:16:e1:c5:d7:
         b3:0b:f7:c8:ce:e0:74:53:e5:61:1f:1a:15:e3:92:ab:bc:39:
         4b:17:1e:15:20:f0:76:43:72:e8:d8:d7:97:e1:92:74:2d:10:
         aa:1d:de:e6:d5:1f:5f:2a:1e:07:0c:97:37:b8:10:13:d1:25:
         26:a7:ea:7a:8e:ff:47:06:76:4d:b6:de:80:bf:c0:39:0b:ca:
         06:1c:17:ea:68:de:fc:f5:93:75:de:b1:ea:7d:fc:a3:67:91:
         5a:1f:39:ed:99:7c:11:0d:1a:d6:58:f9:7d:c4:1a:9b:ff:58:
         e7:90:00:25:9a:41:cd:ca:35:7e:7a:11:a5:80:f2:0d:43:5c:
         0b:96:7d:a1:57:91:be:95:2d:50:b5:4a:c6:da:44:1e:d9:a0:
         4d:ae:ea:d0:b4:67:ee:6e:d3:75:0d:54:e7:10:b7:cf:3b:96:
         70:43:af:68:71:0a:89:85:9d:02:d0:85:cf:ca:0b:46:b1:47:
         bc:81:e9:3d:b2:e5:c5:b0:1b:bd:be:6b:ca:e7:ca:40:d3:f9:
         75:31:1d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 18:45:10 2024 by rpki-client on console-fra.rpki-client.org