Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/ed434245-1d95-3e5b-b4de-d39e97f8557a.roa
File:                     ed434245-1d95-3e5b-b4de-d39e97f8557a.roa (raw, json)
Hash identifier:          ik39317bOI+hHxta2ojkZz572YpCmWp9jLxlURgkk0M=
Subject key identifier:   03:B2:6B:D9:3C:62:3E:94:2C:49:52:D1:FC:2A:45:E3:8C:EB:B7:AB
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584596334FE60A5F6DABEDE415A0
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/ed434245-1d95-3e5b-b4de-d39e97f8557a.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     21803
IP address blocks:        98.124.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:4f:e6:0a:5f:6d:ab:ed:e4:15:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=632a347c-d0a0-4e4c-b824-11a596ed693d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:13:1f:58:ff:ae:a0:ac:04:4a:85:41:07:
                    07:8f:d0:41:d9:b1:24:b6:da:42:06:c0:79:9c:93:
                    33:13:7c:c2:8f:d7:9c:af:b3:b0:1e:a2:3a:4b:c3:
                    bd:05:78:1c:8c:ca:e4:91:2c:c3:e5:70:c8:53:2c:
                    08:da:bf:b0:62:7e:03:db:c5:7f:a1:5d:40:12:b5:
                    8a:20:05:eb:02:9c:25:2a:ad:ce:49:30:46:f1:1a:
                    83:e9:e3:e5:02:99:73:15:4f:72:98:55:d1:e2:5d:
                    a0:1c:0e:28:d1:f6:ad:e4:c8:a8:03:5e:f1:08:eb:
                    ff:af:f6:95:05:ac:28:da:9c:35:3d:77:a3:23:e4:
                    e9:e7:2e:b0:35:f7:16:7b:2a:cc:5c:45:0a:71:80:
                    3b:2e:07:b7:0b:07:a9:07:fa:5f:9c:91:b6:31:26:
                    de:6a:83:29:c7:a3:ac:09:04:f7:28:b3:15:7c:6d:
                    aa:07:78:97:65:c7:db:19:8a:57:4a:ec:39:ec:0e:
                    33:e0:4d:0c:4e:55:66:a7:c7:d9:f6:c6:af:56:ce:
                    99:7b:2a:1f:03:e2:b2:c3:fa:7a:10:60:56:1c:5c:
                    fc:62:db:00:ef:74:c3:d4:ae:88:34:c6:bd:65:f5:
                    ca:60:e2:7b:9c:5e:1e:89:ff:d0:07:b1:40:cc:29:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B2:6B:D9:3C:62:3E:94:2C:49:52:D1:FC:2A:45:E3:8C:EB:B7:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/ed434245-1d95-3e5b-b4de-d39e97f8557a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.124.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d4:f1:b3:48:e3:12:94:e7:76:38:7c:8d:ba:52:53:80:1d:
         df:d4:8d:d6:cc:7d:49:ee:1e:66:e2:67:58:a5:ff:42:99:dc:
         77:6e:36:21:73:6e:e0:18:a7:b6:fb:1b:7e:ab:a7:1a:8f:51:
         dd:d8:5e:d8:38:c2:32:2f:dc:d2:7a:32:4e:c3:c0:87:e2:ef:
         b3:f6:b9:43:15:10:53:38:30:46:f7:fe:52:57:d5:81:7e:85:
         be:dd:80:79:b3:75:ac:77:63:c2:9d:ff:8e:d9:79:a6:c7:63:
         ec:9f:69:6f:73:8f:37:66:bf:5a:c4:2c:68:d9:17:d4:68:8f:
         e9:d2:63:84:ed:28:a5:72:cd:9a:43:de:0e:7f:80:8f:be:22:
         bc:c5:e0:88:bd:fa:13:62:a0:57:cd:d1:2c:6c:01:2f:88:95:
         0b:39:9f:11:5c:e6:9c:f6:94:0d:51:23:50:c0:45:f8:70:de:
         c1:81:6d:70:62:95:bf:5d:b3:5e:77:1e:ac:2a:ef:ee:63:0b:
         52:da:e9:6c:95:60:44:d4:14:9e:4e:a5:ce:9b:9b:d5:ed:cb:
         95:85:19:e0:6c:ad:a9:43:26:0e:7a:7e:f3:cc:8a:d3:89:2d:
         b9:90:18:9c:8c:7f:cc:ec:a6:ee:28:02:35:a9:c0:db:e3:50:
         4a:64:77:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:49:04 2024 by rpki-client on console-ams.rpki-client.org