Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c/af2bbe75-fc60-3979-bbc4-03ad552dc53d.roa
File:                     af2bbe75-fc60-3979-bbc4-03ad552dc53d.roa (raw, json)
Hash identifier:          A4ZOz++SsfFtkOWU0Kz1zM8JWyoSHQ9AFU0TfNlKlkw=
Subject key identifier:   6B:CC:2E:31:6A:E2:BD:F0:B3:D5:CE:40:79:EA:0D:19:BD:F5:83:36
Certificate issuer:       /CN=4cc1eaba-95c4-4b20-a824-3ee7d92adc0c
Certificate serial:       010D0C9F4328584738F5FEC967CD410D2C368240
Authority key identifier: 02:F9:8A:03:95:94:29:ED:32:1F:86:52:F9:5B:FC:BA:3B:B2:0F:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c/af2bbe75-fc60-3979-bbc4-03ad552dc53d.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     16509
IP address blocks:        98.142.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:fe:c9:67:cd:41:0d:2c:36:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc1eaba-95c4-4b20-a824-3ee7d92adc0c
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=6c820e86-a005-48af-b96f-5f1a9cc75115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:a8:aa:2a:16:78:8b:98:7a:e5:27:14:52:
                    c1:04:89:75:7a:17:fd:4f:60:04:b9:1b:69:6d:9e:
                    3f:3a:3e:ed:11:08:70:ad:2d:02:18:f8:24:95:e2:
                    36:5e:b7:f9:09:eb:0f:33:27:96:d6:8f:13:71:1b:
                    a8:37:50:fe:da:dc:b2:5d:04:4c:b2:b8:aa:54:ab:
                    bd:83:67:01:0e:29:de:89:c6:41:f3:1f:c4:70:8d:
                    a2:16:ed:ed:8d:d0:2b:8a:28:43:f5:8a:c3:ad:a0:
                    13:cc:e7:1e:63:13:09:db:36:ad:98:71:d9:0e:19:
                    f1:f0:a2:e8:42:96:a1:c4:b2:a1:75:19:78:b0:a7:
                    26:a9:a9:d4:57:b3:1b:3a:d5:6b:17:ee:3e:be:e9:
                    69:80:d0:e3:f8:fb:5f:06:be:8d:dd:d6:87:15:21:
                    5d:49:ba:bd:69:ba:20:9e:11:58:e7:65:61:0f:bc:
                    ef:08:bf:39:1b:62:62:ac:5e:c1:0e:81:1a:19:30:
                    33:55:07:aa:81:7c:8a:0b:99:d0:4d:33:79:fb:53:
                    dc:f7:9b:57:ca:e4:cc:4a:4a:ca:6f:88:c7:17:91:
                    22:9c:ff:da:c2:87:c2:e4:57:8a:09:a1:99:49:11:
                    d6:9a:ce:a1:27:0d:74:6f:2d:44:aa:fd:ba:53:95:
                    18:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CC:2E:31:6A:E2:BD:F0:B3:D5:CE:40:79:EA:0D:19:BD:F5:83:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c/af2bbe75-fc60-3979-bbc4-03ad552dc53d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c.crl

            X509v3 Authority Key Identifier:
                keyid:02:F9:8A:03:95:94:29:ED:32:1F:86:52:F9:5B:FC:BA:3B:B2:0F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:77:74:15:e9:68:36:91:4a:90:ca:61:e2:5e:97:03:b2:3d:
         84:03:10:41:cc:65:83:2e:5b:ee:4f:51:ce:bc:dc:d4:12:19:
         bd:c2:a2:49:56:83:b7:68:1b:d0:32:c0:02:0d:26:2a:3d:c1:
         a5:f3:93:51:8a:a1:ec:d9:55:4c:31:4b:5a:bc:9b:77:28:b9:
         23:c9:f4:66:57:b4:45:89:61:85:72:86:ab:1d:91:5c:91:c0:
         20:2d:6c:fc:99:ee:7e:5f:1c:87:7e:da:e8:f6:92:83:6a:20:
         ad:85:56:56:4c:aa:a2:b8:6b:f8:ad:e8:68:97:d5:ef:58:91:
         03:40:aa:a6:25:ae:b4:f6:06:b8:d6:73:07:86:3b:1b:1e:2c:
         f4:92:80:31:ae:14:b4:f8:e0:18:9f:0c:4d:09:9e:27:1c:5e:
         f7:2e:ce:0e:72:dc:3c:96:41:7a:88:b6:9a:ab:b8:9a:5f:86:
         2e:a0:98:a0:06:15:ff:5f:6f:8a:a5:2f:97:a3:b5:c6:5f:10:
         eb:48:68:ec:51:97:fb:ee:57:00:a1:42:ba:71:61:8e:ca:12:
         ef:3f:12:6b:0e:21:24:da:cf:62:9b:3d:36:e6:72:c2:f7:e4:
         20:83:47:27:0c:7d:36:75:7d:c7:40:d1:d9:4b:42:f8:79:7b:
         39:63:fe:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:51 2024 by rpki-client on console-fra.rpki-client.org