Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c/dde254f3-7f26-3c53-9adc-395f22fea9f3.roa
File:                     dde254f3-7f26-3c53-9adc-395f22fea9f3.roa (raw, json)
Hash identifier:          bd46+oTVPHLn+h+7vW740nDsagHt7OnYdQCjXvgfFxw=
Subject key identifier:   F9:5D:6A:F3:E3:C3:0C:4F:15:0B:F6:53:EB:DE:25:39:B1:DB:16:F7
Certificate issuer:       /CN=4cc1eaba-95c4-4b20-a824-3ee7d92adc0c
Certificate serial:       010D0C9F4328584738F5FED80C25D431054D4AC0
Authority key identifier: 02:F9:8A:03:95:94:29:ED:32:1F:86:52:F9:5B:FC:BA:3B:B2:0F:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c/dde254f3-7f26-3c53-9adc-395f22fea9f3.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     14618
IP address blocks:        98.142.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:fe:d8:0c:25:d4:31:05:4d:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc1eaba-95c4-4b20-a824-3ee7d92adc0c
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=db5dd18c-c001-4719-b99d-e97d15ac776d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:29:28:5a:3d:6f:11:d8:63:f0:d7:ca:ea:
                    32:c3:5c:34:ee:f3:3f:bc:b7:07:86:08:56:46:be:
                    e8:2c:8f:e1:b8:36:2b:2c:07:d1:2c:ff:1a:5a:20:
                    0c:70:e5:97:11:41:5e:bf:68:12:ae:9f:b5:9b:0d:
                    08:05:3d:d3:ea:8f:82:79:0a:af:dc:8b:70:28:13:
                    bc:b7:bc:00:ce:df:6a:51:fe:5f:6f:2c:8e:49:63:
                    e7:e0:8a:14:36:e1:de:c6:39:3d:14:14:39:43:8b:
                    d7:9d:97:12:0c:c4:8d:7a:1c:8f:4e:e2:9d:47:e2:
                    5b:7f:52:d4:74:b5:63:93:1d:63:68:2e:32:e1:67:
                    10:9e:d9:2d:b5:8a:29:61:de:52:90:f9:38:34:96:
                    f5:71:c6:91:7f:53:53:9e:13:67:6c:86:26:bf:53:
                    c1:9a:3f:23:c1:c3:43:27:1c:39:3e:1d:80:fa:c5:
                    4f:da:4d:1c:b9:f6:d3:a6:78:16:4d:46:9e:ca:eb:
                    9e:5a:d1:c1:cc:32:4d:47:d6:88:1a:74:25:f5:9b:
                    df:5c:bc:78:bc:bb:90:9b:c2:f9:e7:07:ac:13:e0:
                    b4:16:af:9e:0f:7a:af:46:9e:da:07:2b:f1:f2:cf:
                    41:cf:90:ea:54:42:b5:7e:68:e6:5b:1d:1f:a7:b1:
                    ac:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5D:6A:F3:E3:C3:0C:4F:15:0B:F6:53:EB:DE:25:39:B1:DB:16:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c/dde254f3-7f26-3c53-9adc-395f22fea9f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c.crl

            X509v3 Authority Key Identifier:
                keyid:02:F9:8A:03:95:94:29:ED:32:1F:86:52:F9:5B:FC:BA:3B:B2:0F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4cc1eaba-95c4-4b20-a824-3ee7d92adc0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:a6:ea:9f:5b:00:16:f9:ec:26:28:81:da:d9:c1:df:a1:0c:
         56:b4:9d:bd:59:9e:c8:fb:64:c3:db:9f:5b:18:61:a1:1d:09:
         fd:55:c5:67:93:af:7b:48:81:d2:ed:ec:bf:dc:33:0c:6f:95:
         37:88:3f:57:0e:3e:4e:81:75:fc:37:34:32:f3:20:d4:9a:32:
         42:54:72:05:99:09:17:af:07:89:ce:d6:66:59:10:b9:de:e4:
         df:5e:04:d2:e4:01:38:1a:66:bb:07:29:8e:5e:c2:55:c0:c6:
         94:f0:03:80:d8:d5:22:ec:c1:de:04:cd:33:07:69:1f:98:73:
         b3:0f:91:3b:7f:33:0d:4f:f8:4c:32:9c:12:8f:0e:eb:7c:81:
         71:94:41:ee:70:5a:14:47:b3:d1:63:46:22:04:34:c3:87:dc:
         3e:d3:4d:81:0c:01:49:41:6a:be:1c:cf:70:c3:68:79:86:15:
         01:95:18:4c:a0:87:8a:86:98:08:16:fc:af:19:0e:67:07:8c:
         c2:df:84:be:c3:f3:4f:58:1d:a7:81:c4:f1:31:b7:ef:ef:10:
         b9:5f:7c:02:ce:53:a4:d7:4c:38:4c:40:a0:85:29:c5:69:a6:
         59:75:49:15:bb:9b:d6:2c:b0:bb:49:43:db:bd:6e:8d:a5:b8:
         d3:35:70:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:51 2024 by rpki-client on console-fra.rpki-client.org