Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/904128b2-0813-339d-a2fa-b676181812c8.roa
File:                     904128b2-0813-339d-a2fa-b676181812c8.roa (raw, json)
Hash identifier:          +i5zUc2IS2+zWe0h8FJpDIo4/PLbq752tobAoTwv6Gw=
Subject key identifier:   DD:45:03:43:88:14:DD:3C:2B:23:FE:21:F1:DF:B0:DC:D1:9E:70:66
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847AB6BFDA45A56AD4C3F2D6C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/904128b2-0813-339d-a2fa-b676181812c8.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     7029
IP address blocks:        98.22.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6b:fd:a4:5a:56:ad:4c:3f:2d:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=2a95cdf6-35eb-4cf5-9939-1190011ee368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:63:2d:b3:29:1e:6f:b4:40:e8:c2:2d:bf:63:
                    56:94:ee:8a:8b:ec:84:f0:c5:ca:ae:f7:7d:6f:90:
                    ee:fa:d8:f5:81:57:21:64:0e:90:5e:28:e2:0d:9e:
                    d4:9a:a9:cd:f5:76:72:df:92:8e:ec:3e:a8:45:19:
                    db:d6:2c:2e:0a:3c:17:a6:ae:d8:b1:63:df:65:12:
                    e8:6a:ca:76:09:72:ef:51:e4:03:ed:85:f3:24:c0:
                    3a:19:37:44:66:a1:66:51:e6:24:f0:4d:ee:ea:7d:
                    c1:e3:ee:b3:88:c9:56:7b:29:1b:36:81:91:5d:57:
                    11:51:ce:3f:1b:56:4f:2b:53:6b:bb:95:7a:ec:3d:
                    fa:4e:c8:ba:5c:cb:e7:09:88:41:53:ff:de:f9:aa:
                    da:61:cc:49:2a:5a:b9:c0:14:e1:b3:5d:f5:9c:c3:
                    81:a9:58:8e:5a:bf:92:fd:de:c4:a2:99:bc:d1:34:
                    f6:f7:a9:b8:fd:29:63:17:56:54:91:2a:04:b6:55:
                    47:b0:c9:35:e1:18:1e:70:39:e4:c5:8d:96:30:29:
                    a8:49:8e:2e:c0:3f:8b:15:e2:f6:61:43:d5:a9:3e:
                    5d:5a:23:25:26:19:57:6a:6f:a2:83:5c:d3:68:ad:
                    33:5f:34:47:6f:b0:b8:1c:a0:7f:5c:6f:31:31:88:
                    e5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:45:03:43:88:14:DD:3C:2B:23:FE:21:F1:DF:B0:DC:D1:9E:70:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/904128b2-0813-339d-a2fa-b676181812c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.22.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ea:64:16:36:bf:99:04:6f:e5:53:a7:e5:15:a3:4e:22:52:
         07:45:97:28:06:a2:bb:12:64:0e:70:87:b9:1b:6e:d2:a4:67:
         99:de:9b:5f:ac:0e:84:03:5c:42:09:ad:4e:c2:75:df:62:5d:
         d9:0d:2c:fa:99:98:ba:46:a0:30:76:10:ab:b0:3b:ba:e5:6e:
         6d:35:29:ab:cb:11:9d:2f:de:ee:e5:68:2a:cb:1b:c1:32:37:
         35:db:bf:48:4c:d9:35:2f:4d:c0:7a:6e:00:dd:4a:8d:a6:b0:
         56:26:cd:8e:2e:b5:ef:21:93:80:c2:b6:a3:ff:df:9e:2e:33:
         72:84:e0:71:97:62:dd:83:6f:f7:b2:ba:2f:18:39:87:ed:23:
         23:56:94:53:60:1c:fc:c6:81:f8:e5:c1:58:5e:45:a9:9b:d7:
         b9:12:1e:f7:16:1a:71:30:db:f4:95:fb:f6:b2:b1:a5:76:ad:
         59:74:cb:91:c1:76:32:88:a1:bd:cc:3e:4c:36:f5:c6:04:0e:
         d5:77:84:ae:33:ce:7c:a1:2c:44:e0:27:0d:3f:6d:80:c2:b1:
         6f:fc:20:db:84:89:3a:43:a4:db:03:65:82:70:d9:27:1b:0a:
         9a:a7:b8:bb:03:d3:1f:ee:af:a3:25:fb:33:7c:ce:f3:b6:45:
         1e:0f:17:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:06:12 2024 by rpki-client on console-fra.rpki-client.org