Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/5fe505e7-92bb-3ecc-8d03-b9755c95bd78.roa
File:                     5fe505e7-92bb-3ecc-8d03-b9755c95bd78.roa (raw, json)
Hash identifier:          4JEnrLnb4VDFiDNoQ6Z18uwm735oCKxQHIrFkR9JCC4=
Subject key identifier:   8C:62:C5:0F:B1:38:05:ED:BE:65:3A:3B:5B:74:B7:B7:91:B5:DD:4F
Certificate issuer:       /CN=8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c
Certificate serial:       010D0C9F432858484EDAC71F0786413252047BC0
Authority key identifier: B3:27:C8:6E:2F:06:AC:4E:AE:62:5D:34:43:F4:B8:F5:E6:0A:6C:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/5fe505e7-92bb-3ecc-8d03-b9755c95bd78.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     396982
IP address blocks:        209.188.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:c7:1f:07:86:41:32:52:04:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=963cbfd2-7a9e-448c-a905-eac9a350836a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9e:87:89:f4:c8:53:9f:a7:c9:f3:d6:f5:ff:
                    50:29:26:16:de:bf:27:f3:6a:82:2d:cf:3b:19:1e:
                    a7:9e:e3:54:ba:0a:3f:8c:ad:30:9b:2a:ef:c2:3d:
                    9d:b1:d0:b7:2d:aa:f1:e7:70:4b:dd:9b:af:f8:4a:
                    4c:4c:b2:73:3c:48:24:ed:6f:72:bd:ad:dc:58:4f:
                    49:ff:86:25:e7:6f:54:be:3d:59:5e:2c:c4:16:84:
                    c6:c3:62:75:a1:33:20:91:97:14:ef:26:1b:6a:9d:
                    3a:87:28:f7:7d:25:be:8f:4a:58:a6:97:05:11:44:
                    a4:98:dc:db:66:93:d8:31:e9:b6:70:6d:4c:2a:85:
                    e8:d8:ab:bb:50:1f:20:67:31:af:36:35:ca:de:79:
                    d0:79:74:2c:9d:0b:ed:02:fd:1f:09:4a:c3:c5:4f:
                    7d:eb:fe:de:51:ce:14:4f:f1:d7:f3:3e:cf:72:f9:
                    37:6c:d4:4d:c9:91:2a:a7:f8:f3:56:e5:87:3d:2b:
                    3e:c8:67:da:36:43:9d:5d:4b:5b:bb:67:98:2f:94:
                    f6:b2:10:85:00:60:d1:be:18:c4:62:6b:d4:73:27:
                    52:fd:9e:ad:c7:03:f8:eb:2a:93:86:19:46:6c:0f:
                    f3:1a:6f:72:57:82:6e:65:b9:a9:8e:fe:8b:98:93:
                    bb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:62:C5:0F:B1:38:05:ED:BE:65:3A:3B:5B:74:B7:B7:91:B5:DD:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/5fe505e7-92bb-3ecc-8d03-b9755c95bd78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.crl

            X509v3 Authority Key Identifier:
                keyid:B3:27:C8:6E:2F:06:AC:4E:AE:62:5D:34:43:F4:B8:F5:E6:0A:6C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a3:40:08:62:92:46:71:12:3d:e7:4a:95:99:a2:64:b6:10:
         3c:70:af:42:1f:9d:67:9b:8d:2a:b9:61:01:18:b3:56:85:f0:
         1b:46:50:8a:9e:44:5d:b5:62:15:5e:cf:65:d6:ed:94:01:76:
         ad:16:9e:5c:c6:16:0a:32:c0:0d:7a:74:23:d8:5e:12:d2:6d:
         b8:37:5c:cd:ed:cd:db:46:6f:a0:4e:8e:ec:e7:da:ec:8f:ed:
         b3:c5:6b:d7:5b:45:c0:71:e4:63:df:10:d2:24:70:a8:a3:37:
         a4:cd:ec:ba:7f:89:70:42:a3:e8:a7:cf:95:1e:52:c2:3e:ec:
         83:1c:26:df:eb:89:e7:19:90:92:ec:70:08:7d:b0:c1:11:0e:
         70:33:5d:5d:c0:b8:95:0a:c0:11:7e:c5:ca:b1:1d:1b:85:bb:
         ab:7e:c9:69:57:e3:0d:10:1e:9c:9a:92:4f:8d:66:81:b8:37:
         af:15:cd:c7:6d:cf:7a:12:90:a7:77:9a:1d:93:36:1a:33:f2:
         72:bb:aa:55:bf:90:54:48:23:67:5c:bd:7b:01:15:20:83:3e:
         50:b9:b1:58:d8:2f:50:97:80:f2:7c:ca:c2:ec:24:3d:59:e6:
         0b:5b:4a:15:ef:7a:31:9e:93:88:07:4e:ca:51:a4:91:e5:40:
         91:f0:2d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:56 2025 by rpki-client