Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/0da05a95-4816-3aad-8e03-a9fb59cc6c6f.roa
File:                     0da05a95-4816-3aad-8e03-a9fb59cc6c6f.roa (raw, json)
Hash identifier:          qg3Sa+lnMtG6uQeAYiNOfPZa5XWcy3l3fIo4QPlOEY4=
Subject key identifier:   64:2C:85:97:38:2F:45:7C:C3:20:14:42:04:C7:1F:06:3F:73:9E:DA
Certificate issuer:       /CN=79d92048-3cb0-4207-95ca-ebf1f6f4bc7f
Certificate serial:       010D0C9F432858477396465A35D36EE4C43BF0C0
Authority key identifier: 63:9A:F5:3C:9E:D1:06:1D:30:A1:0C:6A:5C:99:8A:61:98:40:83:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/0da05a95-4816-3aad-8e03-a9fb59cc6c6f.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     8100
IP address blocks:        172.98.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:46:5a:35:d3:6e:e4:c4:3b:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d92048-3cb0-4207-95ca-ebf1f6f4bc7f
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=7f6ff9ee-35ea-4c36-84e5-d09861160834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:10:84:8a:13:60:9d:e9:d7:d4:91:a6:55:
                    47:c3:8c:13:b1:7d:31:18:87:cb:48:bb:80:cc:06:
                    f6:bb:6c:62:ca:f6:d7:88:e0:6b:c7:ce:ac:e4:7f:
                    32:b1:a7:94:c4:17:38:3c:02:76:f8:41:31:16:c5:
                    e2:f3:96:a5:df:ad:16:ad:fa:bb:d3:cb:cf:3e:ee:
                    54:fd:ee:73:c9:e8:11:cb:15:c8:b2:40:55:86:d0:
                    18:88:4c:46:b9:f8:83:a2:2a:76:df:04:19:94:93:
                    a8:31:a7:ca:34:23:98:f3:73:72:60:e1:c3:bb:35:
                    1a:fc:11:e3:58:52:2c:6f:24:cc:55:32:67:02:c9:
                    8c:af:72:f4:84:24:85:ec:e6:80:6a:78:c6:ba:d8:
                    e6:7d:17:cc:de:4a:77:36:65:d8:be:0e:e7:ac:ee:
                    5c:70:cc:1b:2e:ab:67:c7:ae:18:2b:b6:e4:ab:77:
                    c9:7a:e7:b2:fc:da:83:25:b2:ed:54:5d:db:9e:bf:
                    55:9f:97:ce:50:ee:19:7e:48:6f:5e:02:07:11:c0:
                    ef:20:5b:6b:a0:8d:92:c2:e9:73:8c:5c:81:a9:dd:
                    8d:98:43:37:c8:4a:a1:e3:c5:f9:5d:48:88:fc:d1:
                    d0:f6:64:57:b8:dd:bd:0b:61:74:77:a8:3f:6c:9a:
                    58:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2C:85:97:38:2F:45:7C:C3:20:14:42:04:C7:1F:06:3F:73:9E:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/0da05a95-4816-3aad-8e03-a9fb59cc6c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.crl

            X509v3 Authority Key Identifier:
                keyid:63:9A:F5:3C:9E:D1:06:1D:30:A1:0C:6A:5C:99:8A:61:98:40:83:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/79d92048-3cb0-4207-95ca-ebf1f6f4bc7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:32:28:f0:89:a7:1b:eb:13:0d:72:74:f9:c0:02:4b:aa:60:
         71:32:b6:23:66:ae:cf:e2:6f:f5:aa:42:10:3e:fb:b3:0f:13:
         26:ed:1e:ac:43:5b:a6:1b:e7:ac:33:88:f3:80:5a:27:db:90:
         28:4c:3f:b1:3a:9f:8f:5f:88:e6:e9:ed:c4:39:eb:8d:c5:09:
         50:aa:a4:f9:de:25:a3:82:f3:4e:1b:df:8f:86:b2:ac:31:33:
         23:95:77:07:e2:4e:ad:6e:06:42:e2:28:9b:3d:21:28:7c:23:
         bc:8a:c6:ce:d6:1f:56:7a:bd:a3:3c:a5:fe:c4:ed:81:8f:a9:
         b6:50:8d:fc:4c:8b:70:36:a5:9f:a8:d8:e1:68:11:38:f2:b0:
         ea:fe:2f:14:f0:6f:2f:24:0b:01:fe:6d:06:ba:45:e9:c4:3a:
         e4:1c:9c:90:35:56:90:5f:40:c2:03:db:d3:81:15:32:f2:12:
         1a:5b:04:f9:da:5b:1f:e9:2b:3d:96:22:35:da:08:d2:c7:7a:
         59:23:b7:e1:61:69:9e:19:1f:e7:80:e0:d8:66:6b:bd:36:1e:
         07:c2:fa:88:47:63:a6:de:15:c7:26:85:02:c7:1e:cc:42:b1:
         68:48:1e:c7:8a:bc:38:ea:ca:10:b8:48:31:76:58:3d:12:02:
         27:69:77:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:40 2024 by rpki-client on console-ams.rpki-client.org