Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ccef7d0-897d-36fd-9601-c0260d44764b.roa
File:                     1ccef7d0-897d-36fd-9601-c0260d44764b.roa (raw, json)
Hash identifier:          5HZeiY28rgYVbMW+PG8s7NFlIn8m2Lc3El7lXBQx3Qo=
Subject key identifier:   9E:A6:43:3C:23:42:BF:82:2C:49:0D:75:28:08:DF:FA:A3:FD:E1:7E
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285847DC64ABD9ABF5E74110A64F00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ccef7d0-897d-36fd-9601-c0260d44764b.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     21859
IP address blocks:        98.98.60.0/24 maxlen: 24
                          98.98.61.0/24 maxlen: 24
                          98.98.62.0/24 maxlen: 24
                          98.98.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:ab:d9:ab:f5:e7:41:10:a6:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=9766a7e1-72b8-4bea-ba63-18ffeb12f0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:72:32:14:4e:28:ec:49:1c:05:63:2f:c9:
                    6d:10:bd:d2:0e:81:a5:9f:a1:dd:d0:76:3c:ec:35:
                    cb:cc:46:66:67:d7:d2:ed:2e:32:f7:cb:82:31:85:
                    32:23:23:83:12:24:e2:16:cf:d6:7f:2b:eb:b6:55:
                    f4:ee:f4:bc:1e:0f:e1:16:c3:17:93:12:7a:a1:6b:
                    86:07:1a:db:34:04:07:7f:6a:6c:1b:e8:7f:3f:de:
                    5c:86:85:a9:f2:e0:25:f3:52:3d:45:56:8a:4b:27:
                    9f:d4:d9:a9:54:f2:11:c3:09:e3:a7:ab:a2:cc:00:
                    19:d9:f1:2e:e9:ad:3c:e3:8b:48:9b:c0:00:56:e3:
                    84:3a:3e:48:db:91:ad:8c:23:46:a2:ab:71:91:92:
                    6f:bb:d1:3b:43:3a:23:c8:e6:87:2c:7c:ac:79:c8:
                    19:30:02:48:65:27:e5:26:bd:05:ec:84:b6:3e:ef:
                    b2:4b:3f:87:ea:dd:67:84:ea:7f:b7:d4:58:f0:5f:
                    e5:97:22:d2:69:c6:93:f7:94:ab:e5:2d:42:46:67:
                    bd:7b:c0:23:da:0f:6e:0a:f0:96:6c:57:16:8a:5a:
                    a0:fb:06:d9:de:fb:e7:e4:97:eb:c4:e8:d5:fb:bc:
                    7f:a0:e2:7d:29:d9:65:de:03:c4:60:ff:32:3e:52:
                    cd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A6:43:3C:23:42:BF:82:2C:49:0D:75:28:08:DF:FA:A3:FD:E1:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ccef7d0-897d-36fd-9601-c0260d44764b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:26:b8:a2:95:49:17:27:3d:23:ce:b9:99:7d:12:5c:ca:09:
         3a:20:66:70:c4:15:56:2f:f9:93:fa:c2:54:5e:eb:6e:74:6e:
         a5:37:8c:f4:0c:65:a2:a7:61:b1:04:bc:bc:68:55:94:1a:6f:
         2f:95:1f:da:10:b3:8f:9e:27:22:a9:05:fd:09:98:a5:97:02:
         4c:17:86:e8:58:03:53:6b:56:78:10:b2:c2:5c:c2:44:9f:8d:
         b0:dc:bd:5c:fa:47:43:8d:0a:9c:60:36:06:4d:02:29:c7:8e:
         17:94:cd:4b:70:d3:7e:58:b4:44:89:c7:16:24:c1:73:6f:08:
         8a:71:15:15:e6:20:7e:7e:11:a4:39:e6:23:0b:bc:e5:0e:f7:
         8e:5a:a2:d7:3f:3d:46:0c:44:ea:a0:8f:1a:6e:1c:9c:2a:17:
         df:ed:a2:d3:c6:e2:b3:e1:be:33:07:17:88:24:27:24:9b:3b:
         89:01:d0:7a:8d:0d:ec:8a:47:c6:53:d4:3c:2a:40:63:f9:8c:
         87:23:3a:41:c9:24:eb:7b:36:b6:76:63:b6:de:36:69:bf:09:
         5f:0e:a3:aa:be:e6:3f:39:fd:6d:14:c8:65:a9:ab:21:de:73:
         fe:7f:81:dd:1e:77:98:4d:65:a5:48:34:de:e9:3d:f3:fe:fe:
         8b:09:07:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:27 2024 by rpki-client on console-ams.rpki-client.org