Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ea3b29d-14f8-3c9f-834b-18e552116a3d.roa
File:                     1ea3b29d-14f8-3c9f-834b-18e552116a3d.roa (raw, json)
Hash identifier:          kPc3bs5CGMi0LShvHpPj42QmgzBPwF1SvHXtq/brsk4=
Subject key identifier:   CA:4A:70:91:6F:BA:2E:A8:01:B8:F5:42:15:BE:9D:48:A1:19:AC:35
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285847F41F9F30C678E1FB0D7A2C80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ea3b29d-14f8-3c9f-834b-18e552116a3d.roa
Signing time:             Thu 21 Nov 2024 14:00:51 +0000
ROA not before:           Thu 21 Nov 2024 14:00:51 +0000
ROA not after:            Wed 19 Feb 2025 14:00:51 +0000
asID:                     21859
IP address blocks:        98.98.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:1f:9f:30:c6:78:e1:fb:0d:7a:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Nov 21 14:00:51 2024 GMT
            Not After : Feb 19 14:00:51 2025 GMT
        Subject: CN=ef4767dc-50cb-4105-8c13-8ed69364c1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ab:68:8f:e4:a0:24:f3:98:fe:11:14:62:92:
                    3d:cb:3b:7d:3b:ec:9a:e9:fa:81:ea:0d:e5:06:45:
                    a8:48:23:84:10:26:5c:c1:95:bd:c3:91:bb:33:30:
                    53:8f:89:a3:65:b4:3c:ef:16:61:75:c1:40:42:1e:
                    38:73:e8:bb:27:1e:12:42:1f:bb:79:36:e7:d1:78:
                    9d:11:e7:3d:be:2a:94:04:2b:65:7e:48:b2:a4:5a:
                    38:d0:0b:17:e2:e7:cd:9e:1d:6c:77:a5:5b:d6:f5:
                    39:24:b5:90:73:e1:84:42:bb:7d:ec:af:ac:a2:33:
                    c5:1d:6c:38:ad:79:4b:cc:c6:9f:65:44:4a:40:83:
                    34:9b:61:d7:60:31:29:61:fd:8f:24:e6:d6:28:00:
                    d9:f0:a3:fd:df:a4:07:9a:79:ff:b4:cd:1e:c8:47:
                    7f:48:74:a8:30:8b:d0:ea:ae:d3:78:25:a6:22:ba:
                    f4:0e:d3:ca:b5:96:ab:69:b2:39:94:be:c2:4c:58:
                    90:82:ff:e8:80:40:ce:fa:21:8a:69:d1:cc:4d:f4:
                    e8:53:d6:68:91:92:9c:e6:4a:bd:56:67:b8:bb:db:
                    0b:13:a8:a8:de:6a:72:f3:c0:d8:0f:9f:7f:fd:d2:
                    86:28:ad:24:47:98:a2:40:d1:05:4b:d0:29:71:94:
                    1d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4A:70:91:6F:BA:2E:A8:01:B8:F5:42:15:BE:9D:48:A1:19:AC:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ea3b29d-14f8-3c9f-834b-18e552116a3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:09:1a:66:54:cf:61:c0:02:86:3d:d0:18:40:c8:69:f7:9a:
         f3:d6:dc:7b:ee:b7:99:98:7e:6b:95:28:56:61:35:4c:89:b1:
         9e:a8:e4:c4:9d:8a:41:d6:c0:90:7a:93:f8:90:40:a6:a6:ee:
         be:cd:02:f3:97:3c:71:51:47:0a:88:6e:ef:66:e9:e9:3f:95:
         a6:67:f1:96:8c:80:16:7c:4d:71:cb:46:fb:47:a1:ea:d1:05:
         cb:82:be:9c:67:cc:41:08:e0:69:56:5c:d6:d3:c2:83:e3:af:
         a1:3b:41:d4:c6:1f:4d:85:c6:5b:78:c0:6f:23:82:ca:aa:1c:
         1a:4d:1f:7e:bc:7d:34:65:0c:4a:9d:3a:c1:4a:22:0f:82:8b:
         19:05:e0:0b:f2:1b:f2:16:cd:7e:54:0f:f0:64:0a:4d:d2:ba:
         3b:6d:fe:e2:b2:15:bf:36:2c:3d:30:63:76:cd:80:5b:49:45:
         de:1f:d6:b5:b5:af:93:d2:a4:8e:63:aa:de:30:c5:9c:fc:34:
         9c:98:a5:1c:7b:eb:ee:c7:13:8b:21:a4:4d:f2:10:51:89:71:
         e1:54:01:72:d5:df:5f:bb:02:b3:20:77:55:98:bb:b7:ea:78:
         74:a6:26:25:94:82:5f:cb:99:bb:9f:9c:30:33:86:96:53:31:
         55:83:e1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:27 2024 by rpki-client on console-ams.rpki-client.org