Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/23d78f72-cae4-3827-920f-85c38c632f71.roa
File:                     23d78f72-cae4-3827-920f-85c38c632f71.roa (raw, json)
Hash identifier:          FNZcX3cuRWs9KUhvJnH5hDBPj0LBeXK/h27vYiMSsXQ=
Subject key identifier:   84:55:CF:FE:E7:56:F9:51:E3:95:36:9A:F9:9E:1A:1E:F8:08:E7:03
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285847BC2C24C0B8EAFC297A526800
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/23d78f72-cae4-3827-920f-85c38c632f71.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     21859
IP address blocks:        98.98.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:24:c0:b8:ea:fc:29:7a:52:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=b83eebe2-4902-4866-91a7-6477cf38ed3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:da:a6:eb:3c:03:7c:d8:b4:ae:ca:ee:17:
                    92:a5:15:95:59:16:f4:0f:55:64:a7:f1:fc:84:68:
                    56:fd:69:57:8f:df:2a:42:a2:1d:8d:88:03:30:d3:
                    93:16:f5:82:1a:2c:8b:63:69:b4:6b:d3:0c:bb:60:
                    17:64:e5:04:1f:5c:9e:f6:21:87:7a:4c:5f:7b:f5:
                    af:87:62:a9:d6:0d:b0:e2:f0:1d:29:dd:54:5f:fb:
                    0e:cc:66:56:b8:aa:62:46:2e:33:0b:cf:e9:fa:4c:
                    be:13:72:4b:4e:df:77:97:f3:95:8f:67:95:b5:51:
                    aa:12:f1:87:8d:6d:29:7f:c6:28:24:ec:ef:3e:6d:
                    04:9d:93:e9:60:f8:a4:f0:3a:24:ba:94:be:09:8e:
                    77:2f:f1:1f:be:ae:1c:76:22:65:66:6c:c0:d3:8f:
                    b4:3b:65:7d:cf:35:55:56:b7:b3:b4:66:87:d8:42:
                    46:8c:ee:6a:ea:84:3d:d3:65:33:48:9f:95:49:a2:
                    c5:10:ec:68:8d:f0:39:28:6a:55:b4:5d:5e:d5:cb:
                    44:2f:1e:ec:c9:c6:d1:40:ff:f3:0c:8f:63:d4:35:
                    ac:29:75:f4:6e:fa:9e:16:71:dc:15:eb:2a:98:80:
                    45:b7:f5:48:f2:da:56:be:35:41:20:81:e2:f4:b3:
                    a8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:55:CF:FE:E7:56:F9:51:E3:95:36:9A:F9:9E:1A:1E:F8:08:E7:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/23d78f72-cae4-3827-920f-85c38c632f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3a:4f:8c:bc:3e:92:7a:aa:6d:fe:c0:df:a8:01:a6:18:a9:
         2b:6c:de:8a:12:81:06:0d:38:f7:e8:ce:a8:c8:9a:8e:21:36:
         b0:2c:8c:18:da:c2:bb:cc:4e:ad:f5:72:40:6e:f9:a2:cb:04:
         c3:2f:ac:7a:2c:a6:bf:33:c5:a1:d9:f7:36:0c:16:81:f1:66:
         df:f2:f5:01:7f:a9:94:91:99:a5:3d:ce:a7:b7:3e:c5:4f:01:
         a7:9e:24:e2:0c:c0:99:4f:a4:d6:d3:3a:a4:e4:1a:48:68:a5:
         b0:1c:46:40:66:25:6b:d1:2c:8e:82:79:50:4b:f1:ed:7f:75:
         13:f4:6c:cf:1d:ca:db:8c:c2:3d:23:e7:08:29:2f:f3:f4:e0:
         53:7d:76:59:0f:d2:a4:96:44:77:d3:a5:74:b9:71:a0:bb:17:
         b8:d1:38:b6:5f:68:c3:f4:6a:6d:a7:81:dd:ab:f6:e2:04:a3:
         ac:7b:b0:1b:5e:fb:cc:4a:72:1b:91:c3:78:8e:be:96:d0:cb:
         cd:96:2c:33:47:da:2c:96:3d:75:a9:fd:41:c4:5b:ce:a4:e6:
         ca:bd:b9:5d:f7:5a:17:c5:b6:24:3d:b0:ad:a3:89:4a:6b:8e:
         ec:02:c1:62:5f:f2:0b:e1:e7:6f:0b:4e:6c:54:73:94:00:24:
         40:7c:32:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:09 2024 by rpki-client on console-fra.rpki-client.org