Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/707ede86-2417-3d59-bbf2-0c6aad7e687b.roa
File:                     707ede86-2417-3d59-bbf2-0c6aad7e687b.roa (raw, json)
Hash identifier:          C888/GjwBNXT6cjBDnsC6D/uspo8zwb6UTWxUrxHuGM=
Subject key identifier:   15:9F:BF:80:4F:1B:A1:9B:80:96:2F:35:46:C4:75:DC:60:A4:36:40
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584793B11BB6F7068ED03246BC00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/707ede86-2417-3d59-bbf2-0c6aad7e687b.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     21859
IP address blocks:        98.98.154.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:1b:b6:f7:06:8e:d0:32:46:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=0ff5b662-5050-4b0b-b817-95ff584127ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3d:44:9e:03:46:a7:61:a5:9e:e3:5a:83:d4:
                    1c:17:44:61:34:b7:ba:b6:bd:68:64:9b:0b:ac:43:
                    b6:a1:35:2f:94:fe:22:0f:38:46:d4:50:84:b6:c0:
                    88:92:5a:c6:1e:ca:a7:71:ca:4b:57:f3:ff:02:67:
                    45:be:e7:2e:0b:84:a6:b1:28:be:b7:15:c5:b4:c1:
                    14:f6:00:fc:15:20:67:7f:9b:56:ba:0c:1c:46:2d:
                    1b:da:46:98:65:04:80:3f:5d:87:2c:95:33:80:33:
                    da:59:24:23:ca:1e:38:47:21:fb:bd:56:81:bd:da:
                    57:da:d8:2b:93:eb:31:1f:eb:27:49:c3:3c:85:65:
                    a0:20:7b:76:ff:bc:3a:b5:40:82:f9:a0:01:f0:1c:
                    62:83:68:b1:07:04:e6:a2:5e:53:c4:69:a2:b9:d2:
                    a5:d8:71:0e:0c:1b:a9:d8:6c:2b:02:ef:32:49:9f:
                    02:fd:fc:d7:69:fd:27:0a:a4:c2:85:28:bc:84:c3:
                    6c:33:35:4a:28:6b:52:ac:39:2f:fa:d3:56:53:10:
                    3d:d2:25:d4:da:e2:16:b7:bc:07:81:32:67:30:fe:
                    4a:c3:80:90:35:98:5e:66:4b:3b:54:82:a3:46:a5:
                    0f:9f:43:a0:61:3a:a5:8d:8d:6f:75:9c:2a:20:66:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9F:BF:80:4F:1B:A1:9B:80:96:2F:35:46:C4:75:DC:60:A4:36:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/707ede86-2417-3d59-bbf2-0c6aad7e687b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e6:ea:9a:09:4e:11:52:72:44:07:a8:06:bf:dc:0c:13:b9:
         b3:fe:a8:6b:44:c3:12:62:c2:6a:6b:c9:c3:2b:5b:04:c3:ef:
         4e:1e:35:88:de:66:af:14:40:d3:bf:85:e8:17:c0:cd:a2:fa:
         9e:3f:41:57:eb:5e:69:83:0e:10:52:0e:5d:10:4f:a4:2d:db:
         bc:d6:b1:3a:ea:d8:8c:1d:b8:99:4f:e1:77:d2:ac:94:c1:a5:
         fc:fb:d8:be:1a:5b:6d:30:c5:dd:23:ad:ff:e5:f7:38:a9:68:
         9e:8d:c6:bd:bb:e7:5e:b3:7c:de:93:00:2d:fe:4e:2b:71:3a:
         71:19:e9:21:a1:b0:34:6b:ee:3d:ec:af:93:ed:e2:e8:5a:4c:
         fa:d6:d4:af:f0:f4:25:51:23:49:cd:2d:3a:c3:65:05:d7:0e:
         78:45:ca:ce:7c:ef:dd:a0:1f:ef:52:80:12:a2:c5:56:84:95:
         70:f3:bd:be:0c:06:cd:6c:f5:b6:31:54:d4:05:9e:96:ec:fe:
         4a:91:ef:ee:64:c5:98:51:f7:04:a8:18:d9:0c:76:af:4e:77:
         6d:71:a3:fb:56:89:c1:ba:6f:c7:ea:00:30:96:78:0b:96:05:
         e8:17:3f:4f:87:a1:25:12:d9:39:bf:28:5a:ee:df:19:12:51:
         ce:c0:8a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:09 2024 by rpki-client on console-fra.rpki-client.org