Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d5f41184-c58d-31cb-97fe-a6f6497d8017.roa
File:                     d5f41184-c58d-31cb-97fe-a6f6497d8017.roa (raw, json)
Hash identifier:          8SeS7LfiDAA4UScrkYUb0LbKfK8wqhssVqCBTO257Eg=
Subject key identifier:   8F:E8:69:00:04:2D:D0:68:19:59:7E:9D:C8:7A:91:99:7D:21:84:32
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584554A8C46B0E5286EC0CD1CD00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d5f41184-c58d-31cb-97fe-a6f6497d8017.roa
Signing time:             Tue 26 Mar 2024 01:34:01 +0000
ROA not before:           Tue 26 Mar 2024 01:34:01 +0000
ROA not after:            Mon 24 Jun 2024 01:34:01 +0000
asID:                     150436
IP address blocks:        98.96.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:54:a8:c4:6b:0e:52:86:ec:0c:d1:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar 26 01:34:01 2024 GMT
            Not After : Jun 24 01:34:01 2024 GMT
        Subject: CN=fd58a2f4-5c59-4a85-8aa4-800a0a98c521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:32:9f:33:98:39:a6:2c:0f:1b:3a:2d:53:
                    ec:b8:95:8e:35:6b:da:6f:60:79:0f:f3:7c:ce:dd:
                    77:1d:fc:6c:5d:43:b9:01:30:a4:df:08:be:05:b3:
                    01:47:08:a6:85:bb:97:5a:09:48:2b:3e:c7:ed:3d:
                    18:4c:36:eb:79:76:71:c6:e7:94:c3:f1:2c:20:1a:
                    b1:e5:dc:b6:cc:1c:88:fd:15:96:5f:b0:a5:0c:db:
                    54:18:ec:32:c6:3f:65:e5:fc:44:4e:6e:30:7f:73:
                    49:5d:ab:62:da:8d:98:76:74:dd:34:94:2f:94:32:
                    38:c1:17:bd:1f:b6:6b:db:a6:9f:5b:d0:19:1d:49:
                    85:2b:c3:1d:ef:2f:3d:ee:95:57:71:e7:5b:c4:4f:
                    92:ea:b1:4e:7a:b4:6c:26:41:b8:5f:f2:49:11:ad:
                    1b:55:9a:73:8e:ef:04:c7:37:71:b2:47:e1:ed:16:
                    04:85:9a:75:54:14:3b:b8:f6:b9:e2:e6:8c:bd:75:
                    9f:21:7a:92:1e:8c:b5:fb:3c:b7:28:76:7d:72:ad:
                    93:ad:42:5f:cd:c2:85:db:b7:10:ed:4a:27:93:bc:
                    95:2c:21:65:82:7a:d6:89:c2:a0:7f:9e:89:09:46:
                    09:30:e5:46:b5:2c:fe:20:60:27:71:88:2e:d2:d6:
                    f7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E8:69:00:04:2D:D0:68:19:59:7E:9D:C8:7A:91:99:7D:21:84:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d5f41184-c58d-31cb-97fe-a6f6497d8017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.96.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:5d:17:fa:cb:b9:e8:f0:0b:72:6a:c9:21:3d:0b:46:53:6b:
         80:dd:60:fd:4c:f9:f8:66:4c:17:32:6e:df:3a:8b:5b:18:78:
         cb:b2:09:63:77:00:36:99:26:1b:02:13:16:b7:d2:ff:e6:13:
         28:29:78:b9:f9:d6:8d:2b:fa:cc:c3:37:d3:4b:08:ea:17:82:
         cf:35:61:ab:98:8f:f9:9d:fd:e2:d3:4e:44:38:aa:6b:54:c8:
         57:12:f8:3c:d4:cb:f0:56:66:92:19:dd:b6:65:5d:20:e6:38:
         23:c1:b9:f3:b1:11:83:5e:dd:3d:5d:aa:c4:ce:4c:23:93:89:
         bf:ef:54:e5:91:fd:94:3e:40:f6:15:e6:07:6c:0b:c5:b4:80:
         72:42:5a:14:77:5e:9c:6c:1d:9e:6e:d0:f4:b7:9f:d5:05:e2:
         4c:20:57:64:26:25:44:6d:01:94:8d:25:7b:be:95:27:10:00:
         ee:34:24:74:b5:b6:8b:ea:98:92:1f:ff:b8:d0:ea:af:71:48:
         09:e2:73:e4:87:22:47:05:77:49:28:d6:12:e9:2c:2c:cd:9f:
         ca:c9:90:d0:ce:c0:26:11:0d:4c:75:9a:08:23:5d:e6:68:11:
         0b:45:d2:9d:84:2a:ce:23:d0:fe:48:de:4f:f2:02:30:ca:1c:
         2a:71:2b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 06:57:39 2024 by rpki-client on console-fra.rpki-client.org