Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f5324e42-7fa5-36f9-9d01-61c8026ccc1f.roa
File:                     f5324e42-7fa5-36f9-9d01-61c8026ccc1f.roa (raw, json)
Hash identifier:          OK8J75kEnDBpXFTVsAojO1x1l19nk5t8yAqt1bB+x8U=
Subject key identifier:   E9:93:2B:16:C4:5C:C7:1D:96:D6:3B:B9:7B:EC:D4:A3:50:26:B2:35
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285845B21E32F58A2C6F6D06B908C0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f5324e42-7fa5-36f9-9d01-61c8026ccc1f.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     21859
IP address blocks:        98.98.38.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:32:f5:8a:2c:6f:6d:06:b9:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=e635751a-3f29-40d3-9b69-4f5f5e108097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9c:33:35:fa:26:ed:e0:ac:4f:e8:88:83:10:
                    dd:6c:54:9b:8d:16:4a:b6:1b:a3:e1:a3:e6:65:36:
                    44:48:bc:87:97:3e:60:c3:96:90:6f:ea:a7:de:67:
                    a1:ec:8d:3e:78:52:19:5d:e7:51:ae:29:f0:90:ba:
                    ec:b5:22:42:60:4e:42:fc:37:25:c7:8e:31:22:14:
                    41:ff:42:d4:9e:0c:d0:4f:6f:e5:e7:c5:e2:4f:7f:
                    51:53:e2:05:73:96:e3:95:8a:ee:7a:3d:8c:2a:82:
                    dc:87:17:f5:a2:41:3a:7a:65:4b:45:ac:2f:92:d6:
                    ee:ac:bf:06:b6:dc:08:6f:4b:22:07:3c:a6:ab:a0:
                    06:b5:42:18:e9:e5:a3:c6:52:e4:43:8a:0b:57:c0:
                    a0:62:44:06:61:7c:03:e3:5f:d6:7c:77:7f:82:0e:
                    eb:92:c5:45:57:3a:90:d8:69:3e:39:f7:d6:6c:f9:
                    49:12:5b:85:e4:32:46:d8:cf:25:19:25:9a:1f:4b:
                    f5:34:ea:81:e3:9b:7f:33:e2:b5:65:39:c5:3b:23:
                    69:a1:f4:42:3d:30:8e:64:06:f4:f5:74:05:cb:49:
                    3b:a2:30:db:a7:96:b8:bc:4f:5f:c9:24:c7:11:8f:
                    c7:22:16:0a:33:e4:ca:db:9c:f1:44:4e:13:a9:d2:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:93:2B:16:C4:5C:C7:1D:96:D6:3B:B9:7B:EC:D4:A3:50:26:B2:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f5324e42-7fa5-36f9-9d01-61c8026ccc1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:88:f2:f3:6b:45:d1:47:1d:db:35:10:82:78:a6:15:ac:15:
         b0:67:6f:d1:b8:fb:ae:d2:24:8f:98:82:23:b7:98:db:24:b2:
         5b:3e:d4:38:06:a9:9a:1c:8f:22:f4:ca:7c:7b:43:43:2f:54:
         14:5f:c7:d3:fe:57:d8:07:41:49:4b:21:7f:42:f9:61:e7:ea:
         4a:74:5c:b3:47:e6:a9:ea:68:4a:7e:e5:08:d3:d8:cd:7c:bf:
         97:72:29:14:19:35:ca:30:a5:0b:a1:e2:f4:c3:33:4c:43:d1:
         2f:c3:96:2b:dc:ea:f1:1b:4f:b0:04:7f:6a:80:12:ff:d6:da:
         e6:76:49:7b:f9:e4:4c:54:49:d2:aa:0d:80:3c:86:a8:30:b8:
         b3:b4:91:03:a6:5d:53:ee:57:28:49:0f:d1:3c:7e:c0:39:56:
         d3:b6:f7:21:b6:41:11:7a:c4:04:7b:8f:6e:07:ee:99:8b:e3:
         79:f1:68:7d:c4:b5:fd:c4:8e:ff:59:2e:14:a8:a0:2e:ea:43:
         3f:9e:45:53:45:04:4c:83:46:e1:5b:ca:1a:a8:6d:10:84:d7:
         bd:f2:d6:cf:14:57:67:49:34:3f:b6:8c:4f:bc:ef:90:44:ab:
         74:fa:ef:8c:43:99:d9:80:f7:9f:b8:8b:54:bb:1f:fd:35:06:
         b8:08:c3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:14 2024 by rpki-client on console-ams.rpki-client.org