Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f5324e42-7fa5-36f9-9d01-61c8026ccc1f.roa
File:                     f5324e42-7fa5-36f9-9d01-61c8026ccc1f.roa (raw, json)
Hash identifier:          ZbE6yIM7nBDnjtewwCCX3UJ75zpnv9qWonwVKguvoxU=
Subject key identifier:   5D:DD:4E:AE:DA:63:D1:E9:1A:B7:95:13:86:C7:81:39:FD:24:E2:E9
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858477230F6D1574CAAA655FAFC80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f5324e42-7fa5-36f9-9d01-61c8026ccc1f.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     21859
IP address blocks:        98.98.38.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:f6:d1:57:4c:aa:a6:55:fa:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=5fdd4cb5-cfdc-4f23-8e8b-82c2d9cf949c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:53:32:55:81:44:0e:2b:63:f9:0e:72:9f:73:
                    1f:06:58:72:98:fd:7e:85:f7:45:03:cb:6b:87:f7:
                    a9:dc:4e:fe:4f:ff:19:31:0d:45:e3:59:00:bf:73:
                    00:15:1c:3c:7c:a0:8f:69:1b:6b:0e:29:66:26:b7:
                    69:79:93:5b:c1:f9:52:e4:69:9a:7d:ec:0e:48:46:
                    be:2c:d0:9e:e1:ae:cf:f2:83:1c:f2:8f:2d:29:87:
                    45:a5:00:a1:7e:5c:66:87:3f:d1:c3:eb:44:61:4e:
                    17:5a:89:21:9d:15:fb:60:b3:f2:19:4f:c9:0f:85:
                    cb:4a:38:81:a1:6c:76:01:b7:af:7c:81:30:d9:5a:
                    7d:2f:11:59:f3:f0:8a:2a:32:0a:06:28:80:8e:67:
                    0f:f2:eb:48:d7:0c:9a:d2:8a:ff:a4:b2:24:22:53:
                    d1:dd:90:3d:2f:01:7a:bd:8b:50:35:40:b4:2e:7b:
                    4b:a1:57:b9:66:74:e7:68:37:d1:3d:e5:c4:b2:43:
                    ff:d1:22:8e:6c:7a:d6:c7:5b:ca:ab:3c:7d:6a:b2:
                    5e:63:fd:4b:0b:43:27:a7:37:0e:8d:40:30:ba:b8:
                    d1:77:e8:7d:51:aa:9c:a9:fa:91:b1:ce:d6:e8:a8:
                    57:de:84:e5:cb:5e:3e:ee:88:15:ed:5d:31:41:ab:
                    55:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DD:4E:AE:DA:63:D1:E9:1A:B7:95:13:86:C7:81:39:FD:24:E2:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f5324e42-7fa5-36f9-9d01-61c8026ccc1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:e4:58:41:76:3e:21:60:d6:3e:57:2e:9d:fc:b0:7c:4e:35:
         97:a3:83:3d:da:41:c0:df:c1:a6:4f:16:df:0e:bd:39:eb:4f:
         46:f9:1b:37:00:d9:9a:25:71:1f:87:9c:b9:64:92:ee:4e:3e:
         2d:54:a0:3d:95:4f:33:eb:63:a5:50:33:d6:db:8b:69:32:55:
         6e:3e:db:a7:33:6e:2e:9e:03:b5:26:b1:ca:e3:f2:dc:e5:e9:
         c9:c6:bd:79:e5:1b:b1:76:c7:de:d9:5f:d2:96:d5:dc:3a:c2:
         52:94:da:45:77:35:90:09:40:98:ad:b1:62:2f:9a:ea:1f:23:
         bc:98:0b:76:a8:c3:f9:a7:60:b5:97:81:9d:50:b8:a0:d4:ae:
         02:be:e5:34:0a:2f:24:f1:07:a4:7d:f7:a5:e1:0a:a6:09:f9:
         f4:c4:d9:18:e1:95:58:3f:df:5e:b2:8f:d4:ae:cc:7f:8c:59:
         bc:7b:06:76:65:81:61:61:df:33:30:11:c6:b9:25:95:88:0a:
         8e:d4:e0:41:13:7d:1c:c5:c9:45:0e:fe:99:09:3c:4e:43:92:
         35:ce:32:c4:ee:1c:0d:a1:2c:c9:b7:27:41:fe:3f:95:32:b7:
         05:85:a9:8c:90:98:e8:2c:72:f3:03:47:08:a0:7d:5b:3a:4b:
         34:a4:9f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:27 2024 by rpki-client on console-ams.rpki-client.org