Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/25495236-3279-3c3f-b88f-47823f25e647.roa
File:                     25495236-3279-3c3f-b88f-47823f25e647.roa (raw, json)
Hash identifier:          9M8rHVe18IuSSAf7AtOu2CuRSpoxyMS4ZeRq5fODCgk=
Subject key identifier:   72:D6:D4:B4:D4:CA:A7:3B:7B:49:C7:73:8A:C3:2E:9F:77:63:F0:63
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858394CF467F51B62AB6C8D33CF50
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/25495236-3279-3c3f-b88f-47823f25e647.roa
Signing time:             Thu 18 Mar 2021 04:00:00 +0000
ROA not before:           Thu 18 Mar 2021 04:00:00 +0000
ROA not after:            Thu 18 Mar 2027 04:00:00 +0000
asID:                     19115
IP address blocks:        98.8.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:4c:f4:67:f5:1b:62:ab:6c:8d:33:cf:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 18 04:00:00 2021 GMT
            Not After : Mar 18 04:00:00 2027 GMT
        Subject: CN=d21e4469-fe73-451b-a6b7-270d815f68de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:8a:b7:1c:7d:79:91:c1:a2:45:5c:35:35:
                    49:85:0c:dc:b7:1d:da:31:cd:7f:8e:3a:6c:5b:b4:
                    3c:d5:c4:85:30:69:28:d6:45:21:06:20:1d:af:73:
                    b8:0b:04:87:f1:56:35:35:84:51:96:ba:31:fe:c6:
                    8c:33:e0:73:af:21:26:a8:d8:b1:61:98:35:42:ab:
                    d1:e9:92:c5:77:f7:57:93:a4:e1:17:67:b5:10:ea:
                    da:b2:6c:a3:1f:7b:3b:c6:7b:d5:32:54:8d:c3:02:
                    18:e9:22:49:f5:e9:44:3d:c4:61:c0:e0:8c:fa:1e:
                    0d:f0:ed:8a:6f:c8:2e:fe:86:87:ec:72:c4:8d:4e:
                    f0:3f:10:1d:16:75:1c:d8:8f:ac:9f:ac:91:24:97:
                    91:d6:53:34:7a:4b:ec:d5:31:87:80:27:09:e1:83:
                    94:5e:93:b6:2f:ef:13:c7:3d:88:53:55:8d:cb:ef:
                    74:bb:33:e0:79:f3:56:65:38:b0:e2:a0:de:c5:a5:
                    01:26:58:b4:59:7d:4e:ab:d3:3c:4f:0c:02:9d:c3:
                    c9:da:1b:98:fe:4b:05:a1:26:19:a9:34:dd:05:8e:
                    7c:f7:f2:2c:45:b8:c3:65:a4:34:5e:65:8d:b2:bf:
                    e4:b0:9e:86:67:b5:b8:b9:0e:07:3c:bc:63:59:7e:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D6:D4:B4:D4:CA:A7:3B:7B:49:C7:73:8A:C3:2E:9F:77:63:F0:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/25495236-3279-3c3f-b88f-47823f25e647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.8.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:4a:76:e9:34:6c:94:23:1d:af:78:11:31:e4:d5:75:22:39:
         87:44:6d:11:cf:92:9a:3e:1c:b3:79:30:46:f3:47:e2:67:d1:
         c7:bf:2c:6e:f7:7d:2c:61:37:26:20:59:d6:8e:8a:62:ff:0b:
         bd:4d:be:90:a0:74:f2:21:36:26:83:35:7e:d1:73:4d:dd:31:
         eb:19:b7:97:26:21:b0:76:99:e0:6d:4f:91:10:ef:d5:ca:f0:
         d7:a9:7b:28:ba:13:9a:d5:2b:0c:53:57:fd:56:d7:f6:bc:05:
         e2:ac:29:1d:cb:23:06:4c:53:b9:25:7c:03:b1:ea:fd:7d:63:
         5d:f7:b8:1c:27:7c:98:77:04:d6:fd:2b:bb:8b:89:83:dc:1a:
         25:b1:5b:8e:15:dc:33:02:08:3b:b7:af:1a:a4:55:37:b9:3c:
         a9:72:49:1d:54:10:46:ff:d6:67:b5:c7:d2:54:57:07:3e:56:
         84:30:5d:2f:39:2a:e4:0b:4c:5a:05:be:99:cf:0d:a3:fa:b7:
         11:20:92:c3:0a:bc:62:5e:c1:63:33:47:a6:76:df:77:3d:54:
         f0:b2:1c:90:3d:ac:5d:2a:13:ae:e4:be:2c:ca:f7:de:4f:d5:
         13:5a:7b:99:89:c7:05:b1:b7:c5:c8:c0:a9:62:98:a3:31:da:
         db:89:cf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:56 2024 by rpki-client on console-ams.rpki-client.org