Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/93701b8c-e4bd-35ad-90d0-e39ff365f239.roa
File:                     93701b8c-e4bd-35ad-90d0-e39ff365f239.roa (raw, json)
Hash identifier:          0iyUoo+M9QnTLJNE5Q698ZeWd7gPG68NxtZ6OibNnzM=
Subject key identifier:   5A:46:9B:E4:EB:DF:D3:C4:86:71:9D:33:B6:24:2E:78:F3:70:BC:D8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A09DD1956C0B1CF59DEF00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/93701b8c-e4bd-35ad-90d0-e39ff365f239.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11426
IP address blocks:        98.157.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:9d:d1:95:6c:0b:1c:f5:9d:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=4003f02d-fdf0-4647-a795-bd1d81eeb310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:34:3d:7f:7b:84:14:19:22:de:3d:33:ab:b8:
                    1e:5f:24:63:d3:56:9e:4f:9d:a8:80:00:8f:9b:fe:
                    f0:fa:1c:75:08:18:f7:76:25:6a:80:6b:75:b3:ed:
                    16:ac:37:6a:f0:8e:de:cf:3c:74:5e:54:ee:06:1a:
                    b2:4e:54:f7:f4:7a:ab:60:b3:4b:b2:49:8e:37:73:
                    ea:7f:c2:a1:f3:ac:6f:ef:50:21:8c:17:18:78:c0:
                    e5:fc:03:1b:b8:f8:8e:b8:12:e9:a4:4e:8b:12:c1:
                    06:f4:fd:1f:a1:79:ff:a1:ca:e5:23:bb:f2:86:3c:
                    db:55:d9:1f:ae:94:16:d6:b6:2b:3e:78:0c:23:6c:
                    ba:c3:47:71:e9:de:9f:a0:76:5a:d4:7b:87:c2:66:
                    70:7c:f0:2f:81:08:13:c3:bc:35:32:1b:51:4f:f8:
                    8d:70:65:f1:de:3e:97:6f:9c:33:30:a9:b4:ac:a4:
                    7b:72:fb:53:cb:ff:ab:fc:30:44:66:8e:13:5b:34:
                    e4:2e:a2:51:b1:c8:dc:13:af:3a:16:3c:fe:66:7a:
                    65:3c:38:18:48:ba:eb:d5:1c:ab:5e:c8:51:8e:51:
                    00:0e:f3:7c:8e:f4:c0:c3:da:80:42:d1:10:a5:c8:
                    4d:b7:73:8c:9c:61:04:17:0b:8e:3c:9f:c3:43:6c:
                    80:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:46:9B:E4:EB:DF:D3:C4:86:71:9D:33:B6:24:2E:78:F3:70:BC:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/93701b8c-e4bd-35ad-90d0-e39ff365f239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.157.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:58:6f:6e:c5:9b:f9:92:ea:5b:d4:5e:28:f5:e2:60:1f:0b:
         ae:67:0b:07:a7:0d:d7:01:dc:27:a3:35:b1:ae:56:6a:47:03:
         7e:3c:48:0b:cb:6a:9d:53:b6:a6:63:4d:85:f1:c7:fc:63:8b:
         7e:b5:fa:98:80:01:38:65:b3:ac:44:b1:5a:fc:fb:cd:96:e1:
         18:03:49:35:a1:16:c0:46:17:15:6d:e7:af:3d:f9:66:1f:63:
         d3:79:c6:5b:cf:de:7d:e8:b4:4c:a8:e9:c2:c8:20:ee:01:5a:
         46:ca:a7:7c:65:ce:13:e1:ba:fa:c1:82:1d:39:22:ab:00:82:
         d4:f9:c2:b6:37:6b:22:24:14:71:5e:d4:c6:a1:2c:4b:7d:9e:
         5e:a5:5a:56:01:db:5a:d2:8c:c2:ca:dc:57:6c:24:37:28:c1:
         1c:fb:ca:21:f3:16:8c:bb:15:fc:d3:22:3c:c2:36:69:cc:39:
         89:11:55:9a:9e:dc:89:95:9e:e2:0c:dd:32:05:5e:f3:86:e2:
         77:10:06:77:0f:b8:5b:19:9f:df:4a:56:c2:4e:df:36:ec:ed:
         0b:32:4e:61:8c:91:f8:9e:b8:ff:bd:c3:6e:cd:fe:97:48:33:
         b5:8c:06:f2:ee:cf:ca:54:b4:1d:f3:57:90:aa:83:8f:07:c2:
         5c:84:99:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:45 2024 by rpki-client on console-fra.rpki-client.org