Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/97c46e56-b2f6-3962-8239-5efbfd74b505.roa
File:                     97c46e56-b2f6-3962-8239-5efbfd74b505.roa (raw, json)
Hash identifier:          MHeOSkO/9eMu7+C4hbQsl2dgynt3ok+oE5k8zEocbZ8=
Subject key identifier:   10:C9:12:E7:AD:58:1C:E4:D6:71:BB:83:D3:1D:40:7F:C6:E9:74:3E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285838EC47EF174AA5FBC5D5102E00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/97c46e56-b2f6-3962-8239-5efbfd74b505.roa
Signing time:             Fri 12 Feb 2021 05:00:00 +0000
ROA not before:           Fri 12 Feb 2021 05:00:00 +0000
ROA not after:            Fri 05 Feb 2027 05:00:00 +0000
asID:                     20115
IP address blocks:        98.8.22.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ec:47:ef:17:4a:a5:fb:c5:d5:10:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 12 05:00:00 2021 GMT
            Not After : Feb  5 05:00:00 2027 GMT
        Subject: CN=323d4c48-1a18-46b1-b204-92d81a835557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6f:48:b8:6f:17:9e:a9:5f:6f:b5:be:ef:a4:
                    71:af:dd:11:52:cd:a9:6a:76:c4:b0:25:85:a9:72:
                    45:86:aa:43:08:f0:06:e2:42:a2:c8:63:0e:48:ac:
                    a0:d8:a0:9a:91:8b:94:a9:2a:f9:d6:d8:b1:3c:3f:
                    41:e0:a3:26:71:5a:1f:ed:06:a2:3d:d2:e6:21:75:
                    75:ed:7f:e6:5d:92:fe:d3:ec:a6:11:a4:88:90:78:
                    47:7d:a8:54:26:9a:57:66:d7:bb:3f:c3:8e:4d:56:
                    66:d1:40:cd:1a:d3:f2:bb:65:8e:96:c2:c5:cc:c2:
                    72:4e:e4:cb:be:56:a1:96:38:98:46:36:9f:0a:46:
                    48:9a:1c:18:39:77:f3:02:03:82:c5:03:12:cc:77:
                    8e:ae:f4:12:a3:56:c8:df:ea:4e:05:1e:af:59:fd:
                    ea:61:8c:4f:22:0f:c6:32:79:1c:bd:59:28:52:a9:
                    fc:7c:6d:31:d4:3e:83:a3:11:f7:b1:aa:a5:5d:19:
                    45:1d:1f:91:37:2b:d3:02:6a:cc:f6:c6:fb:79:1f:
                    3b:7e:14:92:4f:7d:de:94:24:d3:9a:8f:7d:43:8e:
                    6a:c7:df:c5:8b:3e:a8:92:bd:b5:1a:9b:a5:cf:c1:
                    97:7f:17:e5:6a:97:b1:b0:c9:4f:99:11:55:57:0e:
                    6e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C9:12:E7:AD:58:1C:E4:D6:71:BB:83:D3:1D:40:7F:C6:E9:74:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/97c46e56-b2f6-3962-8239-5efbfd74b505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.8.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:64:c0:34:d7:3c:d9:d9:b6:ad:d2:84:f9:d1:37:46:83:47:
         35:67:77:e0:69:62:17:44:f4:8c:74:77:7b:88:3c:e0:9b:75:
         cf:ef:27:7d:71:a5:64:ce:63:0b:54:91:a3:78:b1:81:55:8e:
         09:41:20:ad:7a:c3:90:4a:b4:da:88:84:62:a7:0e:b0:73:28:
         90:21:3c:77:55:66:e8:11:46:70:7d:6e:c6:77:b4:2b:cc:0b:
         47:fc:c3:b0:13:50:27:9c:1b:d6:6b:b0:f5:bd:61:c4:17:1e:
         6b:03:90:f2:43:2d:ae:03:33:ee:9c:1f:66:95:9e:94:15:67:
         78:09:46:b1:b3:b7:a9:58:c2:0c:ee:2f:bc:7f:81:53:21:71:
         2f:75:38:c2:3f:81:27:54:33:92:16:6c:f8:e5:1f:b8:b7:45:
         dd:01:9b:20:4f:d4:5b:30:1a:63:1d:ad:8e:bb:86:fd:a1:38:
         09:90:42:f9:40:86:e8:05:0b:e7:7c:1f:39:bb:11:39:b9:0e:
         2b:50:ad:9f:59:b4:45:8a:1e:65:f9:be:2a:82:ca:12:d2:98:
         16:74:b2:58:1f:97:f9:7e:88:25:05:96:23:8f:ef:9d:8f:01:
         22:68:44:37:41:4a:f8:d6:25:2e:98:a8:0e:55:25:8c:64:ad:
         45:18:9c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:33 2024 by rpki-client on console-fra.rpki-client.org