Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/98ec0cfa-d895-3023-96c2-3a8091cec20b.roa
File:                     98ec0cfa-d895-3023-96c2-3a8091cec20b.roa (raw, json)
Hash identifier:          yYgmyPQ3aZt3Qu1hTwlS4+3JLKaI6DLCHuhmkV3Qo5Y=
Subject key identifier:   B3:03:E2:33:E4:46:62:FD:A8:4D:AA:9E:D5:A5:E7:B7:CC:F2:55:93
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0C35799B1775C60AF5180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/98ec0cfa-d895-3023-96c2-3a8091cec20b.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     395060
IP address blocks:        98.0.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:c3:57:99:b1:77:5c:60:af:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=1d0cbb6e-5370-440b-89d6-13d687f7eab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:7f:eb:9f:a4:89:71:88:db:75:ed:3d:55:
                    d3:f5:2a:60:fb:a2:8f:b3:c0:23:d2:4d:bc:5e:21:
                    82:4a:3a:4b:3e:24:19:b9:48:24:9f:08:c9:ef:59:
                    ff:b8:f4:fc:1f:a9:81:d1:4e:4a:42:ad:15:8e:dc:
                    97:99:76:44:2d:11:24:78:52:ee:e2:ed:1c:76:e8:
                    70:a4:94:a1:3e:e6:b5:0b:e7:7e:fa:99:95:82:02:
                    ad:36:c3:89:15:98:df:23:e6:25:68:1b:cb:92:e9:
                    e8:76:b6:cf:74:dc:9b:f6:ab:0a:84:2d:e9:6c:30:
                    c1:d6:37:a1:61:ea:22:bd:57:a9:de:b1:00:df:92:
                    f6:be:41:ff:c4:a4:81:fd:83:93:eb:ff:cd:8f:f1:
                    66:84:df:2c:53:f7:08:43:c4:b7:9f:f9:fe:2d:ab:
                    8b:3d:36:a0:28:a7:4c:3e:aa:bd:75:a4:1f:74:99:
                    d9:86:43:70:74:a7:b3:e3:88:d7:d2:d0:8c:90:91:
                    af:d3:f6:c2:7d:4e:c0:71:4e:9e:ef:8f:fd:93:ba:
                    ec:df:5e:39:64:ae:0a:75:67:70:d3:a4:87:f9:b1:
                    ba:0e:4b:bc:45:0c:eb:a0:90:04:3f:92:09:2f:22:
                    07:96:42:30:fc:cc:13:d7:ee:51:9a:b2:3c:22:9b:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:03:E2:33:E4:46:62:FD:A8:4D:AA:9E:D5:A5:E7:B7:CC:F2:55:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/98ec0cfa-d895-3023-96c2-3a8091cec20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.0.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c2:ad:3a:24:5b:02:28:eb:55:ec:c8:46:4b:4f:6e:aa:e8:
         f3:12:c9:2d:d4:b5:e4:74:cd:39:22:47:91:05:bc:7a:ac:ff:
         bb:4a:05:ac:16:ec:8a:c3:93:4e:c1:90:a8:cf:16:31:ce:27:
         64:9e:9e:f1:9d:a5:74:dd:e6:d5:02:ed:7e:b1:3c:09:aa:11:
         54:69:e6:c1:9b:04:e8:5f:81:ef:83:e8:61:08:1f:d4:73:22:
         a4:d7:18:e7:cb:8f:8d:07:c9:21:64:b3:f9:15:df:40:80:8a:
         4e:8f:9f:e4:8c:59:0e:b1:04:21:c3:03:5f:14:1e:23:68:1f:
         9b:bb:b9:d7:9a:45:26:c3:68:77:9b:02:d4:c0:57:16:69:d7:
         64:5f:5f:31:4a:87:4d:7c:47:da:d3:48:43:01:27:9f:b1:1f:
         48:c7:8c:12:52:f6:48:1e:48:dc:b6:33:88:e9:5c:2a:ac:36:
         72:53:13:b1:ae:c6:2e:2d:53:37:56:f5:df:03:8a:dd:cf:cf:
         a1:53:0b:f0:16:ff:3e:b4:6d:c6:13:a9:81:64:c4:e1:43:72:
         c0:4b:d2:e5:49:fd:5b:a8:01:f9:cd:7f:a9:2e:74:85:8f:2f:
         d3:eb:c1:be:4d:2b:41:18:8f:68:2e:4f:28:b4:e0:2d:f4:8f:
         99:5e:74:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:33 2024 by rpki-client on console-fra.rpki-client.org