Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9bff9094-a42e-3cc8-9b63-3a307d83b948.roa
File:                     9bff9094-a42e-3cc8-9b63-3a307d83b948.roa (raw, json)
Hash identifier:          HtT5k2TD1BHOVRTtgwcwrzpeKrpQyHhv9bzy03/rsZU=
Subject key identifier:   59:93:27:C6:F8:DF:9E:27:B5:28:C5:6B:38:23:50:90:BE:AD:68:24
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DAC04F246613309552580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9bff9094-a42e-3cc8-9b63-3a307d83b948.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     10796
IP address blocks:        98.100.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:ac:04:f2:46:61:33:09:55:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=b23a03a0-ba05-4818-b611-7010c19be8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fa:da:4c:9f:e1:0e:4f:f6:f8:9e:8c:88:35:
                    55:2e:f2:19:58:cd:8d:77:2e:d2:c9:3f:1d:d7:8f:
                    b0:82:2f:21:87:ff:34:69:35:38:9e:e2:03:da:d9:
                    73:ed:55:c0:39:17:3a:72:c8:d3:03:72:6b:4f:23:
                    3b:cb:b3:e7:5b:a2:67:74:5f:d5:49:11:fa:dd:a7:
                    eb:4f:80:5f:83:f1:fc:66:07:7c:7e:30:33:0b:be:
                    7d:95:be:79:8a:90:6f:6c:e5:6e:49:4d:c8:98:88:
                    5a:02:75:e5:1d:04:00:60:d2:ae:ea:b1:e0:93:9d:
                    6a:d7:40:78:a8:e7:dd:4b:b8:78:06:03:48:b2:04:
                    96:71:81:57:e2:48:d2:c2:98:20:c0:fe:46:27:17:
                    f2:5b:dd:98:d1:5a:2d:93:30:f5:85:3d:d1:46:80:
                    64:94:ef:a2:78:54:51:96:ee:b5:70:f3:45:2e:06:
                    56:3f:08:24:9e:99:70:0a:ff:51:7e:39:ac:d8:af:
                    9f:1c:ee:d1:e9:82:18:5d:08:20:df:3e:13:ca:e4:
                    a0:74:ba:66:65:51:4c:6b:32:71:f2:46:36:f5:8b:
                    d0:f9:36:dc:75:0b:3a:98:c1:6c:8a:e1:2d:f6:e2:
                    15:ae:8b:bf:d8:2d:71:b8:fa:ae:ca:89:cd:fd:1b:
                    90:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:93:27:C6:F8:DF:9E:27:B5:28:C5:6B:38:23:50:90:BE:AD:68:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9bff9094-a42e-3cc8-9b63-3a307d83b948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.100.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:1c:60:4a:08:c8:39:d5:42:4f:02:fb:f5:15:cc:6b:bc:9d:
         7c:3c:11:25:9d:4c:71:c7:20:d0:03:8d:46:11:d4:4a:f5:5d:
         85:05:01:09:2c:aa:f6:74:38:c4:92:f1:18:55:b9:b8:ca:df:
         c3:ee:88:27:e1:0f:56:fc:68:9e:68:d2:0f:8f:1b:98:7c:54:
         9a:f8:4f:bf:c3:f8:fb:43:32:dc:4f:c3:75:cd:bc:38:29:62:
         5b:84:36:48:7e:cf:bd:58:65:ac:a2:94:e6:f8:0c:d3:57:b4:
         66:21:9c:9c:22:17:85:54:4d:1a:04:2d:5b:f7:ac:9d:55:80:
         c3:d7:e7:94:f6:4f:f4:88:92:44:98:2b:51:92:a1:d9:36:b9:
         cc:87:ef:5b:d3:f0:01:ea:e9:d8:2b:fc:ec:d7:ef:6b:d1:fd:
         71:94:33:44:a5:fb:17:05:f9:fa:dc:3c:ef:ee:05:0a:4e:ba:
         ed:f4:a8:d6:6e:e1:38:da:98:60:2b:a0:b0:dc:5b:e6:6d:a3:
         3d:93:af:1f:6c:58:38:07:0d:05:c4:5e:d4:54:4f:61:22:f3:
         c2:13:99:ce:25:26:76:8f:02:48:9e:b4:fd:15:2b:61:33:7e:
         3b:56:0e:fe:16:1b:59:16:4e:ff:39:a2:cc:07:07:1f:8b:07:
         99:84:5a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:52:34 2024 by rpki-client on console-fra.rpki-client.org