Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3c2700e-f0fb-34bf-8707-0e4fa73537bb.roa
File:                     a3c2700e-f0fb-34bf-8707-0e4fa73537bb.roa (raw, json)
Hash identifier:          BnNrCbkUMiaiE4fdEPisee/A1l7XlY6KsN4RhEfSfYU=
Subject key identifier:   03:8E:0F:55:46:86:02:D5:AC:B8:8F:7B:10:30:44:90:60:08:39:49
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A129929B6ADC46553942C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3c2700e-f0fb-34bf-8707-0e4fa73537bb.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     11351
IP address blocks:        98.4.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:29:92:9b:6a:dc:46:55:39:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=1eaa0950-288e-45fa-acb2-0833bb15aa13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f0:35:e8:f5:c3:99:a5:31:98:77:41:50:e1:
                    13:20:34:71:d1:23:16:f7:62:16:a8:e7:bb:6d:e6:
                    77:af:c3:a0:02:17:2d:1c:6c:80:72:cd:d5:07:dc:
                    61:15:68:95:15:5d:1b:ac:af:ba:60:e3:21:48:01:
                    f0:e4:57:2e:03:31:8d:14:bf:1c:aa:9a:21:61:bd:
                    92:39:fb:a3:12:8b:0a:ea:d1:71:79:45:23:6f:e3:
                    25:90:36:86:cd:55:1f:09:43:2c:5a:fb:90:ef:5b:
                    b2:20:b2:de:8a:ef:32:65:cb:65:9b:01:20:ab:ec:
                    9a:1a:f0:cb:18:e6:67:1e:cc:3a:80:37:55:f9:c2:
                    f2:99:fe:fe:dd:b8:b3:80:5f:14:d0:3f:ee:77:4a:
                    30:87:6d:93:e0:f3:fb:08:b6:cc:c4:34:51:a9:4b:
                    33:36:3e:04:f9:f4:51:da:31:23:d9:c9:4c:10:08:
                    46:f1:71:e2:91:16:dc:8b:36:2b:89:8b:ac:e5:89:
                    bb:67:4f:7d:77:6d:cf:d5:7f:8d:a1:c9:09:7f:b9:
                    df:c9:d2:c8:27:7b:57:54:39:13:a1:b6:58:8d:88:
                    b0:d1:8e:07:1f:f1:01:ea:2b:d2:b0:c6:25:37:db:
                    05:9f:5c:19:87:67:a7:0a:a6:19:42:d1:90:f3:99:
                    ed:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8E:0F:55:46:86:02:D5:AC:B8:8F:7B:10:30:44:90:60:08:39:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3c2700e-f0fb-34bf-8707-0e4fa73537bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.4.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:46:6d:55:79:0e:ca:9f:90:51:bc:e3:ba:86:c2:8b:4b:39:
         e0:6b:47:62:ac:29:72:82:a3:45:47:1a:72:80:64:a5:a3:d7:
         65:e0:8e:22:8a:cf:a1:cf:3a:7e:51:ff:23:d2:4a:5e:76:dc:
         0d:c7:f5:70:ce:93:82:ad:a3:3e:a5:c1:43:0c:eb:20:5c:8a:
         7c:0b:a9:9a:ea:04:44:a1:78:b7:63:0b:14:2f:c6:8c:dd:e7:
         fe:8d:b2:78:80:7b:cf:ac:fe:c4:85:fe:18:9d:ac:20:9e:c9:
         26:2e:8f:4f:c9:d4:a5:37:2c:6b:78:7d:3f:30:6e:fd:ee:0d:
         55:4d:e3:7b:ab:0f:81:b0:9e:4f:1d:81:f0:b3:8f:26:42:30:
         3c:2b:96:4c:31:6c:5f:de:a8:1d:b2:66:09:3e:e5:53:30:1c:
         d8:1c:79:b6:53:ee:0f:28:33:66:51:5b:36:4a:1d:6e:9d:73:
         d4:87:d2:cb:07:4c:94:ed:4b:8a:6a:50:40:f4:14:de:d8:78:
         f6:b2:7e:07:74:bd:39:ac:7a:27:5e:d3:c6:c2:c3:02:76:c7:
         75:2c:64:4c:cc:2a:04:db:c5:4f:bd:ab:d5:6c:81:eb:0b:cf:
         ed:be:e9:75:0c:59:3c:88:68:84:22:d4:f6:82:cf:a1:4c:82:
         d3:36:0b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:33 2024 by rpki-client on console-fra.rpki-client.org