Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a694f78e-2476-3ea6-a166-1042f5c0aeab.roa
File:                     a694f78e-2476-3ea6-a166-1042f5c0aeab.roa (raw, json)
Hash identifier:          TLiBI5h7EmHECGv4lf1wcJ1SaVvZ4PWSLVg3ZhRjrtg=
Subject key identifier:   9A:3C:D9:AF:D2:B8:1A:31:1C:54:8E:D2:A4:73:F9:5F:0B:53:63:83
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E768C8CF9DA8BEFC22C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a694f78e-2476-3ea6-a166-1042f5c0aeab.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     46810
IP address blocks:        98.100.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:76:8c:8c:f9:da:8b:ef:c2:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=24924a58-38f9-4cff-b0b1-29654d3245a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8d:b3:cc:f6:14:a7:43:45:0a:fe:fc:ac:ec:
                    a3:2d:83:54:f4:a0:67:5f:08:4d:7f:54:58:53:b8:
                    c2:84:91:b8:64:d5:2c:0d:fc:5a:56:03:1f:3a:59:
                    9b:e3:92:0e:b7:6f:7b:9e:36:82:0c:1b:f6:f4:d1:
                    a8:c3:bf:46:c2:a8:3b:c9:a9:e4:86:10:ba:69:8e:
                    62:f5:93:37:d0:63:3f:29:68:c3:a5:c8:eb:a9:83:
                    03:7b:7f:a0:67:e5:cb:fd:8e:3c:f0:b0:ac:ce:cc:
                    10:6b:91:d6:28:d8:06:98:7c:ad:0c:33:9a:78:3c:
                    cb:f9:4f:9a:2f:73:1b:1c:2c:62:80:3c:ef:e1:6f:
                    99:0c:4e:a6:62:73:9d:d5:1f:78:60:fa:dd:4e:ed:
                    36:58:cc:fe:b5:93:d2:54:25:4b:49:37:49:f9:83:
                    91:31:dd:29:73:03:10:13:1b:a8:f7:cd:6d:03:2d:
                    df:4e:54:29:0d:a0:57:9c:af:74:26:e5:6d:4f:f4:
                    c4:ac:db:4f:31:cc:b3:f9:84:b8:85:23:81:43:d1:
                    88:ad:d3:74:90:d0:ba:e9:67:98:4b:09:d4:a1:73:
                    37:8b:88:af:8a:a8:2a:9e:03:c8:a7:74:c9:2d:42:
                    3b:75:4d:fd:b3:af:47:ac:86:e2:88:14:a0:e8:68:
                    56:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3C:D9:AF:D2:B8:1A:31:1C:54:8E:D2:A4:73:F9:5F:0B:53:63:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a694f78e-2476-3ea6-a166-1042f5c0aeab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.100.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:86:73:05:da:c8:ca:87:5a:34:4e:e6:04:cc:9d:ee:3a:dc:
         5f:b6:08:15:e5:6c:1a:de:69:36:60:d7:73:3d:6d:9b:89:3c:
         f2:fb:4e:e9:be:83:7e:a6:b4:00:a1:e1:a9:31:b1:3a:3c:3f:
         c4:4f:ba:56:d1:7c:27:58:74:8a:cb:79:a4:6d:fb:fe:20:8a:
         6c:d2:57:d0:68:ca:0b:d5:70:95:04:8d:f1:6d:e3:4b:16:5c:
         6b:68:63:c8:05:69:41:0b:cc:a6:2a:9b:b8:40:b0:e3:e7:c4:
         39:04:3d:27:be:a7:32:22:1a:3a:98:72:03:01:07:a3:40:3d:
         d5:c6:f2:22:b9:a9:8f:07:29:c5:df:44:61:74:89:de:03:eb:
         fc:ff:13:8c:23:bf:cc:61:b0:9e:b9:f9:6c:c4:b1:56:95:30:
         1e:17:a1:0b:2a:fa:d6:59:5d:52:85:e7:f0:4a:86:96:ec:c3:
         1b:8a:b1:21:a4:1c:ea:6f:b9:aa:d3:2d:dc:53:01:17:57:e2:
         50:20:27:78:0e:3d:02:93:6a:eb:20:c5:95:97:b0:0b:96:e9:
         86:a0:d1:ba:1f:4f:64:f8:30:22:c1:17:69:45:a1:e3:ea:c2:
         a4:8b:47:cc:56:ba:b4:3a:32:8d:22:4d:0b:c3:4f:63:b8:94:
         6c:8c:02:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:56:10 2024 by rpki-client on console-ams.rpki-client.org