Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a75ecf62-e4a8-336f-9da3-94642a3cbbfe.roa
File:                     a75ecf62-e4a8-336f-9da3-94642a3cbbfe.roa (raw, json)
Hash identifier:          dNcF4tM+EqGcJgSfhDDdIok5EBmSRDY+b1T6H8V6sAs=
Subject key identifier:   4A:B3:20:A5:07:1A:79:C6:80:8D:5C:2B:94:C3:86:5A:C8:30:D5:8A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285844F4DC02824C00D41757C33200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a75ecf62-e4a8-336f-9da3-94642a3cbbfe.roa
Signing time:             Tue 20 Feb 2024 17:59:40 +0000
ROA not before:           Tue 20 Feb 2024 17:59:40 +0000
ROA not after:            Mon 20 May 2024 16:59:40 +0000
asID:                     16787
IP address blocks:        98.120.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:dc:02:82:4c:00:d4:17:57:c3:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 20 17:59:40 2024 GMT
            Not After : May 20 16:59:40 2024 GMT
        Subject: CN=9fc07034-676b-406c-80d1-03aace84b4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:29:ad:38:8b:8b:ce:b8:27:96:7b:ba:f2:
                    6e:f0:ee:58:81:95:49:75:32:14:40:da:3c:bb:65:
                    b0:ad:96:ea:ab:b0:20:d5:6a:0a:b7:cc:6a:ce:96:
                    22:20:d0:22:3f:74:7a:a8:d5:fa:b9:75:a9:64:21:
                    ba:cd:44:25:65:23:a6:ee:a1:95:27:35:cd:b6:45:
                    34:12:5e:b2:26:62:17:e1:33:ce:a0:e4:2f:4b:51:
                    63:15:53:a4:3c:3e:7c:f1:f8:bf:9d:4e:13:1a:a1:
                    a6:9d:8d:96:13:70:8a:b8:f2:ed:06:69:f5:e9:25:
                    80:47:3e:bf:67:1e:ea:f4:96:3e:20:44:ee:ff:21:
                    73:69:8a:a9:97:0f:a4:5d:ff:6d:05:9a:7a:bc:82:
                    74:c3:df:e7:a7:61:85:cb:1a:02:00:cd:1a:64:04:
                    35:c4:8f:c7:ec:6b:e1:97:0c:e4:3d:a3:96:31:f2:
                    67:b1:3a:58:11:28:92:d3:bc:4d:c3:d9:74:79:69:
                    34:e6:d1:f3:9c:46:46:ee:e4:cd:19:61:55:44:5d:
                    53:e9:28:87:d2:ed:93:80:01:5c:37:f9:af:fd:13:
                    bf:e0:18:a5:5e:35:9b:e7:cb:1b:20:d8:b5:49:a8:
                    c2:76:89:c4:fe:41:d9:e6:cc:80:be:e5:9c:c1:9b:
                    63:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B3:20:A5:07:1A:79:C6:80:8D:5C:2B:94:C3:86:5A:C8:30:D5:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a75ecf62-e4a8-336f-9da3-94642a3cbbfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.120.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:53:75:f0:9f:2a:78:a4:fa:26:ac:f7:66:cd:45:34:23:eb:
         73:9a:6a:3d:58:49:54:04:be:6c:c2:7a:fe:25:ce:1b:56:ef:
         5a:a5:e9:66:34:3a:d7:c5:69:a6:3d:30:88:57:ad:4a:21:1b:
         b9:6f:16:53:6d:f7:e7:9f:15:14:2e:76:81:cb:5b:24:7b:c1:
         d8:a7:4a:69:44:26:40:d7:7e:96:e5:16:35:4f:9d:e4:8e:ea:
         c2:8c:09:87:41:d6:d4:0f:4d:4b:a3:a0:ec:aa:0a:ed:de:03:
         46:f7:2b:cd:ba:1c:b3:69:d6:94:ac:1f:f6:f8:74:db:b7:89:
         e2:f6:dc:2b:f7:24:6a:1c:d9:39:02:fa:49:9f:ce:59:5f:d4:
         f8:87:d0:db:76:d9:65:61:02:38:4b:ce:c8:30:27:60:9f:88:
         6c:bd:71:32:13:71:05:aa:4e:2e:04:19:2a:2a:e1:ac:41:e9:
         be:a8:2b:08:11:d9:71:cc:04:c8:ae:a9:07:9c:d6:65:27:e4:
         a3:93:9a:c0:7f:0f:36:72:07:46:ff:34:c0:07:aa:57:81:94:
         32:cf:eb:1c:61:61:38:16:14:bf:ca:0f:c5:b6:28:f1:a4:ae:
         0d:57:5b:92:a2:4f:67:d8:d0:35:58:36:41:f1:02:d4:43:ea:
         30:6e:f5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:26 2024 by rpki-client on console-fra.rpki-client.org