Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b00d8658-37d4-33c7-8d93-7175bc24bff0.roa
File:                     b00d8658-37d4-33c7-8d93-7175bc24bff0.roa (raw, json)
Hash identifier:          ZzRRiLDM7CtmfYKELHBRjAUkyoOFPPBOXOK+zfG0hmc=
Subject key identifier:   52:DF:8E:8E:D2:3D:89:A7:AF:A5:4B:33:CD:60:EA:DD:82:8D:18:9A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A0889AC78AD77E3F5A0520
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b00d8658-37d4-33c7-8d93-7175bc24bff0.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10796
IP address blocks:        98.123.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:88:9a:c7:8a:d7:7e:3f:5a:05:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=b0cba9ee-e2a4-4983-9414-e375cc87066a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:76:cf:dc:6d:82:23:c8:02:75:35:e2:e3:65:
                    09:2f:10:de:59:81:fe:f0:b3:3b:e1:d7:dc:e4:3d:
                    66:66:9e:98:f4:6a:d7:27:a3:2a:d1:46:8d:a3:23:
                    05:8a:74:a1:c3:7d:39:78:89:33:c0:e6:4a:47:74:
                    66:59:7f:69:da:73:6c:49:b6:c0:4a:66:0c:26:db:
                    02:cf:81:7f:a5:f8:c7:fa:33:f1:4c:74:88:53:b2:
                    c4:6c:7c:2f:45:e0:ed:d4:2f:cf:f2:dc:78:9e:b9:
                    ad:0b:63:5e:68:cb:41:b0:7e:8d:bd:14:aa:81:61:
                    c4:06:27:9f:1f:69:83:a7:a8:09:db:e2:63:88:1c:
                    c9:07:ba:80:04:ef:74:17:09:43:7c:56:55:35:39:
                    cd:17:b2:95:f0:bb:95:39:43:de:bd:93:7c:1c:be:
                    1f:4c:98:9b:fd:6b:13:87:6f:88:2b:9e:29:46:a5:
                    c3:5c:28:25:d7:08:91:1f:0a:ec:70:3c:bc:f6:02:
                    c2:1c:5b:c6:6f:e2:ee:0b:2c:d8:5f:28:a0:0d:c9:
                    63:83:11:15:51:8c:b3:1b:31:07:bd:ce:17:fc:c2:
                    97:5b:1d:bc:87:97:ee:a1:cb:80:32:77:30:67:a2:
                    22:36:fb:ef:bc:90:30:a0:2c:43:bd:48:63:e6:b4:
                    bb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DF:8E:8E:D2:3D:89:A7:AF:A5:4B:33:CD:60:EA:DD:82:8D:18:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b00d8658-37d4-33c7-8d93-7175bc24bff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.123.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:02:32:a2:ae:ae:da:eb:4b:9f:78:1e:e7:a9:3e:fa:d5:00:
         ec:c7:48:d7:14:1b:70:e4:6d:23:ef:b8:e2:46:73:43:e1:84:
         40:45:dd:0d:c5:55:15:cf:70:26:15:d9:86:12:b6:1d:6e:27:
         46:56:4d:3e:60:dc:1e:d0:63:67:39:3b:eb:33:ee:d0:04:85:
         f2:35:b0:1a:38:c0:35:ca:5b:0b:91:06:a7:18:5c:8c:12:66:
         48:c2:c6:6e:6b:e5:7b:95:8f:45:f4:eb:f6:2c:b3:81:d8:35:
         18:6b:ea:d1:6b:7a:1c:98:4a:9e:a2:b2:9f:6e:af:97:e0:ad:
         f6:0d:a5:78:92:b8:32:f3:7e:75:b0:61:a5:84:6c:39:77:54:
         29:c5:60:07:e9:f4:7f:01:69:1c:db:34:5e:c1:4b:1d:5a:54:
         c5:11:98:8a:d3:99:1c:76:ef:c4:e8:92:00:82:6c:93:c8:1a:
         a7:50:05:a0:e8:88:65:6e:41:85:78:cf:8e:61:61:4c:27:8f:
         30:0f:ea:77:43:61:5b:09:c2:e7:9d:bf:ab:e3:b6:ac:c2:86:
         90:71:14:3e:6d:2e:e7:7b:10:1a:15:35:4e:b0:ec:4d:9a:33:
         57:55:9c:61:60:b8:86:ee:4e:8e:df:c0:f5:6a:74:ab:83:ff:
         da:21:e2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:34 2024 by rpki-client on console-fra.rpki-client.org