Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5b7d95d-0a50-3248-889a-13b59ba74112.roa
File:                     c5b7d95d-0a50-3248-889a-13b59ba74112.roa (raw, json)
Hash identifier:          SRhiU2ZqIkST2W+MotjFbgJrZLuK6hFjJ5N81wCcGFw=
Subject key identifier:   8A:BC:B2:34:6D:D9:11:F4:B0:27:1D:D7:B9:98:4A:C3:4F:60:E6:18
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858394CF45B45F085D996D4862740
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5b7d95d-0a50-3248-889a-13b59ba74112.roa
Signing time:             Thu 18 Mar 2021 04:00:00 +0000
ROA not before:           Thu 18 Mar 2021 04:00:00 +0000
ROA not after:            Thu 18 Mar 2027 04:00:00 +0000
asID:                     20115
IP address blocks:        98.8.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:4c:f4:5b:45:f0:85:d9:96:d4:86:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 18 04:00:00 2021 GMT
            Not After : Mar 18 04:00:00 2027 GMT
        Subject: CN=6ea05175-a233-440e-baf2-31b6f5da8525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:d3:27:da:9b:25:b7:49:2c:91:6a:02:58:
                    29:dc:c7:7e:e6:d0:4a:96:ac:65:df:2b:81:24:94:
                    c2:60:2d:5a:d2:35:5a:bc:d5:69:74:9a:f1:be:6d:
                    c1:86:82:a0:fe:dd:14:d9:5f:1d:3c:15:f5:fd:c3:
                    23:8c:e0:7a:3f:2f:22:56:7a:e9:9d:1b:c6:17:1d:
                    df:0a:7a:4f:70:a3:5d:51:f6:45:4d:37:b7:55:ea:
                    5e:7a:8d:d4:a8:42:e1:98:82:74:be:78:55:60:2c:
                    b0:ab:13:c5:6e:aa:fa:b6:85:de:97:b6:fe:46:6a:
                    ac:24:d6:fa:83:1f:63:58:86:29:50:59:64:a4:f6:
                    80:5c:be:c5:27:14:02:9a:cf:93:b5:d6:61:22:72:
                    ea:10:46:f9:5d:08:4e:78:75:0b:97:31:5b:95:3b:
                    f2:d8:bc:b8:ba:ad:e2:38:7d:32:1c:4a:1b:a2:72:
                    4c:62:3a:19:8b:ed:3f:3f:36:fb:63:4c:bd:30:e6:
                    ed:c0:1b:14:e1:19:af:c3:9d:bb:84:62:3d:92:4d:
                    de:2a:c5:20:a8:02:53:23:55:68:6e:da:a2:70:d3:
                    b5:cc:e7:72:70:d7:99:45:98:e3:22:02:7e:48:ca:
                    c0:d1:1b:e9:6c:40:92:0f:78:7f:2d:82:17:40:3f:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BC:B2:34:6D:D9:11:F4:B0:27:1D:D7:B9:98:4A:C3:4F:60:E6:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5b7d95d-0a50-3248-889a-13b59ba74112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.8.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:34:23:5b:a9:ec:67:02:23:2d:7d:48:9d:de:8e:0a:85:fa:
         4d:6a:38:d7:0c:6e:22:92:ab:17:4c:f9:67:50:90:62:ea:3a:
         d0:b7:62:bd:38:2e:4b:ef:4e:c4:81:76:ee:30:5e:04:b6:15:
         f2:a2:23:33:30:8b:c6:52:cc:0b:82:47:7e:09:e5:86:2e:00:
         90:93:ef:db:ac:57:5e:c4:34:57:3f:07:3e:4d:22:0e:21:76:
         fa:38:ea:9c:fd:19:c0:50:28:08:26:29:63:8b:43:ac:29:83:
         c6:71:55:c4:cf:06:55:8c:f3:43:0f:4c:7d:48:4a:64:49:b5:
         a9:0f:66:39:63:13:26:11:72:f2:24:76:ba:bc:58:e1:34:ca:
         6c:03:13:63:55:0a:4c:c8:86:b6:3c:8a:28:4a:2b:fa:70:6f:
         b5:3f:08:bf:ca:79:a5:92:36:eb:07:be:11:d6:fe:93:dc:92:
         ee:be:46:3b:d6:2c:99:07:8e:11:d2:85:5b:84:da:7c:b8:7a:
         39:93:4d:7c:e6:76:62:18:cf:18:f2:45:67:46:e1:c0:8b:07:
         6c:49:16:5a:c2:5a:b6:71:41:d5:b8:65:e4:e9:a9:17:07:04:
         5d:b8:bc:8e:31:f8:90:d6:d2:c7:5c:64:1b:42:29:52:8e:53:
         a3:7f:1c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:30:28 2024 by rpki-client on console-fra.rpki-client.org