Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c882ef82-1c2f-3a8e-87ce-9974b3c92ff5.roa
File:                     c882ef82-1c2f-3a8e-87ce-9974b3c92ff5.roa (raw, json)
Hash identifier:          eOSNlkf3gzGoveZtGyG71UkyeGK7+ZxGsiWdeOXvTpw=
Subject key identifier:   D7:A6:3D:49:19:39:C2:8C:0E:0C:CB:7A:D8:C4:C7:38:C8:6C:4B:E3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A11D68C6C35FB378F5FF00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c882ef82-1c2f-3a8e-87ce-9974b3c92ff5.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10796
IP address blocks:        98.157.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:1d:68:c6:c3:5f:b3:78:f5:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=11af6138-a4a6-491b-b12e-bd829058065d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:09:b5:05:1f:69:e1:f2:df:7c:03:78:79:68:
                    05:ab:8d:a2:7e:d6:e4:d5:70:d8:5f:c4:fc:27:72:
                    3c:f4:3b:54:96:af:c4:eb:ee:29:ec:52:c5:2e:19:
                    c3:f3:6f:d0:e8:0c:7c:57:35:c5:24:61:18:e3:a7:
                    46:b2:4f:75:a4:87:1e:85:99:bd:b5:86:d2:37:43:
                    3c:b1:97:e9:d6:5f:19:0f:79:6e:41:2f:ca:d5:2a:
                    90:14:41:c4:bd:16:df:63:bb:76:44:69:e4:2d:21:
                    11:e4:51:72:a0:48:1a:81:d0:18:9a:cf:58:9f:2b:
                    71:fe:c3:0b:60:89:17:db:89:f5:98:02:0d:f6:21:
                    2c:ab:54:e4:63:6f:04:a5:d7:c6:df:96:b0:a1:97:
                    48:64:e3:59:ab:6e:b4:46:de:fa:6d:6b:34:60:6f:
                    02:12:60:1d:89:04:52:0a:a2:fe:1a:0a:c4:a2:e8:
                    23:7b:fb:77:20:93:19:21:b5:d4:1c:38:5d:e7:94:
                    d4:28:25:cb:8d:54:1e:3c:cc:c9:c5:33:cf:a5:72:
                    13:f1:58:6a:2f:8b:77:43:05:c8:91:4f:98:0b:a8:
                    85:61:0e:4e:b3:49:99:ee:5b:f3:d4:3f:d4:3a:b3:
                    3a:b9:a0:6d:8d:36:de:d5:12:66:52:bd:22:15:d5:
                    7b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:3D:49:19:39:C2:8C:0E:0C:CB:7A:D8:C4:C7:38:C8:6C:4B:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c882ef82-1c2f-3a8e-87ce-9974b3c92ff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.157.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:95:80:7f:77:ae:16:6d:a1:03:df:63:8f:65:1d:9f:e7:66:
         8d:ec:31:cd:45:ed:a3:f2:64:b2:60:41:41:d7:ce:2b:a6:23:
         a4:06:b7:d3:4f:ea:3d:db:61:b7:93:19:1f:c1:a2:c1:ab:9e:
         9c:2b:b0:d4:52:8c:82:9a:bd:35:f3:6f:3e:aa:2a:ad:14:79:
         81:77:10:1d:d2:4e:84:bb:15:12:06:75:b8:ad:2c:22:d4:52:
         96:3b:0b:11:d8:d9:1d:df:64:1b:c1:1d:95:79:56:e7:45:a5:
         a6:19:49:20:fd:3d:e4:43:cd:57:a0:91:9d:c2:12:ea:17:4c:
         b9:4b:d3:62:07:aa:a2:a6:3e:47:8b:85:8e:1d:4c:fc:af:03:
         40:e5:08:50:33:d7:5c:30:c1:2f:76:fc:9a:65:09:13:76:93:
         b8:4d:30:81:e5:b0:5d:29:2e:48:9b:86:2b:1c:0c:ce:f4:e2:
         ea:f7:8f:78:0d:29:cb:af:b2:47:83:90:a9:04:2e:61:3e:10:
         96:67:f7:08:ca:6b:57:da:76:9a:2b:b1:f4:11:89:c1:82:44:
         aa:a8:96:52:68:1f:68:a3:d6:cd:f1:ab:02:a4:3b:13:4a:8f:
         96:51:20:83:58:37:4c:ba:e6:89:fb:58:a2:db:75:91:44:57:
         f5:1e:86:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:37 2024 by rpki-client on console-fra.rpki-client.org