Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fc874e04-4b33-30a9-99c5-bd6de94a3204.roa
File:                     fc874e04-4b33-30a9-99c5-bd6de94a3204.roa (raw, json)
Hash identifier:          nCCZ8QtgUOJkY+Trgiv5sswfgmlrSSJ328Akg7IoNHs=
Subject key identifier:   8A:01:E4:96:39:65:4D:82:CD:76:0B:BE:56:87:26:53:CA:00:CB:C7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A13B1D599EB7671C33B9A0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fc874e04-4b33-30a9-99c5-bd6de94a3204.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     19115
IP address blocks:        98.145.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:3b:1d:59:9e:b7:67:1c:33:b9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=5a1734be-fdf5-4be9-b4f8-37f1d8bebd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d9:36:1a:12:41:e8:06:cc:05:54:d0:6b:8a:
                    5f:c4:29:72:cb:b9:7b:90:a6:03:44:21:37:2e:5b:
                    a8:d0:25:07:9f:f6:95:4d:a9:b3:f5:b4:74:fb:f2:
                    66:0f:31:8c:35:71:41:fa:f2:e4:6d:70:7d:56:1a:
                    62:a5:dd:d7:57:79:28:c8:18:3d:43:e8:ac:a0:84:
                    da:da:79:f7:5a:37:5b:0c:2d:fb:53:2a:df:da:13:
                    a7:fc:46:8a:8a:c0:a8:45:fd:f3:32:d4:ab:5a:9a:
                    fc:ab:ef:59:ff:9d:7e:2f:7d:fa:40:d7:20:4d:a8:
                    5f:01:3f:a2:16:c0:f6:da:21:21:f1:9e:fe:be:4e:
                    64:88:ee:67:41:b4:d0:8f:3c:a5:59:53:b5:26:f5:
                    83:41:ce:35:82:ba:82:95:bd:58:41:3b:74:d1:fd:
                    d9:80:30:d9:f1:cf:c0:03:d8:f7:45:22:5d:ab:34:
                    cd:b0:a9:ef:b0:38:e7:c2:53:07:f6:1f:54:e4:cb:
                    e1:94:bd:aa:7a:4a:f3:19:67:39:79:48:d2:6a:3e:
                    82:0a:96:88:99:a1:83:1a:44:23:10:fc:99:ce:6d:
                    9a:3c:3e:85:cf:fe:2b:12:09:7d:ed:4b:81:10:00:
                    8b:60:92:ed:da:86:66:37:9c:bc:e7:11:0c:7c:4b:
                    3b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:01:E4:96:39:65:4D:82:CD:76:0B:BE:56:87:26:53:CA:00:CB:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fc874e04-4b33-30a9-99c5-bd6de94a3204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.145.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e7:6d:57:d5:ca:51:52:cf:8d:f5:eb:0a:3c:96:1d:1b:2f:
         9d:6f:aa:69:a4:fb:7c:c3:6f:43:8b:de:21:5e:11:d9:a9:ff:
         c9:33:1a:aa:91:c1:29:36:48:60:48:14:28:27:c7:17:5b:c8:
         af:dd:86:b2:2d:bf:0b:17:f4:c5:62:14:b1:c9:74:2f:2a:49:
         50:69:54:cd:0a:75:b5:76:ae:4f:78:43:1e:39:5b:2e:91:86:
         f8:e5:30:12:ae:f0:5a:ef:6e:a7:b7:4c:a4:ce:d3:05:4d:a5:
         db:ae:25:fb:c5:0b:51:e0:64:21:3b:f6:60:8d:0f:c6:93:9f:
         60:26:69:62:c2:df:bb:3f:3e:6d:1b:97:5e:97:40:ca:87:c0:
         61:66:67:e5:03:97:a9:ed:1d:da:6f:2d:bd:57:37:82:a9:81:
         ca:2f:a9:7b:fb:55:77:33:b1:68:f7:64:77:32:f2:47:ed:12:
         f5:af:b2:e3:3a:2a:a4:0a:7a:44:2a:bd:e6:03:8d:0b:9b:04:
         ed:3d:4f:bb:a1:8e:fc:6b:7c:a2:cb:84:b4:1a:cd:32:ad:5c:
         ce:6d:ad:1a:f5:12:b2:b8:c0:a4:29:46:39:94:b1:fb:21:08:
         79:ca:1a:81:a1:35:e1:73:75:22:4e:d8:0c:db:7e:1f:67:9d:
         82:a6:16:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:41 2024 by rpki-client on console-fra.rpki-client.org