Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/5c640c2d-edb4-3a61-a2e4-af76f523e343.roa
File:                     5c640c2d-edb4-3a61-a2e4-af76f523e343.roa (raw, json)
Hash identifier:          5ZUlolw4OamF89fr9DR29St+/Y5DxQtrP9gjFmn7rYA=
Subject key identifier:   02:2B:A1:84:73:AC:7F:28:6E:EE:FA:8F:FE:FA:BE:CA:1B:F6:3B:C0
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F432858459A63473E052FBF68C8660780
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/5c640c2d-edb4-3a61-a2e4-af76f523e343.roa
Signing time:             Sat 20 Apr 2024 01:00:26 +0000
ROA not before:           Sat 20 Apr 2024 01:00:26 +0000
ROA not after:            Fri 19 Jul 2024 01:00:26 +0000
asID:                     13213
IP address blocks:        98.158.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:63:47:3e:05:2f:bf:68:c8:66:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Apr 20 01:00:26 2024 GMT
            Not After : Jul 19 01:00:26 2024 GMT
        Subject: CN=957b0116-1120-42c9-a783-7851b62010f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f7:4e:88:90:63:e9:e8:38:3a:76:cb:32:73:
                    bb:96:96:39:ae:53:db:2f:49:37:81:06:28:36:8e:
                    66:09:35:c0:5a:4b:04:79:ac:a5:b1:69:df:be:17:
                    15:f9:3a:be:5c:b2:4c:c3:c9:1b:12:76:c4:db:46:
                    64:87:fd:07:03:e3:70:fe:3c:e8:e2:0b:15:8b:dc:
                    e3:17:b2:8d:bd:9a:4a:4b:bb:89:62:9a:73:23:6a:
                    52:c3:72:b9:c0:43:e5:2d:ae:0e:49:fb:3f:69:83:
                    d5:4d:ad:5f:7f:b9:bf:f4:06:92:20:82:94:36:fa:
                    e4:cf:63:02:24:32:d6:03:ac:23:a6:73:ad:bb:25:
                    64:58:0b:f5:22:6e:c6:02:b2:37:ee:4a:81:27:ed:
                    0f:2f:88:1e:ac:1f:3e:d0:43:78:5a:ec:fc:3e:97:
                    9c:d8:24:2d:40:5b:79:d7:20:e6:4d:fc:8a:e9:4a:
                    94:1e:5a:98:9f:6b:f8:77:14:81:6d:e8:81:7b:5b:
                    6c:57:10:cf:22:fb:2f:07:91:54:83:79:a9:91:8b:
                    c7:c4:cb:06:a4:d2:75:76:bd:3c:74:3d:b1:e8:84:
                    45:28:f6:10:d8:c4:3a:77:cb:a9:60:6a:84:41:71:
                    03:9d:40:b7:58:65:bc:09:f9:65:a2:d8:6b:37:6d:
                    91:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2B:A1:84:73:AC:7F:28:6E:EE:FA:8F:FE:FA:BE:CA:1B:F6:3B:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/5c640c2d-edb4-3a61-a2e4-af76f523e343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:fb:81:fd:8c:ab:42:9c:31:d6:b5:91:7f:90:34:a9:1c:c8:
         17:af:ae:56:be:d6:d2:f0:74:4d:89:42:cb:0f:63:e7:42:57:
         6e:62:7c:9f:fb:f9:47:d8:46:5c:ed:a8:a7:14:7d:d7:54:98:
         66:4c:d1:6d:f4:19:8c:f6:fc:59:57:5f:81:eb:bd:b0:a5:e8:
         8c:d8:a1:c8:a8:38:34:45:4f:a2:ff:46:52:70:92:04:6c:ce:
         19:22:94:9c:21:3d:e1:74:54:aa:95:2a:c2:4e:a6:40:c1:cb:
         0c:28:b8:84:12:54:e8:08:07:1f:18:8a:97:43:d9:a0:86:3c:
         be:6b:6e:40:4a:c3:a6:a4:ba:c0:8a:6b:8b:1c:eb:a6:b3:bf:
         fa:84:e3:db:4a:2c:af:e9:33:fc:e5:53:89:dd:e1:8f:f3:4e:
         ca:b2:f8:b0:d2:fb:24:8a:c5:e9:4f:05:02:7a:9f:01:9a:c5:
         b8:0a:fa:f5:5a:4a:52:52:91:f6:be:b8:2a:4c:5a:05:9d:84:
         44:31:e8:8c:97:cb:72:47:5b:9d:04:b2:d4:76:49:db:c2:43:
         b6:6b:63:ab:a3:7b:d2:4b:39:7c:b1:6f:26:76:b6:39:a1:77:
         99:c2:54:43:7c:f5:78:93:89:ce:72:0e:99:2f:9a:73:05:05:
         d1:ed:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:55:24 2024 by rpki-client on console-fra.rpki-client.org