Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/20d1e704-cf92-3fee-9355-f0d36ff7c4e0.roa
File:                     20d1e704-cf92-3fee-9355-f0d36ff7c4e0.roa (raw, json)
Hash identifier:          BMg0ly9C0222ZcOXWhUbyOncmYkFwKtXqutdrk7U9o8=
Subject key identifier:   26:23:52:D8:16:CB:DD:63:59:E0:8B:0C:DA:E1:97:76:CF:3C:FE:3B
Certificate issuer:       /CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
Certificate serial:       010D0C9F4328584754E0D01A1D29BA695039E680
Authority key identifier: B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/20d1e704-cf92-3fee-9355-f0d36ff7c4e0.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     40755
IP address blocks:        172.98.4.0/24 maxlen: 24
                          2606:3040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:d0:1a:1d:29:ba:69:50:39:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=0a40bd24-fbbb-43d1-8676-ad265ecd96fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:20:61:da:7a:88:96:ae:69:38:5a:2b:39:b0:
                    5d:60:cd:57:7d:f0:ad:57:46:23:8c:4d:a8:49:60:
                    cd:e7:83:4f:dd:35:b0:f0:76:c5:54:33:73:6b:7e:
                    c7:fc:d8:85:db:97:85:ee:e2:b7:55:10:60:a0:f1:
                    e6:77:18:71:60:f7:d5:36:8d:75:c9:77:93:ad:d4:
                    0a:c7:53:3f:e7:6f:a1:fe:53:da:5a:22:11:8a:59:
                    fc:db:cb:ff:ec:b2:21:c3:7b:25:23:3f:1f:c1:9f:
                    af:32:f0:c7:0e:f5:6b:44:53:d9:75:1a:0d:d9:5b:
                    24:88:9a:2a:5f:c5:d1:4b:4f:52:e8:3a:0f:11:63:
                    2c:84:4b:d3:8c:0f:49:0f:93:fa:2b:38:72:06:12:
                    b2:94:20:ec:33:be:c7:ff:7f:5a:44:af:e0:e6:85:
                    c9:8c:62:54:4f:fd:2d:48:c1:67:27:33:37:69:9a:
                    c4:29:c5:30:3d:53:5e:ee:d7:ed:6c:6b:cc:bb:9d:
                    7d:1f:c4:4b:20:9d:aa:c6:dc:21:ee:bf:a1:f4:29:
                    f9:50:26:c3:49:0b:ed:c2:1b:2b:f4:ff:4e:8a:16:
                    f4:db:1c:65:0a:19:cb:e6:e7:58:13:2d:67:51:73:
                    0d:47:35:9d:19:2c:03:b6:ff:cb:3f:67:83:71:f0:
                    6c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:23:52:D8:16:CB:DD:63:59:E0:8B:0C:DA:E1:97:76:CF:3C:FE:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/20d1e704-cf92-3fee-9355-f0d36ff7c4e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl

            X509v3 Authority Key Identifier:
                keyid:B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.4.0/24
                IPv6:
                  2606:3040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:59:02:05:53:2f:87:d8:a8:0b:f6:de:88:47:70:0a:e1:9d:
         93:f9:bd:95:fc:a7:c9:9a:93:06:d4:3e:11:0e:14:97:b3:93:
         29:a6:9c:bf:d2:cf:e4:8b:eb:95:5a:6a:f6:ce:89:93:e3:20:
         26:ca:ab:9c:02:82:94:a0:7d:17:53:26:f7:b4:09:91:41:5b:
         ba:a0:bd:de:9b:b3:fe:dd:e2:a4:ac:38:46:b7:c9:4a:a3:9f:
         dc:09:81:0e:94:c0:cd:5a:fa:33:12:d8:b2:a4:89:07:08:d8:
         05:fe:1a:11:93:39:cb:20:ba:e5:2a:d2:75:77:04:a8:66:e0:
         43:a5:f3:a0:d9:25:a2:3b:b3:92:20:7c:10:0e:4d:c8:0b:7c:
         66:64:a4:f0:77:4d:80:70:22:52:1a:0f:be:cb:e4:88:02:12:
         47:cd:90:ac:36:6f:20:d6:be:81:a8:42:2c:e4:ed:81:94:31:
         13:8f:6c:8c:da:33:d0:a3:4e:d0:da:c5:94:1f:0a:73:e4:61:
         d3:0e:52:cf:31:85:a2:7f:ea:ab:de:6f:79:6d:1c:56:00:d6:
         c9:1e:72:a6:63:e1:09:03:b4:69:36:d0:49:41:26:19:e8:25:
         07:5c:b8:fe:58:f9:02:cd:fc:30:d1:33:00:88:f4:44:c6:13:
         c2:b3:f0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:33:48 2024 by rpki-client on console-fra.rpki-client.org