Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e524bf8b-eee3-35a8-ad5d-a7c0646ff6b0.roa
File:                     e524bf8b-eee3-35a8-ad5d-a7c0646ff6b0.roa (raw, json)
Hash identifier:          7gPPIelTD6I/y0KIqKz/rKwduzHRhkCZ0MR9EoXPp7I=
Subject key identifier:   69:1B:A2:57:05:BA:0B:0A:49:00:06:20:92:E8:19:E9:D2:81:58:57
Certificate issuer:       /CN=e729e81c-d76a-426a-a543-5254046b0d89
Certificate serial:       010D0C9F43285845BD48DAB7389C09DC6D88CE00
Authority key identifier: 0C:84:8D:80:66:70:8D:05:BA:67:4A:D6:48:62:C0:26:EF:19:50:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e524bf8b-eee3-35a8-ad5d-a7c0646ff6b0.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        98.158.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e729e81c-d76a-426a-a543-5254046b0d89.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e729e81c-d76a-426a-a543-5254046b0d89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:da:b7:38:9c:09:dc:6d:88:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e729e81c-d76a-426a-a543-5254046b0d89
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=7f7da887-c738-49bd-aa58-42d1c997d90a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2f:cd:db:3b:34:7c:de:73:44:e1:a1:a2:24:
                    01:2b:cc:e4:10:43:cb:8a:52:68:c4:48:14:26:b4:
                    a8:6d:73:8b:f5:29:43:e1:7d:08:05:70:24:df:20:
                    49:c3:fe:8f:70:4d:b3:e0:92:50:c8:bb:ca:61:ac:
                    c6:89:3e:7a:5e:22:83:c1:e2:59:55:a2:67:97:30:
                    17:51:db:a2:1d:c4:96:dd:5e:c3:bc:80:fb:1e:29:
                    1b:0e:38:db:ce:5f:70:a8:d6:0d:16:60:08:cb:ef:
                    0a:b8:c0:7d:81:9c:95:e6:d9:ef:78:d0:8a:99:bd:
                    03:65:af:3b:81:43:50:15:09:b2:da:69:cf:9d:47:
                    d7:12:ce:1b:be:43:83:60:8e:57:81:42:81:a8:45:
                    bb:d6:66:9a:ed:a5:25:ad:74:bf:f3:20:90:1b:4a:
                    fb:72:85:f2:40:c3:9c:fe:6d:02:cf:70:67:81:1b:
                    38:63:61:c2:aa:d4:d2:69:52:57:a4:b3:4a:cf:a1:
                    aa:2a:eb:48:18:e1:59:ad:db:f0:76:ce:c9:ff:7a:
                    bd:6b:44:ef:91:e3:13:6a:51:f0:46:ea:d0:37:40:
                    01:56:9b:21:bf:a2:5e:34:13:b7:32:27:c1:1d:b2:
                    e1:6c:ed:da:ff:6a:aa:f8:10:bc:b4:aa:09:7e:49:
                    24:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1B:A2:57:05:BA:0B:0A:49:00:06:20:92:E8:19:E9:D2:81:58:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e524bf8b-eee3-35a8-ad5d-a7c0646ff6b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e729e81c-d76a-426a-a543-5254046b0d89.crl

            X509v3 Authority Key Identifier:
                keyid:0C:84:8D:80:66:70:8D:05:BA:67:4A:D6:48:62:C0:26:EF:19:50:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:37:32:87:0e:cc:45:0a:90:f3:c6:84:bc:cf:e5:61:b3:69:
         ff:1e:80:52:74:3d:ac:66:ad:63:11:c7:f8:8f:81:55:06:f4:
         19:0e:b8:59:6c:ef:60:49:03:15:77:11:b0:42:1e:af:99:c8:
         78:78:23:cc:48:a5:14:86:2d:bb:6e:86:d2:18:82:77:ce:43:
         83:6d:55:4d:fb:fd:7e:61:92:75:4e:22:0e:24:96:1f:8d:91:
         a0:40:65:ed:06:f1:2a:f2:2a:fa:db:97:3e:64:0e:a7:17:34:
         6f:74:f1:af:74:5f:01:63:70:83:a2:b7:fe:5e:04:62:7b:2e:
         34:0c:29:fb:ec:4c:a7:4b:a0:cf:3e:bd:bd:5f:e4:68:7a:04:
         1b:8e:3d:14:8a:9a:ba:c4:3b:16:07:65:56:d3:1d:cb:79:cf:
         3f:ce:a5:e1:9f:ab:5a:69:c9:22:fa:c4:90:57:ca:4f:ca:93:
         f4:ac:6e:86:7d:90:02:02:16:e9:8d:b3:7a:cb:4e:27:bd:ca:
         11:37:06:b5:2e:45:58:b6:68:07:33:7e:50:4d:11:18:2d:16:
         4b:8b:7b:85:30:32:92:0d:45:15:f8:d1:d7:32:99:15:25:87:
         9d:fe:9b:82:c5:d1:8d:4c:6c:88:85:55:56:23:34:49:99:81:
         12:cb:a2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:30 2024 by rpki-client on console-fra.rpki-client.org