Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e524bf8b-eee3-35a8-ad5d-a7c0646ff6b0.roa
File:                     e524bf8b-eee3-35a8-ad5d-a7c0646ff6b0.roa (raw, json)
Hash identifier:          I2hHFGAD09qLxrZS5E+YuXtWqPoqJppovtUzQtnkkYQ=
Subject key identifier:   D4:5A:5C:30:DB:06:BE:6C:1F:45:CE:65:A8:C4:E7:B8:96:8A:F2:8B
Certificate issuer:       /CN=e729e81c-d76a-426a-a543-5254046b0d89
Certificate serial:       010D0C9F432858477BF6628A475643FD77DBC500
Authority key identifier: 0C:84:8D:80:66:70:8D:05:BA:67:4A:D6:48:62:C0:26:EF:19:50:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e524bf8b-eee3-35a8-ad5d-a7c0646ff6b0.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        98.158.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e729e81c-d76a-426a-a543-5254046b0d89.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e729e81c-d76a-426a-a543-5254046b0d89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:62:8a:47:56:43:fd:77:db:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e729e81c-d76a-426a-a543-5254046b0d89
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=885462c8-0318-415c-9320-18c12f2b496d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:08:1d:d5:b4:d1:c6:aa:92:65:03:ad:d0:0a:
                    31:f2:52:69:a6:2e:f4:da:0b:84:3f:4f:c1:49:d4:
                    c8:99:0d:26:0d:ae:4b:4f:80:5d:e9:50:0d:bb:5c:
                    92:0f:bc:f2:f6:53:fb:94:cb:99:b8:ce:9f:4b:94:
                    85:19:3b:2d:06:de:97:31:68:88:9c:e4:4b:d0:7b:
                    96:71:26:93:d0:7e:8f:88:b7:93:13:28:57:e5:6d:
                    d0:8c:13:43:19:55:c3:2e:af:8b:ca:44:6b:53:c7:
                    0e:54:28:68:5d:90:db:b6:55:68:83:e7:67:f5:07:
                    36:7d:d6:13:73:0b:c3:35:55:7a:ea:4c:a4:90:3f:
                    8f:02:50:c5:c3:6f:16:03:12:80:b2:60:1d:93:8f:
                    00:e0:21:bc:79:6d:81:c7:cb:1b:87:5a:64:4c:7e:
                    8b:4b:b5:76:cd:4d:fa:2e:f9:89:b3:e2:35:3f:d5:
                    e4:7e:76:6c:2f:ee:7b:36:2e:77:79:00:b8:49:61:
                    68:06:46:05:6e:46:81:b8:63:2e:44:d5:62:90:3d:
                    c8:33:5a:41:5b:f3:da:16:9b:10:5f:b2:77:ed:b6:
                    c3:58:c7:9a:e9:2a:b4:be:84:52:7a:53:8b:b3:54:
                    9d:ee:76:cb:db:1d:28:4a:24:a1:8a:e9:6a:17:a3:
                    f2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5A:5C:30:DB:06:BE:6C:1F:45:CE:65:A8:C4:E7:B8:96:8A:F2:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e524bf8b-eee3-35a8-ad5d-a7c0646ff6b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e729e81c-d76a-426a-a543-5254046b0d89.crl

            X509v3 Authority Key Identifier:
                keyid:0C:84:8D:80:66:70:8D:05:BA:67:4A:D6:48:62:C0:26:EF:19:50:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:00:73:0f:9b:83:bd:50:4c:6f:f7:75:99:51:4d:02:80:13:
         b9:be:99:d7:11:c9:0b:22:78:d6:2a:b1:0c:c1:29:f7:cc:ba:
         5d:b4:60:dc:92:b0:25:62:d0:72:84:83:69:44:f0:29:35:9c:
         62:4b:25:8a:97:72:9d:92:8d:14:0e:2e:61:c2:ec:1f:a0:c3:
         e3:94:58:bd:b5:77:19:1e:54:71:b0:ee:59:ca:37:9b:ac:95:
         ac:de:c6:bc:0e:70:c7:72:80:6a:78:00:e5:dd:15:db:ce:22:
         88:9f:e2:2e:96:77:79:34:2f:f2:5f:2b:9d:b6:8e:ee:a1:4f:
         df:d2:1c:de:bd:48:8f:ab:e1:f5:e9:98:d0:d4:08:0d:da:97:
         96:95:40:90:51:99:e6:d4:d7:8e:36:bd:e8:3f:70:49:c4:35:
         aa:da:6d:a6:87:df:0d:fa:27:2f:ad:96:a6:f2:11:65:16:8b:
         a1:15:5a:70:bd:be:4e:b5:64:c3:3f:0e:27:c3:e6:85:66:20:
         a7:a9:fd:b6:a9:17:64:c1:55:bf:ac:3e:3f:d1:4b:76:26:4a:
         43:2d:6d:6d:f9:7a:de:7b:90:b4:9e:e6:37:35:29:4d:89:ba:
         20:86:0a:7c:86:3d:85:12:b3:bf:e9:d3:7f:59:ff:0a:5a:57:
         6b:3b:ac:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:31 2024 by rpki-client on console-fra.rpki-client.org