Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2dc06a22-db8c-36bb-b152-eba31714116f.roa
File:                     2dc06a22-db8c-36bb-b152-eba31714116f.roa (raw, json)
Hash identifier:          YzU8KppmzLSCPuh+9SZLVBgH7PGFuleEexMbo4FoxgU=
Subject key identifier:   34:C0:F0:95:F5:D4:87:71:85:1E:C5:CA:67:82:CD:B6:78:7D:D4:A7
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F432858455CEF9F9F6109BA3136CA93C0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2dc06a22-db8c-36bb-b152-eba31714116f.roa
Signing time:             Fri 29 Mar 2024 00:43:15 +0000
ROA not before:           Fri 29 Mar 2024 00:43:15 +0000
ROA not after:            Thu 27 Jun 2024 00:43:15 +0000
asID:                     36829
IP address blocks:        141.195.98.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:ef:9f:9f:61:09:ba:31:36:ca:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Mar 29 00:43:15 2024 GMT
            Not After : Jun 27 00:43:15 2024 GMT
        Subject: CN=d4f61e7e-a1ba-4ce0-847c-0f4433390757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e7:bc:b5:03:c3:8d:f5:fc:d7:0b:e1:8a:db:
                    b1:f4:18:f5:d6:8b:c1:25:f5:e0:60:7c:53:32:7b:
                    a1:b0:67:ef:c8:17:af:2a:09:6d:cc:8a:65:9a:fa:
                    b7:61:41:ed:3c:a0:22:96:41:91:8b:28:f9:59:65:
                    78:5f:36:bf:3d:db:c4:b4:a4:ed:af:40:1c:1e:e6:
                    bd:6b:4d:fb:5a:ab:a7:f4:3c:e4:93:87:a8:93:8c:
                    04:95:a6:6d:fc:c6:15:39:b0:4a:86:0f:8b:21:91:
                    eb:d5:21:e9:1d:47:d6:d4:88:5f:6a:6f:8a:86:90:
                    bf:3d:28:a0:97:7b:2c:83:97:43:0a:e8:f2:48:d5:
                    7f:1c:19:52:72:06:28:d3:a9:03:53:78:e0:26:66:
                    39:2e:09:77:07:42:cd:a2:d1:50:9f:19:31:82:af:
                    ad:1c:1d:9e:6b:e1:bf:5b:27:4a:05:1d:d4:dd:12:
                    bd:a0:86:17:ec:78:d0:c2:3b:1e:53:89:90:31:e7:
                    19:e4:30:eb:0f:8f:b7:04:cb:ef:02:a0:9f:f9:91:
                    21:c6:ad:45:3e:9c:85:f1:b3:fa:02:a9:a5:38:50:
                    a7:78:25:fb:c1:01:0c:e6:ca:f9:34:0e:3b:65:ae:
                    3b:af:04:ca:33:16:dd:b3:4c:09:ed:45:59:18:4d:
                    2f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C0:F0:95:F5:D4:87:71:85:1E:C5:CA:67:82:CD:B6:78:7D:D4:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2dc06a22-db8c-36bb-b152-eba31714116f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:04:29:bf:62:a0:7e:26:11:1a:4e:f6:d7:cf:b0:8a:23:7f:
         c9:cf:93:80:87:97:84:77:dc:15:95:62:73:b0:20:83:6a:0d:
         0c:f7:92:16:81:a9:59:47:94:af:23:8b:d0:83:2f:2c:86:f9:
         9f:d7:a5:03:40:e6:93:1d:58:6f:fd:9b:18:cf:85:9b:76:5b:
         72:52:2a:a5:71:9b:59:78:44:d4:be:66:01:9f:92:39:04:fe:
         b5:96:a4:28:1f:51:48:a3:53:65:d5:ac:2c:a3:4c:db:b5:05:
         aa:f3:51:68:cc:75:c7:b4:ed:ae:32:ab:a2:0c:5a:1d:92:a4:
         3e:e9:17:3e:7c:95:bb:c2:c7:51:23:08:01:40:4c:dd:6c:7d:
         1e:2a:c1:7f:1f:a9:2b:f3:e8:4e:54:d2:39:96:9c:51:39:aa:
         e6:1d:03:fc:bd:1d:0a:fb:99:01:fe:9b:4d:32:ac:21:cd:30:
         f2:85:57:29:b7:79:9d:1e:49:d4:c8:74:3b:1f:b5:51:03:92:
         38:e6:09:30:57:21:34:df:1b:ce:a7:12:2a:d4:22:5f:49:c4:
         ca:b5:b2:24:a7:9d:19:4f:da:38:b6:69:1f:60:52:dc:0c:c6:
         a2:ab:61:1e:4e:93:2a:5c:fa:95:43:9a:32:36:a9:26:83:3e:
         79:b7:81:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:32:24 2024 by rpki-client on console-fra.rpki-client.org