Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/ba3ff8df-1c2d-3cdb-9aa6-c021fdff5a26.roa
File:                     ba3ff8df-1c2d-3cdb-9aa6-c021fdff5a26.roa (raw, json)
Hash identifier:          ofSCaG53MMm7WYfvIcazWHqrU2e6ftccLMg6KjSsRsA=
Subject key identifier:   AB:82:32:39:3A:B2:B8:22:06:C8:B0:EF:5E:92:9F:75:B2:1F:A0:B5
Certificate issuer:       /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
Certificate serial:       010D0C9F432858473D260313D00ABFB363964880
Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/ba3ff8df-1c2d-3cdb-9aa6-c021fdff5a26.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        140.98.28.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:26:03:13:d0:0a:bf:b3:63:96:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=b4ed608b-9476-4cf6-afc7-ccdb77e02d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a1:8d:2f:fa:65:bf:7e:7a:d5:66:62:52:d7:
                    b3:10:5c:49:86:0a:72:12:79:4a:b8:c8:11:95:a2:
                    dc:26:9f:3e:d3:05:8c:64:fc:b5:97:73:ae:be:e9:
                    9d:4c:3c:f1:91:81:db:98:05:f4:4d:36:8e:0c:8e:
                    de:59:46:1d:cc:33:1b:80:59:08:c1:77:80:2a:41:
                    3e:dc:3e:1a:62:63:22:7f:d7:67:ef:0c:c5:42:cc:
                    a7:02:e2:e3:70:86:ac:d4:02:e6:cb:50:8b:db:6c:
                    2d:e7:85:46:ec:a9:08:f1:22:2b:ab:c8:eb:ba:db:
                    ff:90:0e:0e:24:66:07:37:8f:05:4e:44:cf:1e:ff:
                    ab:ae:ac:89:6d:e2:9d:4b:0b:81:85:92:89:94:91:
                    c0:a8:73:ee:7e:af:33:ee:d0:15:89:bb:c8:b6:72:
                    03:1a:19:d5:00:50:9e:e9:ec:88:7f:5d:4d:fb:cd:
                    e1:78:f8:bd:9b:bf:f5:3b:3d:2f:9e:ad:2e:c6:9e:
                    5c:cb:4a:e7:b5:b4:9b:de:1b:5c:2e:35:c1:36:dc:
                    b8:fb:c2:a8:97:5c:74:6e:cf:59:67:5f:1d:ec:b7:
                    e9:e2:17:0e:47:41:a2:83:83:4e:2c:25:aa:e0:e0:
                    9f:b5:25:d1:19:f8:09:e4:65:cf:1e:bf:e1:27:22:
                    2b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:82:32:39:3A:B2:B8:22:06:C8:B0:EF:5E:92:9F:75:B2:1F:A0:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/ba3ff8df-1c2d-3cdb-9aa6-c021fdff5a26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.98.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:45:ba:cf:e8:31:ca:ac:07:1d:80:f1:4c:3c:4a:ff:73:ea:
         36:aa:38:29:40:be:c9:ca:61:be:01:22:02:af:eb:59:df:36:
         21:93:31:8d:d1:f6:52:1b:c9:ab:f8:7e:2d:0f:80:80:fe:92:
         9d:26:29:c8:27:82:f7:54:32:26:3c:2b:eb:a6:bf:c9:a9:22:
         b6:ba:fc:14:4a:28:91:b4:fd:ae:7e:96:b2:fe:41:09:24:09:
         53:33:7a:11:f0:fd:e2:d5:ba:08:69:67:d4:72:2d:92:66:94:
         11:fd:2a:57:e4:31:c8:13:72:92:35:94:74:04:5e:87:8b:09:
         d7:bc:23:d6:c6:94:76:50:31:15:13:bd:f3:00:3d:7d:18:0a:
         65:30:99:fb:39:ff:17:90:7c:2c:6a:95:d2:4f:c8:77:92:a4:
         c4:0c:38:89:4a:da:45:f3:82:54:58:ce:2b:67:53:64:fd:5a:
         85:0a:b8:a2:ad:54:50:5c:78:81:a6:18:2b:73:02:ed:18:1a:
         73:7c:46:c8:23:6d:ab:63:d1:10:a2:c5:b0:e7:0f:7d:2f:64:
         69:46:91:3f:2c:06:7c:49:49:81:b6:b2:69:d9:44:cd:22:69:
         3b:f7:22:2a:ee:49:bd:a1:39:ec:06:5e:c0:1f:1a:d9:21:b7:
         ae:48:aa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:10 2024 by rpki-client on console-ams.rpki-client.org