Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/e1d20f76-8e0c-3e3a-b0bf-5d4e4ffd3785.roa
File:                     e1d20f76-8e0c-3e3a-b0bf-5d4e4ffd3785.roa (raw, json)
Hash identifier:          Y4EqHHRPu89DD4WQF431Y31UEf0tg4ARwovjj2FzCTo=
Subject key identifier:   80:CC:56:D7:63:76:8D:F6:4A:C9:72:BD:21:DF:10:07:92:69:FC:22
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584754E0EA9743DC4163FF743E00
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/e1d20f76-8e0c-3e3a-b0bf-5d4e4ffd3785.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     33182
IP address blocks:        98.142.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:ea:97:43:dc:41:63:ff:74:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=c9f8e190-0283-47c3-bb79-6c0ced627c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0e:95:67:8d:b8:4f:15:0e:51:9f:7b:8b:21:
                    df:43:79:2b:09:62:56:f8:31:84:01:b0:a2:71:73:
                    b4:04:69:d2:d5:35:c7:f7:9f:bb:76:dd:16:78:85:
                    f9:bc:d3:ae:3c:be:7f:50:f1:83:dc:43:d4:51:42:
                    c1:c2:94:aa:80:ee:6a:7d:9d:05:ea:ca:f1:82:cd:
                    3a:02:d1:c9:30:cb:ab:51:bf:16:1c:70:5a:ef:aa:
                    3f:aa:2e:c2:f3:93:39:48:fc:55:26:18:f8:ba:28:
                    c5:d3:78:3e:41:db:54:f3:4c:49:f0:52:cf:95:98:
                    9b:02:0d:41:10:f7:47:10:e4:6d:24:b3:35:8f:20:
                    80:ef:b9:97:ca:17:37:f6:89:93:ab:57:56:55:4c:
                    98:d9:4c:d5:af:95:ad:8a:17:d1:66:cb:a2:1e:14:
                    9c:12:f9:a9:f9:b3:79:43:80:dd:b6:f0:d2:a7:f2:
                    5c:17:f2:f4:28:e5:26:11:02:12:3f:35:37:bf:c7:
                    c6:00:07:68:62:42:47:e3:3f:64:fb:52:fc:e4:1c:
                    bf:67:0f:7d:c5:b8:bd:e5:97:a3:5d:2d:aa:86:9f:
                    b5:a9:bc:b4:d5:d8:88:57:e9:33:59:e5:1d:68:ad:
                    9d:09:24:b8:0e:4e:0b:35:b8:35:03:6f:cf:2f:b4:
                    c9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CC:56:D7:63:76:8D:F6:4A:C9:72:BD:21:DF:10:07:92:69:FC:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/e1d20f76-8e0c-3e3a-b0bf-5d4e4ffd3785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1d:b5:69:af:80:17:19:a6:50:3b:5f:55:8d:fa:b4:28:79:
         c2:45:eb:b9:91:60:ad:f8:9e:3f:c9:e0:8a:f4:d6:61:1a:78:
         29:85:da:d6:bd:e4:30:82:dc:fb:61:70:6b:bf:db:8a:0c:27:
         aa:ab:14:72:ad:17:9a:ef:5c:a8:fe:fe:cd:63:9b:24:81:93:
         c5:4d:c0:3f:1d:18:39:cd:8e:0e:c2:9b:93:85:f4:e5:1b:d2:
         6d:1e:0c:4e:e4:c3:5b:35:5c:c8:dd:d7:9c:74:f0:e9:de:0a:
         92:bf:a6:14:a9:df:45:64:2f:b5:84:70:98:ca:1d:ae:cd:ad:
         8c:35:97:b5:44:a5:b5:b2:a2:5a:cb:ef:de:7f:45:43:e1:cf:
         a1:f9:c0:72:7f:e8:5a:f1:99:31:e6:e7:92:07:1f:4d:b2:7b:
         c7:53:10:21:fc:1c:1d:ba:a0:b6:07:cc:da:03:37:5d:18:0f:
         bb:2f:aa:5d:78:f8:60:21:ee:51:02:8a:57:e4:04:18:d2:56:
         d7:dc:c2:70:43:21:e0:e6:dc:4c:33:ff:d3:39:32:f2:aa:7c:
         68:2b:98:88:ca:5f:60:37:f9:5b:8d:86:04:b0:c7:60:9e:a1:
         4c:44:cb:bd:9b:81:6f:21:1f:95:1f:35:d6:1c:25:2b:81:dc:
         74:a8:b8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:40 2024 by rpki-client on console-fra.rpki-client.org