Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/90af2769-7f16-31b3-968d-f44903a579ac.roa
File:                     90af2769-7f16-31b3-968d-f44903a579ac.roa (raw, json)
Hash identifier:          GRgsHcVN5cu4B8LRo1YoHWsOGAx5opApoKmZSRHZRDs=
Subject key identifier:   2D:F9:DC:12:39:D3:9B:92:51:66:34:E2:41:F1:D4:BC:3C:1A:3E:60
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F43285847924BDD9C9EE280E34EC50780
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/90af2769-7f16-31b3-968d-f44903a579ac.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     19163
IP address blocks:        192.228.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:dd:9c:9e:e2:80:e3:4e:c5:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=107e130d-30a2-4d45-a6fd-8142a252973e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:95:08:a8:dd:90:4c:89:06:34:af:41:ca:2c:
                    2c:5f:91:bf:e4:9e:09:5e:88:0a:5a:2e:44:89:5d:
                    2a:f6:7a:7b:96:a2:9f:df:fa:39:77:80:dc:66:cc:
                    8a:ec:b7:c5:4e:b2:b0:c2:90:9f:a3:10:38:8c:4b:
                    76:cb:73:c6:97:e9:84:12:4b:8f:c7:86:59:85:6b:
                    08:f1:07:14:a8:03:74:1b:10:65:f8:59:54:c8:9f:
                    7c:55:b9:fb:f2:03:bf:e2:98:e6:ea:d1:8d:6c:02:
                    72:f0:b6:c3:4c:0b:cc:78:d0:a1:42:e2:31:1f:a7:
                    d3:b4:db:da:15:c8:3e:8d:0b:94:92:b1:b4:15:4e:
                    68:16:58:ec:0d:46:18:8c:db:f5:57:e8:14:e0:cc:
                    de:59:65:48:90:ec:a6:84:e3:1e:14:cd:c7:2e:20:
                    47:50:33:63:32:2a:66:3f:9c:b6:ba:5b:28:15:c3:
                    e9:b1:52:b1:4c:60:99:40:d2:25:e8:db:dc:79:41:
                    a1:25:75:e3:37:b0:a7:55:0c:7d:b4:c8:99:ca:93:
                    0f:0c:1a:0d:5c:b3:65:94:73:ea:a8:9b:cd:36:25:
                    0b:f7:7d:76:ff:10:90:6e:63:ab:f0:65:20:36:37:
                    fe:ed:65:cc:3f:e8:44:ae:4a:f1:18:26:aa:be:1e:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F9:DC:12:39:D3:9B:92:51:66:34:E2:41:F1:D4:BC:3C:1A:3E:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/90af2769-7f16-31b3-968d-f44903a579ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:be:54:04:ee:1c:ff:38:a2:c6:e2:de:83:52:ce:4b:02:d6:
         e4:9e:eb:81:df:81:27:28:ba:2f:54:4b:ce:d5:38:af:c5:22:
         26:18:d1:ec:aa:4b:43:1e:52:69:09:e9:7f:09:c5:e7:9a:ad:
         43:c6:44:3d:9f:1d:36:d1:b3:ca:9f:26:29:4a:29:48:c9:3c:
         91:2b:78:25:b8:12:9d:13:70:aa:f6:ef:46:71:87:68:e4:4f:
         5f:d5:4a:64:f0:a5:0b:d0:f7:71:2c:73:00:fa:c0:ae:34:e1:
         8e:61:b7:80:94:b5:2c:dc:6b:7b:25:2f:08:6a:46:3b:55:28:
         ff:4c:d5:43:e2:88:46:c0:2c:8d:dd:31:e4:ed:03:4c:9b:a5:
         ad:9f:a9:66:de:8a:94:a0:87:5b:1a:17:a1:2d:10:2e:35:64:
         b8:3d:54:e5:dd:f5:cb:9e:6c:a0:e0:e3:9d:76:08:51:1b:79:
         ec:25:34:d9:af:21:fa:ec:70:0d:c2:31:4f:04:17:42:76:7b:
         79:8b:45:ad:71:cd:ef:5b:7f:c4:9b:f4:0f:77:33:75:9f:86:
         dd:7f:ff:de:3c:1d:62:32:1f:7e:e6:ad:35:aa:44:4a:4f:ea:
         90:f4:bc:32:c0:fd:f2:bb:4d:b5:87:5e:d5:b0:a1:c5:6c:c4:
         48:d7:29:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:54:54 2024 by rpki-client on console-fra.rpki-client.org