Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b4a6d5b-ef96-3c9a-903e-287ff04f0938.roa
File:                     6b4a6d5b-ef96-3c9a-903e-287ff04f0938.roa (raw, json)
Hash identifier:          N2oO+3gQ746x1yF+aZT0NFP0gOSkjr1MxKoSJJbLzXc=
Subject key identifier:   5A:27:20:91:5F:0D:5A:05:42:94:72:1E:21:13:52:24:D8:49:0E:95
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847537B94094B3B350958A89900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b4a6d5b-ef96-3c9a-903e-287ff04f0938.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     701
IP address blocks:        98.109.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:94:09:4b:3b:35:09:58:a8:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=bfc58ab6-a892-4ab6-b581-5797c4d31321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:12:00:a9:42:0c:50:c9:2f:01:aa:95:bf:ce:
                    7e:9e:6a:e5:df:a0:a5:2f:2b:7e:00:1b:85:01:5e:
                    31:43:95:b3:81:30:1e:70:ee:3e:b0:6f:20:a2:ce:
                    6a:19:09:09:a5:a2:68:66:d6:5e:0b:55:47:30:d5:
                    f9:5d:ff:d3:c9:6a:86:3e:2f:98:cc:dc:b9:b9:3e:
                    d4:1f:06:44:53:bf:c6:29:fd:6c:65:cf:7b:aa:4b:
                    8a:94:ec:21:5f:6b:90:04:b8:99:cb:c5:7f:38:d7:
                    dc:7d:4c:07:90:e2:16:06:35:7b:9d:3a:c9:a1:fe:
                    69:10:9f:68:5c:39:1e:7c:b0:f5:8b:62:4f:cf:b1:
                    bf:31:f8:1f:22:da:40:2a:bc:8b:37:5e:de:c5:fb:
                    43:0d:49:dd:d7:c3:8b:88:05:03:02:ae:6b:c6:f2:
                    e3:89:df:d7:f0:70:86:9d:78:eb:98:61:19:86:9e:
                    dd:0a:71:3b:f6:2e:ca:a2:b6:45:50:c1:cc:32:c0:
                    e2:14:8b:d4:55:ad:05:c3:a1:16:88:1d:dc:9c:ff:
                    e6:4d:0a:4e:f1:02:29:fc:f5:55:6d:90:62:4c:71:
                    43:40:5e:a5:e8:05:d6:ce:96:fb:de:c9:68:7c:f3:
                    e1:08:ef:ad:88:c7:0a:26:8c:84:d1:65:15:b5:83:
                    01:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:27:20:91:5F:0D:5A:05:42:94:72:1E:21:13:52:24:D8:49:0E:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b4a6d5b-ef96-3c9a-903e-287ff04f0938.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.109.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:47:fe:af:95:49:9e:49:8a:c2:d9:73:6e:cc:81:a6:cb:93:
         ff:d0:31:4d:8f:b6:c6:97:fe:a4:a7:b9:23:74:d4:63:0c:50:
         7a:fe:40:60:ec:c4:6a:36:93:89:7f:e5:25:eb:f4:b5:f6:5f:
         17:aa:fc:c4:cf:c9:0f:26:2a:35:4f:f8:a6:ad:c8:e4:d8:2b:
         d5:30:3e:34:63:95:d3:1b:f9:bf:8b:43:aa:24:1a:78:09:98:
         c0:93:7b:7f:75:fa:1e:b2:14:04:12:a5:47:31:9a:8e:97:b4:
         09:3f:a5:0b:27:af:fe:09:53:10:a6:a9:0a:1d:0b:0b:4d:ed:
         f6:77:70:19:ba:a0:ea:49:c3:f3:95:b4:ff:9c:d3:2c:fe:4d:
         a0:bc:30:ca:3e:38:07:82:6a:7c:db:f8:51:ac:52:f2:b6:71:
         09:7f:a0:3b:e0:ea:96:6f:59:aa:1a:30:00:b0:65:a4:e0:bd:
         70:92:6b:40:16:9a:02:34:18:e3:d1:a4:03:90:04:c0:98:18:
         3a:16:b1:26:be:1f:2d:ca:6d:0b:7c:06:9c:e1:c0:6c:60:7b:
         64:a0:2e:43:08:dd:a1:54:1c:11:2a:fd:9a:7e:c4:b1:fa:1e:
         88:d1:3b:73:79:9a:ab:21:9d:55:92:16:a3:e2:93:3a:a8:6b:
         e0:69:f9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:31 2024 by rpki-client on console-ams.rpki-client.org