Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/d0b8d282-ccf0-3eac-901d-cf61401b6161.roa
File:                     d0b8d282-ccf0-3eac-901d-cf61401b6161.roa (raw, json)
Hash identifier:          npI9GWc4Ur9ENQ5DXdSuSDMw1BZOsxpg0xFcxTkgDa8=
Subject key identifier:   B8:FC:47:A8:61:DB:6A:9A:08:F4:E9:D1:E6:10:37:1A:9F:10:C1:A5
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F43285845A9BE19908F5589871EE48D00
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/d0b8d282-ccf0-3eac-901d-cf61401b6161.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        98.97.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:19:90:8f:55:89:87:1e:e4:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=d56dcff3-864a-4fd1-83be-d097c3c1ec39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9b:b1:ae:49:b2:1d:7a:ca:ea:9b:3e:18:d6:
                    c6:e0:d0:49:cc:48:8f:38:a6:d7:e9:fd:7c:69:5e:
                    d3:f4:cb:48:1a:8a:f7:85:c7:fa:ab:ce:ad:6c:ea:
                    3d:61:30:fe:a4:8b:35:ba:2d:bd:a8:4d:e0:75:2b:
                    f5:5e:b5:af:2d:c1:8d:d5:ab:04:f6:95:01:cc:77:
                    9f:9f:72:b1:b4:7a:46:24:ce:dc:32:77:78:45:04:
                    67:5b:9f:36:59:97:2c:c9:b4:7f:43:67:87:b1:2e:
                    da:8d:4c:a9:86:a2:56:c7:62:f7:de:e6:21:83:d3:
                    d8:91:2e:01:59:b7:f9:c6:b6:b6:b0:a8:81:6c:51:
                    e2:1b:00:f5:74:4c:16:42:af:1f:3f:99:88:c2:1d:
                    4c:c2:98:2e:90:a7:26:8a:01:3a:dc:e6:73:75:67:
                    fd:46:bb:46:55:e7:ad:33:9c:7e:ac:fe:c8:65:19:
                    dc:e2:11:a7:62:0e:e8:41:8c:ee:1a:7e:c6:e0:6e:
                    0f:13:44:1b:e4:a4:57:9a:98:3c:20:50:41:05:e4:
                    26:f1:d4:26:bf:e5:f7:5b:b4:db:56:ce:c7:cf:eb:
                    6a:9e:1d:ce:eb:2b:9b:3f:42:94:1a:4d:43:1f:ae:
                    55:b9:00:2d:9e:5a:f8:c5:88:ea:b3:73:88:1e:8e:
                    08:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FC:47:A8:61:DB:6A:9A:08:F4:E9:D1:E6:10:37:1A:9F:10:C1:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/d0b8d282-ccf0-3eac-901d-cf61401b6161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.97.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:9e:f0:4b:4f:dd:d4:3c:98:3d:c6:7a:d0:16:b4:0a:ea:78:
         b0:7a:3b:e3:33:e7:d2:5e:d8:7a:e5:c7:6c:c2:0b:a6:a7:fd:
         8c:83:d5:6d:a0:dd:17:a7:ef:95:78:89:d6:c8:6e:96:dc:b8:
         da:ad:62:60:04:17:94:d3:f2:c9:17:df:0d:be:f8:d4:38:f9:
         f5:b1:2b:ea:65:81:e8:3e:d9:5a:67:06:ac:f9:9b:5f:0a:2f:
         7f:c3:91:26:9f:36:8b:ec:92:a6:97:64:bd:50:55:8b:15:e7:
         c0:66:fa:e7:c5:5b:14:a4:98:96:33:ab:f8:5b:74:ed:0c:ca:
         c1:40:6b:0a:96:35:e3:12:f6:94:23:9a:35:5d:ca:32:80:9b:
         84:39:4c:f3:79:94:5d:66:f7:ae:26:d1:a3:e2:a4:bb:09:e9:
         5e:c3:4c:ce:58:32:9f:30:8c:c5:11:2b:8b:96:73:8d:56:b5:
         bf:63:38:9c:f0:f0:01:81:7f:18:9f:e9:69:71:e6:0d:2e:55:
         64:58:c1:4c:74:86:73:c7:2a:f8:32:cc:a7:30:1c:36:3e:0c:
         92:fc:54:fe:0b:4e:1a:83:fd:d1:af:61:23:f6:00:84:19:1c:
         41:42:62:83:36:f6:c0:28:f1:19:24:ab:63:53:1c:42:d0:05:
         a9:a7:b9:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWpvhmQj1WJhx7kjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzlkNWZlZDgtOWM4Ny00NzQ1LWI2OGItMzkwYjE0ODcz
YjU3MB4XDTI0MDQyNTEzMDAzM1oXDTI0MDcyNDEzMDAzM1owLzEtMCsGA1UEAxMk
ZDU2ZGNmZjMtODY0YS00ZmQxLTgzYmUtZDA5N2MzYzFlYzM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5uxrkmyHXrK6ps+GNbG4NBJzEiPOKbX6f18
aV7T9MtIGor3hcf6q86tbOo9YTD+pIs1ui29qE3gdSv1XrWvLcGN1asE9pUBzHef
n3KxtHpGJM7cMnd4RQRnW582WZcsybR/Q2eHsS7ajUyphqJWx2L33uYhg9PYkS4B
Wbf5xra2sKiBbFHiGwD1dEwWQq8fP5mIwh1MwpgukKcmigE63OZzdWf9RrtGVeet
M5x+rP7IZRnc4hGnYg7oQYzuGn7G4G4PE0Qb5KRXmpg8IFBBBeQm8dQmv+X3W7Tb
Vs7Hz+tqnh3O6yubP0KUGk1DH65VuQAtnlr4xYjqs3OIHo4INwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLj8R6hh22qaCPTp0eYQNxqfEMGlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1
ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBiMTQ4NzNiNTcvZDBiOGQyODItY2NmMC0z
ZWFjLTkwMWQtY2Y2MTQwMWI2MTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzlkNWZlZDgtOWM4Ny00NzQ1LWI2
OGItMzkwYjE0ODczYjU3L2M5ZDVmZWQ4LTljODctNDc0NS1iNjhiLTM5MGIxNDg3
M2I1Ny5jcmwwHwYDVR0jBBgwFoAUDWYM/fDvH6VLnSRcuWeReR/q26AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jOWQ1ZmVkOC05Yzg3LTQ3NDUtYjY4Yi0zOTBi
MTQ4NzNiNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYmH4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB2e8EtP3dQ8mD3GetAWtArqeLB6O+Mz59Je2Hrlx2zCC6an/YyD1W2g
3Ren75V4idbIbpbcuNqtYmAEF5TT8skX3w2++NQ4+fWxK+plgeg+2VpnBqz5m18K
L3/DkSafNovskqaXZL1QVYsV58Bm+ufFWxSkmJYzq/hbdO0MysFAawqWNeMS9pQj
mjVdyjKAm4Q5TPN5lF1m964m0aPipLsJ6V7DTM5YMp8wjMURK4uWc41Wtb9jOJzw
8AGBfxif6Wlx5g0uVWRYwUx0hnPHKvgyzKcwHDY+DJL8VP4LThqD/dGvYSP2AIQZ
HEFCYoM29sAo8Rkkq2NTHELQBamnuVo=
-----END CERTIFICATE-----
Generated at Mon May 6 01:54:37 2024 by rpki-client on console-ams.rpki-client.org