Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa
File:                     3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa (raw, json)
Hash identifier:          mRS4m9PngllbvwnN+4tmXxI+eaAYBteGtpYSQ078/sc=
Subject key identifier:   A3:08:9B:E0:AD:9C:7C:CE:D3:7E:27:FB:D7:01:67:54:33:FF:DB:A1
Certificate issuer:       /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5
Certificate serial:       010D0C9F432858461C6FC863E200DF1005369F00
Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa
Signing time:             Wed 05 Jun 2024 15:00:52 +0000
ROA not before:           Wed 05 Jun 2024 15:00:52 +0000
ROA not after:            Tue 03 Sep 2024 15:00:52 +0000
asID:                     18013
IP address blocks:        172.98.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1c:6f:c8:63:e2:00:df:10:05:36:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5
        Validity
            Not Before: Jun  5 15:00:52 2024 GMT
            Not After : Sep  3 15:00:52 2024 GMT
        Subject: CN=8c834cac-f43f-4ca7-a5bc-26cc7e46a2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0f:e2:d9:fc:6e:c1:cb:d5:2e:62:5f:a9:70:
                    df:2b:e3:34:28:16:85:ae:5f:00:8e:9b:f7:af:28:
                    b0:3f:a7:33:b4:96:5d:b7:4c:7e:90:fe:e6:d0:62:
                    90:2e:40:29:67:4a:55:2d:bc:84:17:34:64:8d:61:
                    3f:7a:97:01:dc:1c:51:0e:e9:81:f8:a8:b7:4a:b5:
                    20:86:be:89:40:a9:3e:a2:11:60:cc:fa:43:83:ea:
                    87:71:5f:20:07:d2:f2:fd:1c:b6:15:53:b1:9c:e9:
                    a4:61:43:4b:b7:4d:6c:85:5a:f2:78:95:44:01:1c:
                    6e:8a:b4:f4:46:f5:9d:d5:c5:e1:ff:18:cf:2b:6c:
                    97:f2:fe:e1:c5:9e:3b:08:44:d3:10:0a:93:a2:68:
                    0c:f1:c9:2b:60:89:4a:45:1d:06:0e:3b:38:32:5d:
                    f0:9e:8d:77:84:ec:b6:a9:94:45:e1:94:7e:c3:ad:
                    1b:c7:38:d0:94:1d:71:d5:30:2e:6d:73:88:c8:17:
                    a0:2c:44:52:54:e7:39:f1:d8:c7:a2:44:4a:10:ef:
                    11:3a:a1:de:d6:9f:f9:c1:ce:54:c4:44:e0:03:c5:
                    7d:41:c9:b8:94:41:08:c9:22:07:cf:59:34:d7:6d:
                    f4:91:de:d2:cf:4c:65:52:cc:52:6e:97:ed:1b:8a:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:08:9B:E0:AD:9C:7C:CE:D3:7E:27:FB:D7:01:67:54:33:FF:DB:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/3a233b9a-db30-3943-a30c-4c0fe0d2dfe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl

            X509v3 Authority Key Identifier:
                keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a4:1b:dd:87:99:43:84:a8:f4:bb:97:75:d1:1f:24:d9:80:
         94:d9:f0:16:24:03:38:5b:23:65:ba:07:f6:d4:8a:4a:bf:13:
         0b:ec:61:83:78:02:4d:75:08:ea:70:9f:69:90:23:0c:bd:a3:
         a8:10:84:0c:a6:d4:5f:af:5d:66:1f:65:09:3f:9e:27:8a:57:
         91:0c:11:f9:32:a4:3e:2c:97:c0:73:c8:96:b3:60:fe:45:51:
         53:95:7e:52:94:ab:89:8a:9e:44:03:24:b3:58:c2:88:78:71:
         1b:29:5c:60:b4:94:bc:b2:47:82:32:1e:c8:58:2f:fa:89:14:
         5b:47:68:35:ac:51:47:44:6e:30:09:77:77:2e:c4:23:e3:ca:
         16:da:80:5c:2f:6e:a8:0c:9c:b3:68:ab:0b:72:15:f8:49:cb:
         81:04:9a:60:5b:2f:ae:ff:2c:ee:8f:f1:3c:d2:62:0d:30:ad:
         45:35:54:6a:84:07:eb:f8:45:12:68:5e:2a:78:2c:18:74:35:
         8a:75:ac:b6:b6:cb:07:e5:de:e4:75:36:cf:1d:ce:1f:e4:4a:
         85:ba:f9:3b:10:8e:a4:e1:a1:86:32:6c:98:40:c3:c1:65:81:
         db:bd:d4:06:c3:c2:0f:79:c3:66:46:7e:f0:44:04:84:d4:56:
         a9:89:6a:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYcb8hj4gDfEAU2nwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRlMWZmNmUtZDY4MC00NmNjLTllYjItNDg5NjhlNTEx
OGU1MB4XDTI0MDYwNTE1MDA1MloXDTI0MDkwMzE1MDA1MlowLzEtMCsGA1UEAxMk
OGM4MzRjYWMtZjQzZi00Y2E3LWE1YmMtMjZjYzdlNDZhMmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA/i2fxuwcvVLmJfqXDfK+M0KBaFrl8Ajpv3
ryiwP6cztJZdt0x+kP7m0GKQLkApZ0pVLbyEFzRkjWE/epcB3BxRDumB+Ki3SrUg
hr6JQKk+ohFgzPpDg+qHcV8gB9Ly/Ry2FVOxnOmkYUNLt01shVryeJVEARxuirT0
RvWd1cXh/xjPK2yX8v7hxZ47CETTEAqTomgM8ckrYIlKRR0GDjs4Ml3wno13hOy2
qZRF4ZR+w60bxzjQlB1x1TAubXOIyBegLERSVOc58djHokRKEO8ROqHe1p/5wc5U
xETgA8V9Qcm4lEEIySIHz1k01230kd7Sz0xlUsxSbpftG4qlJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMIm+CtnHzO034n+9cBZ1Qz/9uhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZGUx
ZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2OGU1MTE4ZTUvM2EyMzNiOWEtZGIzMC0z
OTQzLWEzMGMtNGMwZmUwZDJkZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGRlMWZmNmUtZDY4MC00NmNjLTll
YjItNDg5NjhlNTExOGU1L2RkZTFmZjZlLWQ2ODAtNDZjYy05ZWIyLTQ4OTY4ZTUx
MThlNS5jcmwwHwYDVR0jBBgwFoAUTauLI6Ene5VF7sHncc/rYxiIc7kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kZGUxZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2
OGU1MTE4ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABikG92HmUOEqPS7l3XRHyTZgJTZ8BYkAzhbI2W6B/bUikq/EwvsYYN4
Ak11COpwn2mQIwy9o6gQhAym1F+vXWYfZQk/nieKV5EMEfkypD4sl8BzyJazYP5F
UVOVflKUq4mKnkQDJLNYwoh4cRspXGC0lLyyR4IyHshYL/qJFFtHaDWsUUdEbjAJ
d3cuxCPjyhbagFwvbqgMnLNoqwtyFfhJy4EEmmBbL67/LO6P8TzSYg0wrUU1VGqE
B+v4RRJoXip4LBh0NYp1rLa2ywfl3uR1Ns8dzh/kSoW6+TsQjqThoYYybJhAw8Fl
gdu91AbDwg95w2ZGfvBEBITUVqmJavw=
-----END CERTIFICATE-----
Generated at Wed Jun 26 03:05:32 2024 by rpki-client on console-fra.rpki-client.org