Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9/734ae590-f386-345b-9f0a-ee23c49a55f4.roa
File:                     734ae590-f386-345b-9f0a-ee23c49a55f4.roa (raw, json)
Hash identifier:          cgvTfcq69adMfz33PbFQJOVHvXG0cfy0kSHpe1KsaHM=
Subject key identifier:   EF:5A:9E:0B:B8:60:E9:A3:5A:39:1B:93:18:37:E6:C1:10:89:92:1A
Certificate issuer:       /CN=550c917f-e2be-44dc-8c27-87cd6064aaa9
Certificate serial:       010D0C9F43285845D503C71A9183938D810A8BE8
Authority key identifier: DB:14:F0:0B:5F:95:99:E8:AD:AF:1A:0D:69:51:38:93:7F:9B:74:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9/734ae590-f386-345b-9f0a-ee23c49a55f4.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     26685
IP address blocks:        198.14.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9/550c917f-e2be-44dc-8c27-87cd6064aaa9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9/550c917f-e2be-44dc-8c27-87cd6064aaa9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:c7:1a:91:83:93:8d:81:0a:8b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550c917f-e2be-44dc-8c27-87cd6064aaa9
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=88f0142e-74f9-4ce4-a1d1-a93cdc726890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:76:fa:bb:9e:07:d6:e5:70:d8:36:9a:2a:c0:
                    84:66:05:f9:8b:ff:93:82:a6:05:73:a0:ef:83:0f:
                    3d:ef:75:73:b5:92:e6:58:ef:70:45:73:89:cc:4a:
                    7f:d2:94:94:eb:05:56:12:79:29:23:87:b3:9e:5f:
                    7c:53:8c:cd:71:f6:a9:a5:00:e2:32:7d:ea:fb:23:
                    e7:c3:55:82:b2:c8:34:d3:d5:41:47:df:45:93:9a:
                    dd:77:fa:d9:62:a7:02:d5:9e:b1:35:68:23:d1:39:
                    80:84:85:a9:6a:23:45:43:38:7b:5b:f5:c9:18:7a:
                    26:37:01:5f:d4:ff:c9:d6:7b:04:6a:bf:03:19:15:
                    d1:05:e1:eb:64:5a:a1:26:aa:20:36:76:63:fb:1b:
                    c8:6b:fb:db:26:f6:6e:f2:bf:47:f7:d9:0b:05:d5:
                    f9:e3:ed:32:45:de:24:cb:e4:b9:e0:b4:0e:21:e3:
                    61:6e:3d:ac:57:9d:e4:a4:b2:63:d0:61:05:0e:5b:
                    58:10:a0:23:89:7c:e5:be:95:85:64:89:e3:ed:59:
                    a1:3e:6b:82:4a:c3:f5:86:5e:f1:7c:b9:41:db:a2:
                    a0:4f:a9:96:95:61:a7:2d:23:c3:90:1b:8f:57:cb:
                    1b:67:fe:b6:fa:45:ee:5a:ba:27:e9:d1:18:7d:1f:
                    85:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5A:9E:0B:B8:60:E9:A3:5A:39:1B:93:18:37:E6:C1:10:89:92:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9/734ae590-f386-345b-9f0a-ee23c49a55f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9/550c917f-e2be-44dc-8c27-87cd6064aaa9.crl

            X509v3 Authority Key Identifier:
                keyid:DB:14:F0:0B:5F:95:99:E8:AD:AF:1A:0D:69:51:38:93:7F:9B:74:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.14.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:25:aa:a0:0a:ec:0c:dc:e7:c7:22:b9:54:31:0c:3d:9b:d3:
         e8:4b:86:0b:66:60:ed:7a:c5:04:6f:4f:32:80:43:88:99:60:
         e1:78:33:00:1d:61:87:f2:82:f6:82:9e:1d:2d:2a:6f:16:cf:
         5c:14:be:51:7f:8f:ab:8c:76:fb:60:7d:4f:88:1d:87:a8:1f:
         74:2d:4b:c6:4a:ef:7f:1e:2b:a8:40:12:f4:af:86:63:dc:80:
         11:70:25:17:e3:8c:6d:28:f4:ce:9e:89:bc:64:89:5d:cb:d1:
         62:2e:a1:c8:89:9f:04:07:f2:6e:9a:a0:a5:66:59:0e:56:bf:
         dd:d8:1e:c8:13:f9:91:a1:fb:0f:2d:5d:b5:37:90:c6:3f:43:
         a9:bd:b2:84:3f:8f:a4:25:7a:de:7c:c9:ca:0f:68:fc:51:4a:
         f2:05:02:c4:c8:13:78:94:04:98:d3:ca:61:25:90:f5:45:06:
         b3:c1:42:fd:18:6f:6a:9a:5c:b9:c0:56:0e:21:10:8d:5d:27:
         63:99:25:05:03:4f:b0:b4:b8:81:8e:a1:f5:36:04:d1:75:3b:
         4c:b8:ae:65:42:00:e5:43:04:6e:a3:ca:42:30:de:d5:1a:92:
         c9:8b:85:70:f5:73:53:33:98:f7:ff:77:b5:a7:b8:15:c5:91:
         97:98:e0:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXVA8cakYOTjYEKi+gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUwYzkxN2YtZTJiZS00NGRjLThjMjctODdjZDYwNjRh
YWE5MB4XDTI0MDUxMTAxMDAyN1oXDTI0MDgwOTAxMDAyN1owLzEtMCsGA1UEAxMk
ODhmMDE0MmUtNzRmOS00Y2U0LWExZDEtYTkzY2RjNzI2ODkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnb6u54H1uVw2DaaKsCEZgX5i/+TgqYFc6Dv
gw8973VztZLmWO9wRXOJzEp/0pSU6wVWEnkpI4eznl98U4zNcfappQDiMn3q+yPn
w1WCssg009VBR99Fk5rdd/rZYqcC1Z6xNWgj0TmAhIWpaiNFQzh7W/XJGHomNwFf
1P/J1nsEar8DGRXRBeHrZFqhJqogNnZj+xvIa/vbJvZu8r9H99kLBdX54+0yRd4k
y+S54LQOIeNhbj2sV53kpLJj0GEFDltYEKAjiXzlvpWFZInj7VmhPmuCSsP1hl7x
fLlB26KgT6mWlWGnLSPDkBuPV8sbZ/62+kXuWron6dEYfR+F2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO9angu4YOmjWjkbkxg35sEQiZIaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NTBj
OTE3Zi1lMmJlLTQ0ZGMtOGMyNy04N2NkNjA2NGFhYTkvNzM0YWU1OTAtZjM4Ni0z
NDViLTlmMGEtZWUyM2M0OWE1NWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTUwYzkxN2YtZTJiZS00NGRjLThj
MjctODdjZDYwNjRhYWE5LzU1MGM5MTdmLWUyYmUtNDRkYy04YzI3LTg3Y2Q2MDY0
YWFhOS5jcmwwHwYDVR0jBBgwFoAU2xTwC1+VmeitrxoNaVE4k3+bdEwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NTBjOTE3Zi1lMmJlLTQ0ZGMtOGMyNy04N2Nk
NjA2NGFhYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxg6AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAglqqAK7Azc58ciuVQxDD2b0+hLhgtmYO16xQRvTzKAQ4iZYOF4MwAd
YYfygvaCnh0tKm8Wz1wUvlF/j6uMdvtgfU+IHYeoH3QtS8ZK738eK6hAEvSvhmPc
gBFwJRfjjG0o9M6eibxkiV3L0WIuociJnwQH8m6aoKVmWQ5Wv93YHsgT+ZGh+w8t
XbU3kMY/Q6m9soQ/j6Qlet58ycoPaPxRSvIFAsTIE3iUBJjTymElkPVFBrPBQv0Y
b2qaXLnAVg4hEI1dJ2OZJQUDT7C0uIGOofU2BNF1O0y4rmVCAOVDBG6jykIw3tUa
ksmLhXD1c1MzmPf/d7WnuBXFkZeY4B8=
-----END CERTIFICATE-----
Generated at Sun May 19 01:55:08 2024 by rpki-client on console-fra.rpki-client.org