Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa
File:                     ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa (raw, json)
Hash identifier:          KJKRec8kqySx+5F70eCf4c0olvmWoZy6prLU4U5/e0c=
Subject key identifier:   50:CD:E5:CB:1C:E7:29:AA:28:87:99:E8:11:04:C3:16:BC:89:C4:A8
Certificate issuer:       /CN=3be7133e-7e46-4fc6-9410-e18bafb885d8
Certificate serial:       010D0C9F43285845F51E9736E412597CAA64E640
Authority key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa
Signing time:             Wed 22 May 2024 13:00:33 +0000
ROA not before:           Wed 22 May 2024 13:00:33 +0000
ROA not after:            Tue 20 Aug 2024 13:00:33 +0000
asID:                     399521
IP address blocks:        172.98.11.0/24 maxlen: 24
                          172.98.10.0/24 maxlen: 24
                          172.98.8.0/24 maxlen: 24
                          172.98.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f5:1e:97:36:e4:12:59:7c:aa:64:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8
        Validity
            Not Before: May 22 13:00:33 2024 GMT
            Not After : Aug 20 13:00:33 2024 GMT
        Subject: CN=8589b582-8b25-4ab0-9bd8-76c09c249b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:47:ba:74:5f:15:57:53:72:7a:6e:2c:dd:
                    c3:c9:9b:22:89:a9:a5:72:35:a1:b8:af:b9:2a:cf:
                    f8:85:64:9f:67:70:86:86:92:97:76:e9:61:be:96:
                    aa:a3:7a:2d:e1:66:47:eb:54:0e:7e:22:83:ab:42:
                    35:39:f1:ab:d8:0b:0e:fe:ab:63:26:28:8f:a6:61:
                    c0:f2:05:1a:cd:83:af:53:55:d3:09:b0:3b:59:4f:
                    c4:ed:c9:0b:a0:d8:a5:5a:ac:1c:fa:12:f8:9a:cb:
                    e5:8c:67:d9:09:cb:1e:48:98:9d:e9:f7:ed:1f:49:
                    01:4a:b6:08:07:65:e2:1c:a5:4a:7a:9a:11:c9:f2:
                    f4:00:38:19:b1:a7:cb:be:0d:17:ed:36:1e:b1:d8:
                    87:56:f2:79:99:3f:8d:de:7e:8b:f2:79:7b:54:2d:
                    a4:4c:12:35:69:cc:2b:31:24:ca:48:ff:a5:f5:0f:
                    5d:3f:c3:19:ff:6e:be:a8:54:12:73:f5:11:54:e0:
                    c0:48:85:63:bd:44:da:3c:6c:54:33:31:27:e2:48:
                    53:ba:8a:29:45:78:94:2a:d6:a0:a4:b5:0e:63:f7:
                    03:d8:3b:c4:08:24:3d:88:11:de:60:54:f7:82:3b:
                    8a:62:cf:a2:f6:e5:93:07:25:c6:b1:d9:48:11:a9:
                    4a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CD:E5:CB:1C:E7:29:AA:28:87:99:E8:11:04:C3:16:BC:89:C4:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl

            X509v3 Authority Key Identifier:
                keyid:1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:9e:fc:4d:52:84:7a:d8:a5:ea:3f:19:39:3d:70:fa:34:91:
         0b:19:52:44:25:a0:34:93:b9:49:08:45:0e:c8:7f:8e:fb:b1:
         af:db:71:bc:f6:c9:3d:3d:ef:44:3f:97:c3:0c:61:e8:a5:12:
         a9:9f:18:ce:e2:91:e4:89:3c:2a:0a:f9:f9:25:9b:a9:b6:a9:
         2b:ae:31:5f:d0:08:72:30:68:42:0e:68:1a:1d:49:28:4c:3f:
         52:e8:5c:bb:41:88:55:1d:80:26:ad:fe:f9:c7:4a:c1:78:b2:
         db:c9:f3:08:78:99:71:4a:4b:6d:da:71:5a:92:47:fb:3d:66:
         9d:bb:ac:d7:b9:d9:54:07:13:a7:e1:f0:4c:44:43:f5:dd:7c:
         aa:25:60:b9:a5:f8:e4:d7:cb:3a:74:db:30:6f:26:04:64:1f:
         5e:50:e6:17:cb:02:66:8c:18:fd:cd:87:9a:1c:6d:a1:d0:f7:
         0b:92:78:75:87:10:26:1a:52:be:85:bb:8c:1f:de:ef:26:09:
         7a:c9:f0:06:84:12:34:a0:5c:c4:30:6a:70:e7:78:c6:b7:4c:
         c5:e0:a2:89:53:f3:93:a0:e5:60:91:01:fb:4a:2b:a5:a2:45:
         0e:be:3a:d3:1d:73:bd:55:74:1e:f7:20:23:47:b6:d5:9d:ea:
         2b:15:1f:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEX1Hpc25BJZfKpk5kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4
NWQ4MB4XDTI0MDUyMjEzMDAzM1oXDTI0MDgyMDEzMDAzM1owLzEtMCsGA1UEAxMk
ODU4OWI1ODItOGIyNS00YWIwLTliZDgtNzZjMDljMjQ5YjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKdHunRfFVdTcnpuLN3DyZsiiamlcjWhuK+5
Ks/4hWSfZ3CGhpKXdulhvpaqo3ot4WZH61QOfiKDq0I1OfGr2AsO/qtjJiiPpmHA
8gUazYOvU1XTCbA7WU/E7ckLoNilWqwc+hL4msvljGfZCcseSJid6fftH0kBSrYI
B2XiHKVKepoRyfL0ADgZsafLvg0X7TYesdiHVvJ5mT+N3n6L8nl7VC2kTBI1acwr
MSTKSP+l9Q9dP8MZ/26+qFQSc/URVODASIVjvUTaPGxUMzEn4khTuoopRXiUKtag
pLUOY/cD2DvECCQ9iBHeYFT3gjuKYs+i9uWTByXGsdlIEalKzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFDN5csc5ymqKIeZ6BEEwxa8icSoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3
MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvZWY1YjRmODQtZmNkOS0z
ZTVmLWI5ODYtNjExNGJjMWVmMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2JlNzEzM2UtN2U0Ni00ZmM2LTk0
MTAtZTE4YmFmYjg4NWQ4LzNiZTcxMzNlLTdlNDYtNGZjNi05NDEwLWUxOGJhZmI4
ODVkOC5jcmwwHwYDVR0jBBgwFoAUG80FAxLr/NeS1v6quZZp+g1ssMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThi
YWZiODg1ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGIIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2e/E1ShHrYpeo/GTk9cPo0kQsZUkQloDSTuUkIRQ7If477sa/bcbz2
yT0970Q/l8MMYeilEqmfGM7ikeSJPCoK+fklm6m2qSuuMV/QCHIwaEIOaBodSShM
P1LoXLtBiFUdgCat/vnHSsF4stvJ8wh4mXFKS23acVqSR/s9Zp27rNe52VQHE6fh
8ExEQ/XdfKolYLml+OTXyzp02zBvJgRkH15Q5hfLAmaMGP3Nh5ocbaHQ9wuSeHWH
ECYaUr6Fu4wf3u8mCXrJ8AaEEjSgXMQwanDneMa3TMXgoolT85Og5WCRAftKK6Wi
RQ6+OtMdc71VdB73ICNHttWd6isVH5Q=
-----END CERTIFICATE-----
Generated at Sun Jun 2 19:32:48 2024 by rpki-client on console-ams.rpki-client.org