Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b061c76-19dc-466f-a9af-095e0d6f34a3/1099ce86-f4c2-302b-8804-ff943a53fdab.roa
File:                     1099ce86-f4c2-302b-8804-ff943a53fdab.roa (raw, json)
Hash identifier:          C1CbNbA3pfiz0DAiTdMckE/PnfN+QRMHAQXcLGfkAfY=
Subject key identifier:   6E:B1:B4:F3:A7:27:95:4D:A0:A1:1E:55:12:5B:52:F1:73:4F:22:06
Certificate issuer:       /CN=5b061c76-19dc-466f-a9af-095e0d6f34a3
Certificate serial:       010D0C9F4328584523DAFA1727B76E3A78A04200
Authority key identifier: 49:3C:B6:16:31:34:45:57:5B:CE:ED:2A:76:D5:87:6A:B3:DA:7F:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b061c76-19dc-466f-a9af-095e0d6f34a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b061c76-19dc-466f-a9af-095e0d6f34a3/1099ce86-f4c2-302b-8804-ff943a53fdab.roa
Signing time:             Fri 08 Mar 2024 14:00:30 +0000
ROA not before:           Fri 08 Mar 2024 14:00:30 +0000
ROA not after:            Thu 06 Jun 2024 13:00:30 +0000
asID:                     395009
IP address blocks:        98.142.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b061c76-19dc-466f-a9af-095e0d6f34a3/5b061c76-19dc-466f-a9af-095e0d6f34a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b061c76-19dc-466f-a9af-095e0d6f34a3/5b061c76-19dc-466f-a9af-095e0d6f34a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b061c76-19dc-466f-a9af-095e0d6f34a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:da:fa:17:27:b7:6e:3a:78:a0:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b061c76-19dc-466f-a9af-095e0d6f34a3
        Validity
            Not Before: Mar  8 14:00:30 2024 GMT
            Not After : Jun  6 13:00:30 2024 GMT
        Subject: CN=e5e4376b-8c48-4714-bc5f-024801a7560a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b5:c6:78:f8:be:dd:0c:4f:93:b8:39:d1:b2:
                    e7:04:02:8f:24:86:2e:d7:4e:63:a6:ac:fe:52:e4:
                    81:4c:c4:bc:57:56:a7:ba:9f:9b:ff:6e:87:78:58:
                    7a:64:b3:c8:42:a9:87:55:d1:33:50:21:36:3a:dd:
                    c3:d3:35:2e:55:43:be:3d:42:77:24:bf:39:8a:08:
                    2d:e2:c3:e0:00:b6:0e:7d:19:e2:43:37:e4:2f:5b:
                    c2:e2:c7:3b:67:a7:49:5d:84:1f:74:80:e0:1a:22:
                    97:76:39:c8:03:46:99:d1:33:d1:35:09:67:35:3a:
                    12:cb:4c:93:16:7f:85:50:b0:76:bd:ac:25:41:f3:
                    cb:77:a5:12:c3:37:46:0e:22:d6:ef:6f:c9:d1:9c:
                    84:bf:23:fc:41:9d:e7:26:48:43:9e:d3:f6:20:82:
                    3c:7c:11:c6:0f:54:5e:1a:62:60:0e:fb:fe:50:b8:
                    f4:46:c3:a4:f8:84:24:5c:ce:4e:d7:e1:25:8d:50:
                    5c:bf:19:a8:0e:86:1e:2a:0b:20:1b:23:a4:6f:c1:
                    ed:fd:a5:55:c1:ab:10:0b:9a:3d:be:50:55:b4:87:
                    37:c8:0c:17:67:b8:a2:43:23:b1:18:65:b0:43:df:
                    de:40:c0:a1:29:d9:f1:4e:c0:f3:76:e5:a1:88:c1:
                    80:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B1:B4:F3:A7:27:95:4D:A0:A1:1E:55:12:5B:52:F1:73:4F:22:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b061c76-19dc-466f-a9af-095e0d6f34a3/1099ce86-f4c2-302b-8804-ff943a53fdab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b061c76-19dc-466f-a9af-095e0d6f34a3/5b061c76-19dc-466f-a9af-095e0d6f34a3.crl

            X509v3 Authority Key Identifier:
                keyid:49:3C:B6:16:31:34:45:57:5B:CE:ED:2A:76:D5:87:6A:B3:DA:7F:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b061c76-19dc-466f-a9af-095e0d6f34a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:93:56:5b:8b:df:ee:3a:9c:bc:ab:12:1c:30:23:1e:4f:0a:
         d2:c5:7d:bd:6b:5d:dd:76:01:c6:0f:7b:5b:5e:28:dd:e9:5d:
         9a:56:6a:e8:04:00:43:6d:6c:25:ac:6b:06:04:cf:ff:9e:92:
         1c:33:82:64:07:17:de:f0:59:74:9a:87:10:8e:5d:d3:23:51:
         31:26:36:db:c6:a8:fc:55:57:0f:89:73:17:8a:bc:ce:01:66:
         de:77:75:06:83:1f:75:5b:7c:06:96:cf:c0:33:4b:97:64:84:
         46:d2:06:76:61:53:06:d5:0e:e8:a6:98:29:08:05:ff:8f:94:
         c3:f7:ef:c9:68:a6:a7:2c:ef:a9:db:24:86:2e:a3:ef:90:64:
         76:1f:1f:d7:5a:71:50:49:8f:56:13:aa:02:91:08:5c:e2:f7:
         04:b7:d3:6e:15:11:45:95:7e:1d:47:1c:31:f1:0d:41:a3:a7:
         b2:ea:46:53:ac:e6:9f:9d:3b:ce:70:d4:b7:7e:89:73:78:c1:
         b2:3b:51:2e:4e:0d:26:ba:78:60:88:6c:c8:26:e6:72:e5:01:
         52:f7:43:55:50:78:0b:a1:84:72:4e:3d:09:2f:ee:16:7d:22:
         fc:42:b9:d2:99:a6:27:91:5e:65:44:97:6d:8b:0c:ba:e7:ba:
         82:b2:9e:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUj2voXJ7duOnigQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWIwNjFjNzYtMTlkYy00NjZmLWE5YWYtMDk1ZTBkNmYz
NGEzMB4XDTI0MDMwODE0MDAzMFoXDTI0MDYwNjEzMDAzMFowLzEtMCsGA1UEAxMk
ZTVlNDM3NmItOGM0OC00NzE0LWJjNWYtMDI0ODAxYTc1NjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7XGePi+3QxPk7g50bLnBAKPJIYu105jpqz+
UuSBTMS8V1anup+b/26HeFh6ZLPIQqmHVdEzUCE2Ot3D0zUuVUO+PUJ3JL85iggt
4sPgALYOfRniQzfkL1vC4sc7Z6dJXYQfdIDgGiKXdjnIA0aZ0TPRNQlnNToSy0yT
Fn+FULB2vawlQfPLd6USwzdGDiLW72/J0ZyEvyP8QZ3nJkhDntP2III8fBHGD1Re
GmJgDvv+ULj0RsOk+IQkXM5O1+EljVBcvxmoDoYeKgsgGyOkb8Ht/aVVwasQC5o9
vlBVtIc3yAwXZ7iiQyOxGGWwQ9/eQMChKdnxTsDzduWhiMGASQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG6xtPOnJ5VNoKEeVRJbUvFzTyIGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YjA2
MWM3Ni0xOWRjLTQ2NmYtYTlhZi0wOTVlMGQ2ZjM0YTMvMTA5OWNlODYtZjRjMi0z
MDJiLTg4MDQtZmY5NDNhNTNmZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWIwNjFjNzYtMTlkYy00NjZmLWE5
YWYtMDk1ZTBkNmYzNGEzLzViMDYxYzc2LTE5ZGMtNDY2Zi1hOWFmLTA5NWUwZDZm
MzRhMy5jcmwwHwYDVR0jBBgwFoAUSTy2FjE0RVdbzu0qdtWHarPaf1AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81YjA2MWM3Ni0xOWRjLTQ2NmYtYTlhZi0wOTVl
MGQ2ZjM0YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYo65MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAeTVluL3+46nLyrEhwwIx5PCtLFfb1rXd12AcYPe1teKN3pXZpWaugE
AENtbCWsawYEz/+ekhwzgmQHF97wWXSahxCOXdMjUTEmNtvGqPxVVw+JcxeKvM4B
Zt53dQaDH3VbfAaWz8AzS5dkhEbSBnZhUwbVDuimmCkIBf+PlMP378lopqcs76nb
JIYuo++QZHYfH9dacVBJj1YTqgKRCFzi9wS3024VEUWVfh1HHDHxDUGjp7LqRlOs
5p+dO85w1Ld+iXN4wbI7US5ODSa6eGCIbMgm5nLlAVL3Q1VQeAuhhHJOPQkv7hZ9
IvxCudKZpieRXmVEl22LDLrnuoKynmc=
-----END CERTIFICATE-----
Generated at Wed May 15 15:09:02 2024 by rpki-client on console-fra.rpki-client.org