Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/146f50cf-fa1c-302e-8097-8ff5fda89373.roa
File:                     146f50cf-fa1c-302e-8097-8ff5fda89373.roa (raw, json)
Hash identifier:          1qU5/IpPRQajEYoZBejig8VqGfAFQ6zLzwUf9sKaySc=
Subject key identifier:   0C:86:FB:01:0D:16:3A:7F:D3:9C:8A:60:69:8E:5D:EC:E0:6F:05:E8
Certificate issuer:       /CN=dc49520f-d0a0-4d00-a42f-35a1023569ac
Certificate serial:       010D0C9F432858477660F9049FEAC79FC927C980
Authority key identifier: 63:AE:BC:ED:8F:0F:D5:D0:67:C4:92:B1:34:6E:29:97:B7:82:A3:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/146f50cf-fa1c-302e-8097-8ff5fda89373.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     16922
IP address blocks:        192.35.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:60:f9:04:9f:ea:c7:9f:c9:27:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc49520f-d0a0-4d00-a42f-35a1023569ac
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=05e3f62e-e42b-4935-89fc-f784a6349afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:80:d9:a9:ed:02:98:06:c8:d4:71:2b:11:
                    16:0c:9a:be:d5:c2:82:20:44:bd:d1:8e:45:d1:75:
                    9e:29:34:40:7f:1f:3d:4d:67:bb:ed:b1:bc:af:58:
                    ad:cf:6f:9e:ba:b3:1d:d8:b9:63:91:f1:cd:9d:c2:
                    7c:13:dc:ee:4f:07:ad:7d:c5:14:90:f2:cc:30:61:
                    8f:4f:23:7f:cf:5d:b6:0c:cf:d0:e4:5a:ac:70:b6:
                    7d:4d:e4:f7:7a:31:2c:b3:46:7c:10:ff:20:38:35:
                    85:0d:db:ea:cb:35:17:41:1d:a3:7f:12:fc:61:34:
                    1b:46:b4:7e:9a:0b:7d:04:ca:8f:15:85:07:b7:59:
                    ad:0f:c7:aa:74:db:d3:c0:ee:07:25:0f:b4:1c:b2:
                    c0:4d:c2:f9:5c:d8:00:48:cf:4c:19:04:1f:4c:65:
                    76:22:03:27:83:9c:2d:37:d4:36:d3:51:a0:0d:e5:
                    9e:4c:23:dc:03:47:50:31:14:fd:8e:91:b0:12:03:
                    3b:d4:8d:6b:b8:87:36:4b:de:8e:68:c7:0a:f5:4d:
                    20:03:bc:dc:28:c9:1d:a0:e8:8b:11:b8:bb:ba:8c:
                    ed:29:2a:ca:c3:96:09:ad:51:75:7b:54:19:00:d9:
                    86:a9:88:67:a9:2f:71:35:1c:dc:ee:41:19:0b:bf:
                    04:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:86:FB:01:0D:16:3A:7F:D3:9C:8A:60:69:8E:5D:EC:E0:6F:05:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/146f50cf-fa1c-302e-8097-8ff5fda89373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.crl

            X509v3 Authority Key Identifier:
                keyid:63:AE:BC:ED:8F:0F:D5:D0:67:C4:92:B1:34:6E:29:97:B7:82:A3:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:9f:7a:4d:7a:a9:dd:09:e2:ac:f3:65:bb:78:f7:06:ac:3c:
         5d:1a:05:0d:04:e2:4a:78:ec:55:31:43:f5:7a:46:f5:6d:91:
         08:0f:af:5f:dd:09:14:d1:a2:31:9f:cd:8d:db:ba:95:1e:12:
         80:b2:a2:94:18:99:9a:6d:db:aa:63:26:c9:f6:51:a0:10:e8:
         a9:ff:47:c8:30:3a:10:9e:0b:0a:77:26:c1:c0:d0:10:23:0e:
         39:ad:84:fe:03:06:ef:ab:7f:50:ef:5f:7a:3c:62:16:a1:91:
         dc:b0:40:b7:77:96:33:ee:5c:b3:e8:b1:10:fe:d9:0e:cd:b9:
         90:43:76:a9:01:6c:39:8d:2c:3e:ad:fe:62:df:35:ab:da:13:
         13:1d:15:e2:24:25:31:48:d2:3f:41:f7:95:62:fb:d6:b8:2b:
         55:de:be:94:9a:a5:52:a8:f6:8b:fb:8f:e4:64:59:ce:e4:ff:
         10:3f:11:5e:35:c4:d0:5f:a9:15:12:17:56:fc:af:44:d4:9a:
         33:18:97:3a:97:40:78:a7:ec:06:23:45:45:ad:d2:41:86:93:
         56:f4:0e:17:d8:79:51:97:5a:79:67:f4:77:9d:07:09:16:f1:
         25:27:e4:41:d8:11:99:32:f1:88:ff:21:f0:6f:5a:24:f8:21:
         d8:e0:b7:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEd2YPkEn+rHn8knyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0OTUyMGYtZDBhMC00ZDAwLWE0MmYtMzVhMTAyMzU2
OWFjMB4XDTI0MTAwNzEzMDA0MFoXDTI1MDEwNTE0MDA0MFowLzEtMCsGA1UEAxMk
MDVlM2Y2MmUtZTQyYi00OTM1LTg5ZmMtZjc4NGE2MzQ5YWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm32A2antApgGyNRxKxEWDJq+1cKCIES90Y5F
0XWeKTRAfx89TWe77bG8r1itz2+eurMd2LljkfHNncJ8E9zuTwetfcUUkPLMMGGP
TyN/z122DM/Q5FqscLZ9TeT3ejEss0Z8EP8gODWFDdvqyzUXQR2jfxL8YTQbRrR+
mgt9BMqPFYUHt1mtD8eqdNvTwO4HJQ+0HLLATcL5XNgASM9MGQQfTGV2IgMng5wt
N9Q201GgDeWeTCPcA0dQMRT9jpGwEgM71I1ruIc2S96OaMcK9U0gA7zcKMkdoOiL
Ebi7uoztKSrKw5YJrVF1e1QZANmGqYhnqS9xNRzc7kEZC78EowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAyG+wENFjp/05yKYGmOXezgbwXoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYzQ5
NTIwZi1kMGEwLTRkMDAtYTQyZi0zNWExMDIzNTY5YWMvMTQ2ZjUwY2YtZmExYy0z
MDJlLTgwOTctOGZmNWZkYTg5MzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGM0OTUyMGYtZDBhMC00ZDAwLWE0
MmYtMzVhMTAyMzU2OWFjL2RjNDk1MjBmLWQwYTAtNGQwMC1hNDJmLTM1YTEwMjM1
NjlhYy5jcmwwHwYDVR0jBBgwFoAUY6687Y8P1dBnxJKxNG4pl7eCo1gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYzQ5NTIwZi1kMGEwLTRkMDAtYTQyZi0zNWEx
MDIzNTY5YWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCNiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFyfek16qd0J4qzzZbt49wasPF0aBQ0E4kp47FUxQ/V6RvVtkQgPr1/d
CRTRojGfzY3bupUeEoCyopQYmZpt26pjJsn2UaAQ6Kn/R8gwOhCeCwp3JsHA0BAj
DjmthP4DBu+rf1DvX3o8YhahkdywQLd3ljPuXLPosRD+2Q7NuZBDdqkBbDmNLD6t
/mLfNavaExMdFeIkJTFI0j9B95Vi+9a4K1XevpSapVKo9ov7j+RkWc7k/xA/EV41
xNBfqRUSF1b8r0TUmjMYlzqXQHin7AYjRUWt0kGGk1b0DhfYeVGXWnln9HedBwkW
8SUn5EHYEZky8Yj/IfBvWiT4Idjgt00=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:21 2024 by rpki-client on console-ams.rpki-client.org