Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa
File:                     98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa (raw, json)
Hash identifier:          Zxrmg4BmNqTMY6nZW9SEUu1gdiO6aLDBiav3EUUaHpU=
Subject key identifier:   73:E3:4E:0F:D6:B1:D5:9F:E5:21:1C:52:1C:FA:88:E8:61:5D:63:8F
Certificate issuer:       /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial:       010D0C9F43285845E7292C562CDC957C00B14D80
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     31834
IP address blocks:        209.222.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:2c:56:2c:dc:95:7c:00:b1:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=417aa943-cd01-4acf-87b8-d32572318f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:97:f0:7a:17:f7:ec:34:2e:e9:fd:79:49:da:
                    2d:64:65:d7:f5:ce:72:d5:f0:f5:41:25:75:60:b6:
                    8d:ae:11:78:98:e6:36:6b:74:8f:b1:10:38:cd:58:
                    f7:7d:83:af:80:50:f6:12:1a:8c:1e:ba:a6:39:33:
                    2e:c5:a4:ad:85:6b:0d:2f:87:5b:5e:b5:54:ab:29:
                    8b:32:c5:18:b0:91:a8:15:9a:21:df:4b:3c:ba:0e:
                    2d:9a:4a:a7:7d:d5:b5:f5:2a:b4:44:5b:27:d2:19:
                    28:c0:d3:97:f1:81:2b:12:d8:3b:39:3b:6a:77:ab:
                    17:18:08:0e:6d:2e:27:52:bc:1e:d4:48:8c:5b:33:
                    76:c5:b9:0e:0d:40:05:55:63:18:f5:68:8a:92:66:
                    6a:44:07:bd:fe:33:75:2b:92:f8:38:40:8b:e9:89:
                    1d:c6:0d:13:68:09:b8:b5:d4:f2:07:3c:77:fd:ce:
                    14:37:18:74:d0:45:5f:bc:72:63:b3:86:48:2d:41:
                    0e:09:ea:f9:1c:31:29:ae:ab:34:32:98:ab:50:c1:
                    ca:40:4a:3b:96:26:47:3c:04:0c:88:4e:da:b9:a9:
                    93:9e:45:b7:93:f5:4a:ef:c8:c5:e7:d6:25:ad:ce:
                    a7:c8:b9:4a:e5:14:5a:60:ec:bd:51:3d:4f:c7:f4:
                    4a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E3:4E:0F:D6:B1:D5:9F:E5:21:1C:52:1C:FA:88:E8:61:5D:63:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:fe:71:55:b8:17:a2:09:b2:ba:af:eb:f6:7d:d1:d3:1a:56:
         9d:6b:79:8d:33:37:a8:95:cd:54:d0:1b:87:07:88:41:dc:20:
         75:a5:d5:02:15:cc:ff:11:3b:32:18:e7:cb:4f:2e:b0:ad:c3:
         26:5f:27:38:ca:d8:9f:c5:b4:19:f7:01:b3:c4:21:12:9c:c9:
         e1:c4:bf:09:d7:e4:13:e7:79:ea:7f:a8:9e:76:d2:0a:cf:c0:
         65:52:ce:9b:b7:e1:93:88:e4:40:5f:0f:42:18:07:cb:71:1c:
         3b:84:ea:13:83:09:13:4f:68:f5:6e:65:3a:03:11:5f:d9:dc:
         fa:8e:2f:b9:1b:73:49:e3:91:f6:1c:4f:f4:53:66:f0:ee:61:
         d8:70:08:13:ec:ec:5c:fb:34:ac:85:b3:e9:fb:ab:31:f3:a2:
         39:24:f1:f6:37:bb:66:56:a6:a3:35:dc:c3:15:3f:7c:ca:9b:
         c1:58:6a:36:b6:f9:9d:d7:22:da:cd:31:27:f3:04:69:ec:b1:
         5c:51:f6:0e:e5:d4:01:c0:fb:6e:f9:d6:ef:16:2b:79:f6:07:
         a3:68:20:e5:6d:69:db:4e:46:3c:e8:d4:49:84:5f:8b:41:49:
         fa:f3:37:28:da:8c:0f:1a:8e:b7:1e:fa:27:16:30:22:a8:bb:
         2e:e6:94:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXnKSxWLNyVfACxTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh
NmFlMB4XDTI0MDUxNzEzMDAzNFoXDTI0MDgxNTEzMDAzNFowLzEtMCsGA1UEAxMk
NDE3YWE5NDMtY2QwMS00YWNmLTg3YjgtZDMyNTcyMzE4ZjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Zfwehf37DQu6f15SdotZGXX9c5y1fD1QSV1
YLaNrhF4mOY2a3SPsRA4zVj3fYOvgFD2EhqMHrqmOTMuxaSthWsNL4dbXrVUqymL
MsUYsJGoFZoh30s8ug4tmkqnfdW19Sq0RFsn0hkowNOX8YErEtg7OTtqd6sXGAgO
bS4nUrwe1EiMWzN2xbkODUAFVWMY9WiKkmZqRAe9/jN1K5L4OECL6Ykdxg0TaAm4
tdTyBzx3/c4UNxh00EVfvHJjs4ZILUEOCer5HDEprqs0MpirUMHKQEo7liZHPAQM
iE7auamTnkW3k/VK78jF59Ylrc6nyLlK5RRaYOy9UT1Px/RKFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHPjTg/WsdWf5SEcUhz6iOhhXWOPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj
ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvOThhM2UzZmMtNmY2ZC0z
OWI3LWJhYjAtNTI3NGE5ZGFhZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx
YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi
YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw
MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d7zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEn+cVW4F6IJsrqv6/Z90dMaVp1reY0zN6iVzVTQG4cHiEHcIHWl1QIV
zP8ROzIY58tPLrCtwyZfJzjK2J/FtBn3AbPEIRKcyeHEvwnX5BPneep/qJ520grP
wGVSzpu34ZOI5EBfD0IYB8txHDuE6hODCRNPaPVuZToDEV/Z3PqOL7kbc0njkfYc
T/RTZvDuYdhwCBPs7Fz7NKyFs+n7qzHzojkk8fY3u2ZWpqM13MMVP3zKm8FYaja2
+Z3XItrNMSfzBGnssVxR9g7l1AHA+2751u8WK3n2B6NoIOVtadtORjzo1EmEX4tB
SfrzNyjajA8ajrce+icWMCKouy7mlDs=
-----END CERTIFICATE-----
Generated at Fri May 17 15:24:07 2024 by rpki-client on console-ams.rpki-client.org