Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/109929da-c365-3433-892e-b58e9e6eae16.roa
File:                     109929da-c365-3433-892e-b58e9e6eae16.roa (raw, json)
Hash identifier:          CIQYECv4Css5KrM4a7K+4xqOufhkwymvcBRHd84HKA0=
Subject key identifier:   95:36:5C:68:08:E5:51:15:7E:72:76:1E:BF:88:50:76:DF:05:56:B1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C85EF668684FFDA9B9E080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/109929da-c365-3433-892e-b58e9e6eae16.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.200.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:5e:f6:68:68:4f:fd:a9:b9:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=e9f6eaa8-e6ae-4434-af93-d6f9f293b4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:46:ea:93:62:e5:6e:64:76:cd:75:a8:33:ba:
                    78:eb:94:7a:db:86:81:b1:0c:40:bf:f7:a7:cd:12:
                    dc:e8:7b:a4:16:eb:9a:f4:7b:3e:44:8e:6a:bd:d9:
                    63:68:00:d8:0b:2e:b3:cb:fb:e6:4c:d2:cc:18:08:
                    b2:2e:75:27:0d:04:22:10:4e:5a:2f:cb:6a:66:02:
                    a0:a2:b8:7d:40:7f:a8:37:6f:bd:37:c1:35:6f:ac:
                    11:28:3f:f2:6b:db:71:a4:47:7c:cf:18:78:d1:45:
                    1a:10:67:c4:f5:0b:74:34:9a:0d:39:31:1b:4d:aa:
                    73:5e:2c:0d:a3:8a:06:9d:e6:a0:44:a6:87:06:66:
                    ef:3e:e1:f8:ab:3f:0a:b2:a3:2f:49:a4:1a:26:44:
                    de:29:e9:e5:db:1e:74:32:fa:77:82:ca:1a:15:5e:
                    ee:20:84:4f:0c:97:2a:d0:c3:fa:04:29:e0:8f:69:
                    43:05:1a:41:f9:b1:56:d2:b1:3e:51:76:f4:11:4e:
                    d5:0b:92:82:2e:88:34:e8:b9:67:62:ad:0a:cb:b9:
                    3c:34:18:1c:68:f4:39:64:d7:d9:32:bf:78:65:9d:
                    f2:6a:52:e2:e0:80:2b:a1:17:14:92:ae:ae:29:42:
                    42:ba:84:8a:41:b7:5b:53:bf:46:bd:ce:74:37:13:
                    d6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:36:5C:68:08:E5:51:15:7E:72:76:1E:BF:88:50:76:DF:05:56:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/109929da-c365-3433-892e-b58e9e6eae16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.200.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:45:1d:cf:04:d0:68:79:d3:38:6c:0f:cb:d7:29:39:f1:
         11:7c:38:fc:22:b8:46:ca:00:67:c6:ed:27:bb:89:a8:ce:f0:
         6f:79:10:74:61:f3:19:3f:22:da:32:85:0f:fb:4c:55:46:cb:
         9f:6f:3c:52:bb:98:0b:08:ca:b8:91:fb:6c:67:18:ea:97:7a:
         58:1b:19:5c:a2:97:47:0f:13:00:a8:fd:14:aa:b6:5b:c0:46:
         a7:d2:5d:67:2f:fb:0a:c6:2e:5d:e6:51:57:3a:36:87:2e:61:
         3e:92:a5:94:f5:d1:df:0c:ad:ba:ae:c3:53:55:94:a3:91:e6:
         0f:0c:14:55:d9:a6:d7:f8:b4:18:cd:cb:be:9e:42:b7:6f:05:
         a1:2f:ce:16:89:d1:e2:ee:a4:69:07:aa:f2:c2:83:e5:72:a7:
         ce:52:d5:79:17:52:09:7c:1f:2a:35:48:f7:a3:71:54:e0:7d:
         7b:1d:13:8c:53:d9:ee:f7:63:1b:3b:64:7b:45:58:6b:fc:59:
         52:44:3b:ea:eb:41:6f:a3:46:2a:fa:53:49:5e:cd:55:fd:b2:
         c2:09:ca:30:8a:dc:3f:5b:89:98:49:e5:1a:72:aa:b8:65:e3:
         b5:09:ef:33:c6:97:f1:a6:af:c2:a1:55:06:cb:d3:71:d4:1f:
         2d:8f:69:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0yF72aGhP/am54IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZTlmNmVhYTgtZTZhZS00NDM0LWFmOTMtZDZmOWYyOTNiNGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kbqk2LlbmR2zXWoM7p465R624aBsQxAv/en
zRLc6HukFuua9Hs+RI5qvdljaADYCy6zy/vmTNLMGAiyLnUnDQQiEE5aL8tqZgKg
orh9QH+oN2+9N8E1b6wRKD/ya9txpEd8zxh40UUaEGfE9Qt0NJoNOTEbTapzXiwN
o4oGneagRKaHBmbvPuH4qz8KsqMvSaQaJkTeKenl2x50Mvp3gsoaFV7uIIRPDJcq
0MP6BCngj2lDBRpB+bFW0rE+UXb0EU7VC5KCLog06LlnYq0Ky7k8NBgcaPQ5ZNfZ
Mr94ZZ3yalLi4IAroRcUkq6uKUJCuoSKQbdbU79Gvc50NxPW8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJU2XGgI5VEVfnJ2Hr+IUHbfBVaxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTA5OTI5ZGEtYzM2NS0z
NDMzLTg5MmUtYjU4ZTllNmVhZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsjaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAByPRR3PBNBoedM4bA/L1yk58RF8OPwiuEbKAGfG7Se7iajO8G95EHRh
8xk/ItoyhQ/7TFVGy59vPFK7mAsIyriR+2xnGOqXelgbGVyil0cPEwCo/RSqtlvA
RqfSXWcv+wrGLl3mUVc6NocuYT6SpZT10d8Mrbquw1NVlKOR5g8MFFXZptf4tBjN
y76eQrdvBaEvzhaJ0eLupGkHqvLCg+Vyp85S1XkXUgl8Hyo1SPejcVTgfXsdE4xT
2e73Yxs7ZHtFWGv8WVJEO+rrQW+jRir6U0lezVX9ssIJyjCK3D9biZhJ5Rpyqrhl
47UJ7zPGl/Gmr8KhVQbL03HUHy2PaZU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:55:40 2024 by rpki-client on console-ams.rpki-client.org