Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/156ec4f7-9f6b-321f-ae1c-f00ddb3f709c.roa
File:                     156ec4f7-9f6b-321f-ae1c-f00ddb3f709c.roa (raw, json)
Hash identifier:          o41+02cdApBcnwnDKODmD3ITNtAJA1P+ujtrI+SGeiI=
Subject key identifier:   F9:A8:65:0B:F2:10:8C:47:DA:D0:9A:7C:48:9A:A1:9F:0B:5C:29:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C849707CB81255EB9BE540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/156ec4f7-9f6b-321f-ae1c-f00ddb3f709c.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.195.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:49:70:7c:b8:12:55:eb:9b:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=eece4d1e-34bd-46ac-8fec-bebca42e30cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:f8:32:ea:2e:8b:12:4b:f7:0a:d1:a3:f6:
                    e4:2a:96:57:48:c7:8a:71:7b:65:82:aa:8a:95:13:
                    59:00:68:0f:9b:7a:bc:3d:93:3b:b1:68:59:7b:e9:
                    f9:c8:3d:7f:90:c7:e9:a2:cc:da:a9:d8:25:8e:75:
                    50:9d:4d:41:aa:78:3e:e2:14:de:e4:03:4a:c5:fc:
                    de:3e:b9:03:60:a8:89:93:d2:38:af:56:ce:5e:4e:
                    31:74:86:7e:09:d0:ea:73:d6:c9:df:3a:d5:c0:87:
                    9a:c9:4e:0a:46:d0:eb:1e:ae:d1:33:7a:07:ec:f9:
                    18:6c:b0:e5:a7:aa:39:8f:58:78:73:32:61:bf:bc:
                    53:a8:08:46:88:c1:1f:f6:16:ba:06:8c:d4:ef:89:
                    09:3a:5b:eb:f8:7a:b8:ab:76:7c:7c:0c:06:88:7a:
                    cc:3f:8d:ad:b1:28:16:47:96:ab:42:8c:7e:79:8d:
                    32:b7:c3:cd:b4:b8:6f:58:af:a0:93:45:3a:4f:62:
                    18:0d:c9:a0:35:fc:9e:58:6b:1a:e3:95:e0:8a:21:
                    d6:0a:90:26:e3:a4:dc:01:83:d6:7f:5a:93:4d:0f:
                    60:8a:fd:8a:58:43:57:ee:b7:60:ff:03:39:86:8c:
                    e4:54:e7:fd:1d:d8:f3:43:56:38:3e:44:6c:70:8d:
                    37:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A8:65:0B:F2:10:8C:47:DA:D0:9A:7C:48:9A:A1:9F:0B:5C:29:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/156ec4f7-9f6b-321f-ae1c-f00ddb3f709c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.195.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:f1:6b:69:0b:03:47:a9:b7:80:61:0b:39:f6:d6:68:e5:63:
         d7:6a:f4:5b:ed:e9:58:b2:f3:b3:e5:43:e9:1d:91:06:c6:f9:
         ad:a0:8d:36:e3:5b:b3:93:85:b2:35:b4:95:5d:e3:75:90:f6:
         cd:be:2c:fa:85:f3:2a:90:d3:92:dd:25:34:34:b3:8b:c4:70:
         b3:26:8d:df:22:5f:e4:c2:cb:57:ab:85:64:37:31:d9:08:67:
         d1:b5:30:2d:8a:d3:72:ea:6a:ad:27:6f:96:28:dd:df:06:f4:
         69:17:6e:60:93:0c:45:a6:b2:19:08:66:c6:d7:31:0a:5b:80:
         cf:62:1c:07:3f:9d:36:45:a4:62:84:c0:7a:a1:a6:f9:a2:ca:
         58:59:ae:3c:82:0b:10:1a:89:d5:db:26:aa:89:d9:2f:50:63:
         4a:e8:f9:7a:8c:53:df:41:a9:68:23:8a:3c:e5:4c:5e:29:5e:
         18:f2:46:58:11:89:e2:f5:8b:79:b3:8b:2f:1d:e0:f5:9a:37:
         80:22:19:3c:c6:1b:3b:e1:c9:ec:3c:b0:c3:69:e0:2b:aa:6a:
         e5:05:05:f9:ce:a2:be:e3:88:10:10:bf:14:e2:bd:a3:85:48:
         0a:ef:7d:88:c1:58:54:52:8b:e0:f0:92:77:e7:ba:1f:a7:0c:
         d2:ac:1e:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0yElwfLgSVeub5UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZWVjZTRkMWUtMzRiZC00NmFjLThmZWMtYmViY2E0MmUzMGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwb4MuouixJL9wrRo/bkKpZXSMeKcXtlgqqK
lRNZAGgPm3q8PZM7sWhZe+n5yD1/kMfposzaqdgljnVQnU1Bqng+4hTe5ANKxfze
PrkDYKiJk9I4r1bOXk4xdIZ+CdDqc9bJ3zrVwIeayU4KRtDrHq7RM3oH7PkYbLDl
p6o5j1h4czJhv7xTqAhGiMEf9ha6BozU74kJOlvr+Hq4q3Z8fAwGiHrMP42tsSgW
R5arQox+eY0yt8PNtLhvWK+gk0U6T2IYDcmgNfyeWGsa45XgiiHWCpAm46TcAYPW
f1qTTQ9giv2KWENX7rdg/wM5hozkVOf9HdjzQ1Y4PkRscI03uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPmoZQvyEIxH2tCafEiaoZ8LXCn/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTU2ZWM0ZjctOWY2Yi0z
MjFmLWFlMWMtZjAwZGRiM2Y3MDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsP4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANPxa2kLA0ept4BhCzn21mjlY9dq9Fvt6Viy87PlQ+kdkQbG+a2gjTbj
W7OThbI1tJVd43WQ9s2+LPqF8yqQ05LdJTQ0s4vEcLMmjd8iX+TCy1erhWQ3MdkI
Z9G1MC2K03Lqaq0nb5Yo3d8G9GkXbmCTDEWmshkIZsbXMQpbgM9iHAc/nTZFpGKE
wHqhpvmiylhZrjyCCxAaidXbJqqJ2S9QY0ro+XqMU99BqWgjijzlTF4pXhjyRlgR
ieL1i3mziy8d4PWaN4AiGTzGGzvhyew8sMNp4CuqauUFBfnOor7jiBAQvxTivaOF
SArvfYjBWFRSi+Dwknfnuh+nDNKsHpY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:30:45 2024 by rpki-client on console-fra.rpki-client.org