Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/180d60a2-e82c-38fb-bfeb-cea30d4bf409.roa
File:                     180d60a2-e82c-38fb-bfeb-cea30d4bf409.roa (raw, json)
Hash identifier:          Bci9pQmVVmeAY9mogaa3ogyUnfwzQczhAeGUtHLM7zk=
Subject key identifier:   FA:8D:13:67:FE:CC:95:EB:18:CC:4F:C4:A5:16:48:C1:5E:59:E0:33
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5AB8FC7792734E865ED00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/180d60a2-e82c-38fb-bfeb-cea30d4bf409.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        98.252.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:ab:8f:c7:79:27:34:e8:65:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=292787d4-846a-4e64-a5ad-d90de9ffac25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8b:e7:70:a8:96:22:5a:f5:90:4f:63:58:54:
                    30:d7:c4:c8:e1:7a:b2:d5:d6:2e:07:1d:b8:be:fb:
                    2e:82:91:58:74:e2:78:f0:1c:ee:93:a0:2b:ad:7b:
                    23:35:d5:9a:dd:7a:56:42:11:5f:0f:6c:1b:e8:5e:
                    d6:66:bf:d7:66:2c:d7:d9:ef:14:9e:9e:fb:9d:a5:
                    88:68:0b:04:a9:24:b9:9d:d1:9e:8c:fd:d9:bd:48:
                    33:b8:75:ae:2d:13:bf:d2:99:e7:0a:d5:06:2b:cc:
                    24:c9:6a:2a:23:3b:8c:ee:ba:19:eb:56:06:c6:89:
                    51:72:81:4e:dc:53:21:bc:c3:82:30:80:f7:5c:eb:
                    f1:68:b0:94:6b:7d:da:df:c4:29:5d:6c:a5:30:2e:
                    1c:ad:98:50:e3:8c:95:23:44:22:b6:62:ad:05:a0:
                    d2:b4:c8:f7:e5:b5:36:d9:f6:e3:f6:26:71:e1:31:
                    bc:e5:fc:85:a3:de:cc:91:5d:cb:49:9c:16:26:7d:
                    15:96:43:be:0c:8c:a4:a1:60:1e:d4:ad:97:05:8e:
                    5d:ec:a7:92:10:ea:8d:75:88:66:91:da:ab:73:89:
                    13:8e:d1:b5:0c:9a:30:75:d2:cd:f0:c8:b7:1f:60:
                    cc:20:f9:85:89:7e:8c:15:7f:1c:fd:11:3a:99:b2:
                    11:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8D:13:67:FE:CC:95:EB:18:CC:4F:C4:A5:16:48:C1:5E:59:E0:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/180d60a2-e82c-38fb-bfeb-cea30d4bf409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.252.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ab:2d:10:8d:8c:a0:ac:bc:a6:6d:ed:ec:a3:49:68:2b:3d:
         e0:24:5a:8d:87:1f:79:d5:92:da:4b:55:d6:7d:65:de:1c:73:
         1b:23:e3:f9:e9:82:f8:e2:88:90:a8:26:8e:9b:5b:2b:3b:1c:
         c5:64:96:3c:1b:f6:ab:5e:2d:e8:e8:9e:ab:d1:d0:ee:1f:9d:
         6f:f0:81:57:a8:1c:f5:b9:62:06:9c:c2:c7:52:1b:f6:a1:c7:
         d4:1e:3b:ac:fa:76:99:78:e6:f5:ca:c6:e9:b4:ab:99:d6:bf:
         06:3f:ee:55:b1:00:7b:bd:39:66:f0:36:36:3f:38:d0:12:14:
         6f:07:9a:70:6a:3e:1a:55:84:37:c1:d8:96:a4:de:f3:8a:1f:
         7e:0f:55:89:27:59:6b:cc:b0:f3:e7:3c:95:ec:2f:8a:dd:3c:
         8d:31:a3:1d:b3:0d:72:63:13:fc:d8:73:cc:24:ad:aa:ea:b2:
         49:4d:16:b7:a6:7f:d8:32:d9:cb:df:ea:22:a1:61:c4:19:e1:
         a9:55:a4:0a:58:f6:88:ff:1c:0d:27:e7:da:cb:d3:22:d4:1b:
         b3:13:5d:39:11:49:70:44:e3:97:44:8e:e7:3a:94:fe:5b:e1:
         ca:c1:e6:b5:65:22:03:a2:ff:13:65:f6:8a:b6:83:87:1f:47:
         cf:21:61:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5auPx3knNOhl7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
MjkyNzg3ZDQtODQ2YS00ZTY0LWE1YWQtZDkwZGU5ZmZhYzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgovncKiWIlr1kE9jWFQw18TI4Xqy1dYuBx24
vvsugpFYdOJ48Bzuk6ArrXsjNdWa3XpWQhFfD2wb6F7WZr/XZizX2e8Unp77naWI
aAsEqSS5ndGejP3ZvUgzuHWuLRO/0pnnCtUGK8wkyWoqIzuM7roZ61YGxolRcoFO
3FMhvMOCMID3XOvxaLCUa33a38QpXWylMC4crZhQ44yVI0QitmKtBaDStMj35bU2
2fbj9iZx4TG85fyFo97MkV3LSZwWJn0VlkO+DIykoWAe1K2XBY5d7KeSEOqNdYhm
kdqrc4kTjtG1DJowddLN8Mi3H2DMIPmFiX6MFX8c/RE6mbIRQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPqNE2f+zJXrGMxPxKUWSMFeWeAzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTgwZDYwYTItZTgyYy0z
OGZiLWJmZWItY2VhMzBkNGJmNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvzwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWrLRCNjKCsvKZt7eyjSWgrPeAkWo2HH3nVktpLVdZ9Zd4ccxsj4/np
gvjiiJCoJo6bWys7HMVkljwb9qteLejonqvR0O4fnW/wgVeoHPW5YgacwsdSG/ah
x9QeO6z6dpl45vXKxum0q5nWvwY/7lWxAHu9OWbwNjY/ONASFG8HmnBqPhpVhDfB
2Jak3vOKH34PVYknWWvMsPPnPJXsL4rdPI0xox2zDXJjE/zYc8wkrarqsklNFrem
f9gy2cvf6iKhYcQZ4alVpApY9oj/HA0n59rL0yLUG7MTXTkRSXBE45dEjuc6lP5b
4crB5rVlIgOi/xNl9oq2g4cfR88hYQw=
-----END CERTIFICATE-----
Generated at Sun Dec 22 03:53:47 2024 by rpki-client on console-ams.rpki-client.org