Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b4b7000-5bcd-3247-bac0-ff2f80100593.roa
File:                     1b4b7000-5bcd-3247-bac0-ff2f80100593.roa (raw, json)
Hash identifier:          S0GBSwSt5NqkTxBg8BhaGxAmsJdaXbtpLbxFguj3qZA=
Subject key identifier:   4E:47:06:C9:5E:51:50:E1:7C:A9:B7:D8:1C:87:D5:36:A8:EB:3D:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CD7B7854160739E938B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b4b7000-5bcd-3247-bac0-ff2f80100593.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        98.34.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:d7:b7:85:41:60:73:9e:93:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=0869c42d-a278-4111-a39c-e9d00808aa56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ec:a5:10:7a:0f:3a:b3:a3:45:37:86:ef:f3:
                    78:3d:b3:14:9b:63:ad:b7:d8:02:97:04:cf:9b:24:
                    f9:2b:34:56:3d:86:98:8d:37:05:ea:9b:60:06:89:
                    e7:9c:72:73:a3:a7:af:d8:74:b3:2a:90:4b:3b:b4:
                    55:32:20:b6:7e:37:98:1d:4b:d4:91:5b:66:0e:70:
                    89:a1:23:88:e0:72:b2:a2:36:5e:e2:66:9d:55:24:
                    7e:de:fc:f1:ca:e2:2e:f2:20:66:64:4a:c4:d5:6e:
                    b9:0a:4d:1f:ce:32:eb:39:33:e1:1b:02:45:81:fa:
                    c8:fd:63:d2:76:8a:c0:9c:f4:6c:67:07:31:b0:c7:
                    50:b8:70:10:85:d2:1c:e8:2c:81:31:6a:fe:06:1b:
                    c1:f9:08:29:36:a0:62:2b:2a:3f:6b:8d:54:49:17:
                    05:45:fb:8b:5a:90:39:2a:2b:8d:33:a1:e1:2c:b4:
                    39:38:a6:24:9c:27:72:dd:ab:d5:2d:71:10:e3:71:
                    c6:32:bd:92:17:ac:48:f8:80:a4:26:c5:53:ce:43:
                    6a:f3:8b:7f:98:6b:d7:0d:45:47:35:72:c1:20:7b:
                    01:b8:9f:17:4b:e0:fc:5c:7f:26:1b:c1:15:23:27:
                    63:42:e4:cd:12:fd:ee:ae:a3:a4:9c:ed:53:1d:32:
                    93:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:47:06:C9:5E:51:50:E1:7C:A9:B7:D8:1C:87:D5:36:A8:EB:3D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1b4b7000-5bcd-3247-bac0-ff2f80100593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.34.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:3d:97:1e:76:4a:0c:d3:e7:8b:eb:55:7b:a1:0a:81:c4:6e:
         3a:83:41:75:04:49:be:40:c7:18:d0:4f:d3:99:91:87:97:45:
         3f:02:1a:7c:eb:88:68:e1:ae:a1:93:6f:7f:d8:89:bf:23:0f:
         c2:37:85:16:8e:78:4f:3a:b2:eb:a6:f9:98:da:a9:a8:e4:eb:
         3f:ba:f6:23:d7:67:3d:f0:2a:03:70:f0:3d:10:dc:a1:84:1b:
         77:19:e7:77:83:bc:72:9a:0c:ce:2f:bd:e4:f7:64:63:e9:66:
         32:b0:ae:59:01:d0:4a:48:e5:bb:ef:d8:00:d4:eb:1f:f6:ec:
         73:dc:09:a9:10:84:7f:82:5f:21:7d:28:0d:63:3b:9f:08:b0:
         2a:2d:e3:b5:35:c0:a9:fd:5f:49:aa:73:ff:d1:7f:b5:18:15:
         15:e0:31:25:ee:3b:33:34:33:0e:71:74:77:3a:13:8f:73:69:
         3e:e0:d6:29:d0:91:41:98:59:e4:7f:c1:e3:68:5d:9b:b1:33:
         66:32:94:c2:53:41:1e:11:08:41:99:8a:18:08:22:66:66:08:
         6a:d7:aa:cb:a7:41:43:61:73:4c:8c:ea:71:f8:e5:e8:33:fb:
         bb:65:13:54:1b:2f:dc:f7:07:84:46:cb:e8:b8:70:7c:02:fc:
         40:8e:f3:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnNe3hUFgc56TiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
MDg2OWM0MmQtYTI3OC00MTExLWEzOWMtZTlkMDA4MDhhYTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+ylEHoPOrOjRTeG7/N4PbMUm2Ott9gClwTP
myT5KzRWPYaYjTcF6ptgBonnnHJzo6ev2HSzKpBLO7RVMiC2fjeYHUvUkVtmDnCJ
oSOI4HKyojZe4madVSR+3vzxyuIu8iBmZErE1W65Ck0fzjLrOTPhGwJFgfrI/WPS
dorAnPRsZwcxsMdQuHAQhdIc6CyBMWr+BhvB+QgpNqBiKyo/a41USRcFRfuLWpA5
KiuNM6HhLLQ5OKYknCdy3avVLXEQ43HGMr2SF6xI+ICkJsVTzkNq84t/mGvXDUVH
NXLBIHsBuJ8XS+D8XH8mG8EVIydjQuTNEv3urqOknO1THTKTswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE5HBsleUVDhfKm32ByH1Tao6z2WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWI0YjcwMDAtNWJjZC0z
MjQ3LWJhYzAtZmYyZjgwMTAwNTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiJEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANc9lx52SgzT54vrVXuhCoHEbjqDQXUESb5AxxjQT9OZkYeXRT8CGnzr
iGjhrqGTb3/Yib8jD8I3hRaOeE86suum+Zjaqajk6z+69iPXZz3wKgNw8D0Q3KGE
G3cZ53eDvHKaDM4vveT3ZGPpZjKwrlkB0EpI5bvv2ADU6x/27HPcCakQhH+CXyF9
KA1jO58IsCot47U1wKn9X0mqc//Rf7UYFRXgMSXuOzM0Mw5xdHc6E49zaT7g1inQ
kUGYWeR/weNoXZuxM2YylMJTQR4RCEGZihgIImZmCGrXqsunQUNhc0yM6nH45egz
+7tlE1QbL9z3B4RGy+i4cHwC/ECO82w=
-----END CERTIFICATE-----
Generated at Sun Dec 22 03:36:48 2024 by rpki-client on console-fra.rpki-client.org