Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e4699df-17e2-386d-bec9-02acc6b00353.roa
File:                     2e4699df-17e2-386d-bec9-02acc6b00353.roa (raw, json)
Hash identifier:          kyRuXJ5CIK+ctOLHDBmfpLjBClfeS+0+HHITQ986TKA=
Subject key identifier:   9A:92:8D:A2:3C:B1:1F:2A:BF:30:9B:34:B5:EB:E0:EB:14:E1:62:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C8740D346EEACEED052580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e4699df-17e2-386d-bec9-02acc6b00353.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.40.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:74:0d:34:6e:ea:ce:ed:05:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=2dba9ca5-502e-4dd6-9493-a0bff20da1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cd:14:01:00:d7:93:6b:60:cc:f6:a7:28:24:
                    bb:4a:1f:cc:9c:4e:f3:13:a5:46:97:28:f7:96:0b:
                    f6:f1:7b:6d:d9:32:d0:d0:22:0c:6c:1d:f4:87:fc:
                    b6:9b:3b:3f:d2:82:87:e2:f5:40:7d:1e:aa:0b:85:
                    4e:56:a0:c3:0a:56:bf:13:49:3a:c1:3c:50:9b:48:
                    e8:31:05:70:d2:b0:69:3a:cf:7a:0f:0f:08:ca:f0:
                    4d:46:a7:9c:2d:66:40:b3:17:db:18:2e:63:a5:c5:
                    24:93:15:ad:53:b6:b7:94:7d:c3:bd:50:55:b7:d2:
                    a5:0c:c0:8e:7f:de:db:d5:93:45:ef:e5:5a:d5:29:
                    a7:bc:95:2b:66:b6:a0:08:13:29:05:b7:d4:28:4b:
                    4a:59:2e:ec:fd:c4:9e:1e:6f:a8:c9:94:56:b6:1c:
                    00:e2:1b:1e:37:b8:e3:2b:e8:ca:be:c9:5e:b2:d8:
                    40:d0:5a:22:5e:36:57:cd:62:fa:82:99:5c:37:36:
                    14:14:31:c8:07:61:04:6a:cd:9a:06:f1:45:fa:5a:
                    09:d2:ee:63:2c:38:ab:03:5e:5b:58:6b:c3:9c:5b:
                    aa:2e:7b:48:29:48:c4:ab:99:8f:16:80:28:ed:ab:
                    29:2e:fc:41:0f:63:8d:60:26:e3:00:12:d9:2d:0b:
                    9e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:92:8D:A2:3C:B1:1F:2A:BF:30:9B:34:B5:EB:E0:EB:14:E1:62:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e4699df-17e2-386d-bec9-02acc6b00353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.40.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:82:fd:e0:71:dc:bd:40:5d:ea:24:52:b7:26:86:56:5f:d8:
         eb:c6:08:21:7b:df:b1:50:bc:2d:01:ca:15:c2:9f:44:5b:4f:
         a6:43:e8:97:54:cc:f3:72:16:f5:55:70:5a:5c:3f:67:0a:43:
         cb:bb:cf:77:f2:6f:04:f2:b5:04:dd:69:42:a5:ef:cf:2f:9d:
         a0:21:46:e4:a9:bc:3d:44:48:53:68:be:9c:9c:67:e8:37:55:
         67:1f:33:59:f3:09:10:6b:a3:ee:f7:0e:c0:11:8b:b5:2b:5f:
         c3:71:38:8e:0c:41:5a:44:8f:b8:4b:94:0f:1e:27:e8:f0:0c:
         21:f2:0f:30:e4:0f:b8:59:7d:f1:85:8c:95:3a:be:e7:8f:08:
         46:78:e4:76:6e:23:82:d0:f7:95:10:93:6e:d4:88:9d:fe:64:
         15:e0:a1:36:d1:17:99:1c:ae:92:9f:58:8a:8f:32:98:ed:eb:
         cf:b4:ff:ec:b8:e5:24:6e:28:0a:be:62:99:96:3d:59:eb:f9:
         40:99:60:2a:2a:fc:ed:fe:2e:5a:db:44:5e:d1:b3:90:44:13:
         6b:75:ee:e1:33:85:0f:d0:6e:ab:3f:7a:c3:e4:21:02:50:ce:
         53:14:01:90:8f:ae:b4:78:d8:c5:bd:95:54:15:57:90:84:d2:
         73:6a:86:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0yHQNNG7qzu0FJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
MmRiYTljYTUtNTAyZS00ZGQ2LTk0OTMtYTBiZmYyMGRhMWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks0UAQDXk2tgzPanKCS7Sh/MnE7zE6VGlyj3
lgv28Xtt2TLQ0CIMbB30h/y2mzs/0oKH4vVAfR6qC4VOVqDDCla/E0k6wTxQm0jo
MQVw0rBpOs96Dw8IyvBNRqecLWZAsxfbGC5jpcUkkxWtU7a3lH3DvVBVt9KlDMCO
f97b1ZNF7+Va1SmnvJUrZragCBMpBbfUKEtKWS7s/cSeHm+oyZRWthwA4hseN7jj
K+jKvslesthA0FoiXjZXzWL6gplcNzYUFDHIB2EEas2aBvFF+loJ0u5jLDirA15b
WGvDnFuqLntIKUjEq5mPFoAo7aspLvxBD2ONYCbjABLZLQue4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJqSjaI8sR8qvzCbNLXr4OsU4WIIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmU0Njk5ZGYtMTdlMi0z
ODZkLWJlYzktMDJhY2M2YjAwMzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYijeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFmC/eBx3L1AXeokUrcmhlZf2OvGCCF737FQvC0ByhXCn0RbT6ZD6JdU
zPNyFvVVcFpcP2cKQ8u7z3fybwTytQTdaUKl788vnaAhRuSpvD1ESFNovpycZ+g3
VWcfM1nzCRBro+73DsARi7UrX8NxOI4MQVpEj7hLlA8eJ+jwDCHyDzDkD7hZffGF
jJU6vuePCEZ45HZuI4LQ95UQk27UiJ3+ZBXgoTbRF5kcrpKfWIqPMpjt68+0/+y4
5SRuKAq+YpmWPVnr+UCZYCoq/O3+LlrbRF7Rs5BEE2t17uEzhQ/Qbqs/esPkIQJQ
zlMUAZCPrrR42MW9lVQVV5CE0nNqhqw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:32:47 2024 by rpki-client on console-fra.rpki-client.org