Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4417baa3-3ddd-3af2-9c16-5851f2df9528.roa
File:                     4417baa3-3ddd-3af2-9c16-5851f2df9528.roa (raw, json)
Hash identifier:          TArFDq8CAmvJrbPUaMqZqblSJbEtA5Oy+T4TzMiy9to=
Subject key identifier:   F1:FE:6C:F5:D4:0B:E8:F4:66:7F:88:07:24:A1:FC:C4:50:F5:FF:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB73DCD893F5F658EE3000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4417baa3-3ddd-3af2-9c16-5851f2df9528.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        98.240.168.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:73:dc:d8:93:f5:f6:58:ee:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=fc0ab5bb-060b-48d5-af99-7a002119dac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:61:fc:d2:db:44:cf:a4:6a:18:95:76:25:d1:
                    f1:ef:c6:a9:44:d4:4b:22:72:84:25:9f:0a:f0:68:
                    00:91:aa:4c:a5:eb:7b:75:46:df:30:d2:3c:94:f3:
                    f6:4e:b5:6a:51:43:e0:e5:fc:52:74:bf:2c:40:3c:
                    f0:ec:a6:71:c7:92:37:7e:cf:8f:bc:89:27:84:11:
                    df:85:c6:9d:8d:35:e6:60:f2:fb:8f:94:08:50:8b:
                    2f:8b:b4:d4:4d:d9:46:c5:86:08:5e:f9:8f:80:23:
                    20:ae:bd:4d:c7:5b:ff:40:7d:9f:3d:2a:81:08:3e:
                    b6:7b:d8:d4:c0:56:b9:02:fc:74:ce:60:dc:2a:ca:
                    25:fa:75:1d:dd:fc:2e:85:8d:c7:a1:70:aa:f6:86:
                    1a:41:a4:1e:99:e9:53:0b:99:3d:cd:07:6e:c5:4a:
                    5c:2f:17:97:d0:d6:70:d5:5f:e1:93:9d:c7:05:4e:
                    69:d9:92:2e:11:9a:48:40:56:c5:70:0a:c1:70:12:
                    17:1c:f7:3a:2c:3b:bd:2c:96:09:07:7e:21:e8:8a:
                    fe:e7:7a:38:83:7c:8b:66:f5:87:b5:a9:14:83:c8:
                    d6:1e:55:a7:3f:2e:3a:63:e3:7c:c7:38:36:4d:f6:
                    78:ba:db:a8:e8:0d:a5:c7:cb:bb:ff:da:b8:15:c5:
                    c7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FE:6C:F5:D4:0B:E8:F4:66:7F:88:07:24:A1:FC:C4:50:F5:FF:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4417baa3-3ddd-3af2-9c16-5851f2df9528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.240.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:41:88:e8:37:6f:89:9a:92:4f:fa:a0:2e:a2:15:89:8f:ec:
         a4:65:3e:19:62:bd:dd:94:48:ef:2e:bc:31:77:03:5e:f6:5b:
         94:ae:50:00:a2:27:ea:cc:2f:03:c8:b8:88:f1:5e:03:64:0f:
         bf:23:e4:d8:de:f0:c4:ec:b4:91:41:5f:0b:db:37:94:26:6a:
         af:ac:a3:b0:47:d3:eb:34:99:72:53:d5:bb:f6:2b:dd:9d:9e:
         2b:65:6e:78:93:06:81:f2:eb:b7:c9:57:83:13:38:0e:b4:52:
         92:80:5b:cf:5f:1b:26:19:2f:bb:d2:b2:97:76:bc:e3:33:3d:
         4d:24:0a:0b:20:2e:e8:fb:87:96:f9:ce:79:34:71:ec:1d:2b:
         be:9e:76:3e:2b:4d:85:d9:8a:51:ed:66:25:3c:f5:e0:2f:1f:
         cb:7a:35:e9:ee:7a:d4:e1:59:48:75:2d:4c:08:62:08:11:0f:
         af:8c:27:77:a4:8a:cb:75:d6:73:2c:09:a8:f1:b4:60:95:5f:
         a0:c2:c4:61:b5:67:60:05:bb:1e:c9:e7:0b:5b:ab:95:91:9c:
         e1:60:c4:82:a3:19:d8:de:fd:9c:44:03:11:36:7d:96:aa:24:
         21:00:b1:0e:ab:17:bc:0a:17:f8:d1:9c:7e:bc:e7:21:22:3d:
         c8:5d:17:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe++3Pc2JP19ljuMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZmMwYWI1YmItMDYwYi00OGQ1LWFmOTktN2EwMDIxMTlkYWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWH80ttEz6RqGJV2JdHx78apRNRLInKEJZ8K
8GgAkapMpet7dUbfMNI8lPP2TrVqUUPg5fxSdL8sQDzw7KZxx5I3fs+PvIknhBHf
hcadjTXmYPL7j5QIUIsvi7TUTdlGxYYIXvmPgCMgrr1Nx1v/QH2fPSqBCD62e9jU
wFa5Avx0zmDcKsol+nUd3fwuhY3HoXCq9oYaQaQemelTC5k9zQduxUpcLxeX0NZw
1V/hk53HBU5p2ZIuEZpIQFbFcArBcBIXHPc6LDu9LJYJB34h6Ir+53o4g3yLZvWH
takUg8jWHlWnPy46Y+N8xzg2TfZ4utuo6A2lx8u7/9q4FcXHWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPH+bPXUC+j0Zn+IBySh/MRQ9f/hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDQxN2JhYTMtM2RkZC0z
YWYyLTljMTYtNTg1MWYyZGY5NTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYvCoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpBiOg3b4makk/6oC6iFYmP7KRlPhlivd2USO8uvDF3A172W5SuUACi
J+rMLwPIuIjxXgNkD78j5Nje8MTstJFBXwvbN5Qmaq+so7BH0+s0mXJT1bv2K92d
nitlbniTBoHy67fJV4MTOA60UpKAW89fGyYZL7vSspd2vOMzPU0kCgsgLuj7h5b5
znk0cewdK76edj4rTYXZilHtZiU89eAvH8t6NenuetThWUh1LUwIYggRD6+MJ3ek
ist11nMsCajxtGCVX6DCxGG1Z2AFux7J5wtbq5WRnOFgxIKjGdje/ZxEAxE2fZaq
JCEAsQ6rF7wKF/jRnH685yEiPchdF4s=
-----END CERTIFICATE-----
Generated at Sun Dec 22 12:54:40 2024 by rpki-client on console-ams.rpki-client.org