Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44b98cdc-a2d5-345b-93cd-765a3588eba3.roa
File:                     44b98cdc-a2d5-345b-93cd-765a3588eba3.roa (raw, json)
Hash identifier:          /26zqddmr+4omgS3MrQZXQ0ch/sdcQJ2kIWnQPBviis=
Subject key identifier:   CE:56:81:FD:36:2F:A2:88:5A:C2:02:25:26:40:AF:DC:F8:4C:3F:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7DE2C5CBD1E9436245680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44b98cdc-a2d5-345b-93cd-765a3588eba3.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        98.224.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:de:2c:5c:bd:1e:94:36:24:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=ad45b7ae-047f-44e5-bd3d-da429f471aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c3:44:a1:86:91:a3:eb:92:a7:22:eb:f3:4e:
                    d6:9d:a8:68:24:01:f3:a6:08:d5:ca:f4:df:41:37:
                    5b:e5:b8:9a:a4:45:20:b2:8c:c6:e3:5b:7c:93:4a:
                    26:cd:a6:cd:6e:55:e9:58:e3:3d:ae:5c:b0:25:2a:
                    66:cf:d9:b7:f3:22:18:40:34:1c:be:c4:b2:95:47:
                    bc:85:35:d3:fb:31:9d:b9:67:13:17:c0:59:4c:54:
                    46:1d:42:bf:af:36:53:d3:b8:53:20:5a:29:f5:30:
                    60:55:c0:1d:92:3a:e2:44:bc:2c:f6:df:01:b9:bf:
                    04:10:9a:6c:ec:12:c6:61:51:c0:c7:f3:42:bb:8f:
                    15:ee:20:35:7b:08:8f:4f:f7:ff:b1:47:63:46:37:
                    21:9c:b1:84:12:1f:1b:d4:1a:54:97:17:28:86:76:
                    03:20:c8:ea:bc:eb:be:e0:e3:71:00:06:61:cd:3a:
                    e8:ab:fe:3e:a7:60:cf:b8:ef:ab:a2:30:35:d5:28:
                    16:25:59:d4:62:5e:a6:a6:5f:82:f8:08:31:8d:97:
                    7d:ac:b0:76:f3:1e:41:6a:9c:20:8f:bc:e7:be:13:
                    00:d3:ee:b1:a5:3c:43:10:0a:22:ca:f8:1a:f2:cf:
                    f1:7e:47:37:ca:fc:8e:71:51:82:f8:05:d9:0c:c9:
                    3d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:56:81:FD:36:2F:A2:88:5A:C2:02:25:26:40:AF:DC:F8:4C:3F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44b98cdc-a2d5-345b-93cd-765a3588eba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.224.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:fd:ff:78:84:08:4e:68:5f:a0:5f:29:b9:fb:04:da:56:56:
         32:4e:13:b6:f2:90:87:ea:f9:ac:ca:c0:fb:98:88:f2:e3:07:
         f0:ae:9f:6f:e6:6e:f8:49:08:2a:d6:68:f2:d8:47:bc:1a:6d:
         05:65:1e:e6:dd:ca:0f:8f:52:57:05:26:0b:9a:52:85:05:dc:
         08:6f:5b:c2:f3:42:93:ac:44:fa:72:63:88:22:73:c0:51:d5:
         4d:20:f3:35:a8:53:ab:e5:67:32:be:06:69:a1:d2:81:aa:ef:
         e0:8e:55:a4:ca:cd:f7:9f:40:a7:af:8b:51:c7:68:af:c9:f7:
         20:6a:99:33:fe:a1:1d:28:d5:84:1b:ea:ff:e6:35:5e:2b:63:
         7b:d2:18:62:50:7e:4b:e7:5f:30:74:d1:96:96:1a:70:25:68:
         7c:39:70:52:68:b4:67:7d:9e:93:1e:49:d9:87:94:f2:9a:23:
         db:08:db:9e:4e:e1:b2:8e:20:26:92:1f:36:d8:72:d7:42:82:
         bc:d8:72:5b:19:cd:c0:96:a4:52:46:d6:e3:26:a4:72:33:18:
         a6:f0:d3:dd:52:57:88:42:87:dd:ab:90:41:67:83:91:51:2f:
         b0:94:67:4b:ea:96:49:73:2a:f9:08:32:67:d2:8e:fd:dc:18:
         32:e5:d2:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0x94sXL0elDYkVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
YWQ0NWI3YWUtMDQ3Zi00NGU1LWJkM2QtZGE0MjlmNDcxYWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMNEoYaRo+uSpyLr807WnahoJAHzpgjVyvTf
QTdb5biapEUgsozG41t8k0omzabNblXpWOM9rlywJSpmz9m38yIYQDQcvsSylUe8
hTXT+zGduWcTF8BZTFRGHUK/rzZT07hTIFop9TBgVcAdkjriRLws9t8Bub8EEJps
7BLGYVHAx/NCu48V7iA1ewiPT/f/sUdjRjchnLGEEh8b1BpUlxcohnYDIMjqvOu+
4ONxAAZhzTroq/4+p2DPuO+rojA11SgWJVnUYl6mpl+C+AgxjZd9rLB28x5Bapwg
j7znvhMA0+6xpTxDEAoiyvga8s/xfkc3yvyOcVGC+AXZDMk9SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM5Wgf02L6KIWsICJSZAr9z4TD9dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDRiOThjZGMtYTJkNS0z
NDViLTkzY2QtNzY1YTM1ODhlYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYuD+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIf9/3iECE5oX6BfKbn7BNpWVjJOE7bykIfq+azKwPuYiPLjB/Cun2/m
bvhJCCrWaPLYR7wabQVlHubdyg+PUlcFJguaUoUF3AhvW8LzQpOsRPpyY4gic8BR
1U0g8zWoU6vlZzK+Bmmh0oGq7+COVaTKzfefQKevi1HHaK/J9yBqmTP+oR0o1YQb
6v/mNV4rY3vSGGJQfkvnXzB00ZaWGnAlaHw5cFJotGd9npMeSdmHlPKaI9sI255O
4bKOICaSHzbYctdCgrzYclsZzcCWpFJG1uMmpHIzGKbw091SV4hCh92rkEFng5FR
L7CUZ0vqlklzKvkIMmfSjv3cGDLl0kA=
-----END CERTIFICATE-----
Generated at Tue Nov 26 05:02:10 2024 by rpki-client on console-ams.rpki-client.org