Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45f477fd-c268-36e1-ad09-0dc81d630529.roa
File:                     45f477fd-c268-36e1-ad09-0dc81d630529.roa (raw, json)
Hash identifier:          8cTz5v5XI/jrOPc3X35E1AVLM/9mT2/pgrlXaY8j1rw=
Subject key identifier:   78:C5:14:7D:EE:07:64:91:7D:12:25:42:5E:64:AA:0F:A7:F0:5C:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E5ACFF4B5E120CAA2C9288
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45f477fd-c268-36e1-ad09-0dc81d630529.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        98.62.138.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:ac:ff:4b:5e:12:0c:aa:2c:92:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=515041b7-d9ca-4063-b0ec-d018424c9ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:29:ce:c2:52:0d:6a:1f:9e:70:23:36:c9:
                    71:7a:77:c3:6a:2e:b7:f3:e7:ae:d3:5d:55:49:28:
                    2c:8c:5d:91:8d:e7:40:10:2f:f6:bd:48:f6:cd:e9:
                    3f:93:eb:2f:45:f2:0b:87:ee:1e:09:06:3b:f3:e3:
                    9b:55:32:33:f4:59:9b:4c:e2:3b:9a:82:0b:bf:e8:
                    f5:6f:09:4a:14:3a:d7:12:ef:c7:00:73:0c:0b:92:
                    d6:09:b6:b7:0c:13:82:4a:3e:e2:6e:35:ff:03:cf:
                    5c:a3:3e:2c:9b:c0:96:9c:8d:53:94:14:94:49:6d:
                    3b:b2:a0:0b:44:c5:b6:ae:8d:80:d1:bf:9f:00:7d:
                    73:09:46:74:bd:5c:6a:6a:43:65:55:38:87:cd:a7:
                    fe:e9:49:27:4c:c2:22:7e:71:2b:68:f8:7a:03:e8:
                    7d:a3:be:26:57:b3:7c:0b:bf:31:89:40:66:aa:b7:
                    96:32:8f:2c:b3:d3:43:48:b0:af:a7:b2:f7:d2:2b:
                    84:28:bc:c9:5f:e2:12:21:35:5a:13:e4:06:1b:2f:
                    7b:b4:bb:68:95:64:40:ef:45:bc:54:8c:7b:5a:42:
                    b5:8e:08:59:2b:05:83:52:2b:c8:b2:ac:c5:ce:3f:
                    01:6c:49:59:97:e1:03:32:4d:18:cc:7e:a8:31:c4:
                    78:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C5:14:7D:EE:07:64:91:7D:12:25:42:5E:64:AA:0F:A7:F0:5C:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45f477fd-c268-36e1-ad09-0dc81d630529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.62.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c2:24:0f:5c:52:ce:61:73:f4:04:90:d1:8b:9b:25:5c:58:
         2b:5a:31:4e:5a:ef:17:3b:f4:8b:ad:61:1e:00:3c:eb:8a:dc:
         09:8a:0a:1c:89:c4:51:ed:67:26:b0:43:da:ee:8a:31:9e:fe:
         cb:2e:36:0f:49:8c:fe:84:e0:f3:23:85:c8:32:90:6b:bf:e9:
         3f:73:bb:7f:6f:15:d9:f2:14:f4:d5:78:2b:93:3c:f6:7a:f2:
         f1:45:fd:02:62:f1:d0:1c:ba:23:47:10:25:56:8a:c1:c7:df:
         0b:23:2a:d8:89:76:d3:b3:93:ac:f8:26:9d:31:de:69:8f:c1:
         41:3d:21:a2:b6:a6:cc:2c:b6:29:a0:f2:51:84:47:25:37:28:
         59:8a:af:22:a4:e1:07:f6:86:c3:ff:ec:8c:c4:1f:64:8d:2c:
         39:cd:53:6a:1d:6a:bf:55:3e:65:6d:36:a4:f6:b9:10:29:96:
         03:89:de:c7:17:95:4a:c5:35:92:6b:43:d2:ec:85:bf:66:78:
         19:b6:d3:87:06:ec:80:17:04:e1:70:9c:60:4e:ec:64:09:00:
         89:0a:5a:df:1a:35:97:bd:3a:9a:44:0f:dc:62:f1:eb:87:3c:
         04:8b:44:95:da:ca:31:13:ee:7d:f2:87:6a:be:a3:8f:6f:58:
         ce:69:64:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5az/S14SDKoskogwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
NTE1MDQxYjctZDljYS00MDYzLWIwZWMtZDAxODQyNGM5YWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQgpzsJSDWofnnAjNslxenfDai638+eu011V
SSgsjF2RjedAEC/2vUj2zek/k+svRfILh+4eCQY78+ObVTIz9FmbTOI7moILv+j1
bwlKFDrXEu/HAHMMC5LWCba3DBOCSj7ibjX/A89coz4sm8CWnI1TlBSUSW07sqAL
RMW2ro2A0b+fAH1zCUZ0vVxqakNlVTiHzaf+6UknTMIifnEraPh6A+h9o74mV7N8
C78xiUBmqreWMo8ss9NDSLCvp7L30iuEKLzJX+ISITVaE+QGGy97tLtolWRA70W8
VIx7WkK1jghZKwWDUivIsqzFzj8BbElZl+EDMk0YzH6oMcR4pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHjFFH3uB2SRfRIlQl5kqg+n8FzTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDVmNDc3ZmQtYzI2OC0z
NmUxLWFkMDktMGRjODFkNjMwNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYj6KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/CJA9cUs5hc/QEkNGLmyVcWCtaMU5a7xc79IutYR4APOuK3AmKChyJ
xFHtZyawQ9ruijGe/ssuNg9JjP6E4PMjhcgykGu/6T9zu39vFdnyFPTVeCuTPPZ6
8vFF/QJi8dAcuiNHECVWisHH3wsjKtiJdtOzk6z4Jp0x3mmPwUE9IaK2pswstimg
8lGERyU3KFmKryKk4Qf2hsP/7IzEH2SNLDnNU2odar9VPmVtNqT2uRAplgOJ3scX
lUrFNZJrQ9Lshb9meBm204cG7IAXBOFwnGBO7GQJAIkKWt8aNZe9OppED9xi8euH
PASLRJXayjET7n3yh2q+o49vWM5pZOg=
-----END CERTIFICATE-----
Generated at Sun Dec 22 12:55:03 2024 by rpki-client on console-ams.rpki-client.org