Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/475e6e04-f2a8-3bc9-93c7-9ae2d937a7df.roa
File:                     475e6e04-f2a8-3bc9-93c7-9ae2d937a7df.roa (raw, json)
Hash identifier:          H04NNfdcgPt8gu3Ye8CYY6VVX/sEro8iYQ9Pi8dczmw=
Subject key identifier:   C1:0A:F3:81:F7:C0:31:16:BF:9C:BE:39:3F:14:80:3D:CD:C2:B2:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584840E60B27DB6A609F51F04D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/475e6e04-f2a8-3bc9-93c7-9ae2d937a7df.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        98.62.246.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e6:0b:27:db:6a:60:9f:51:f0:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=f3a5b5d7-e1b6-42b9-8038-5a981b24b1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bb:98:a0:2b:f9:60:5c:ab:dd:bc:34:5b:87:
                    19:7b:b3:c0:25:6d:e0:b7:78:f0:7e:fb:18:09:00:
                    0e:f2:ef:34:72:5f:ff:96:1b:0d:64:a6:42:e5:8b:
                    47:d0:5a:04:ed:87:70:ac:df:1e:f7:a5:b3:00:9e:
                    d1:af:91:75:2d:93:8f:bd:2f:a1:c3:bd:40:6c:c8:
                    ff:95:41:61:f0:3e:9a:84:da:49:f7:46:95:63:24:
                    48:fa:64:58:d6:5e:92:bf:3d:9a:d3:45:27:9c:08:
                    09:0d:90:96:a7:16:e0:61:05:45:3d:db:07:f0:a7:
                    ff:74:5d:6d:a5:c6:bf:6b:03:da:bb:2c:0b:20:17:
                    18:18:ad:c5:fe:10:30:22:df:e7:36:bf:09:a4:bd:
                    1a:dc:d0:75:5e:59:fc:05:07:ad:64:20:60:e0:a0:
                    7e:74:fa:f4:64:1d:d9:9d:77:9a:15:cd:61:0d:06:
                    7a:19:e9:bf:c3:e4:08:16:6f:3f:0a:4a:cb:4d:74:
                    36:e1:3a:a7:7d:de:04:1b:13:d4:19:e2:88:1f:75:
                    c5:47:1c:2a:ce:d7:72:64:58:6c:f7:ec:c3:62:a3:
                    a7:f1:0d:0f:2b:c9:da:c6:c2:67:b9:39:29:63:a1:
                    87:3c:f5:76:51:88:3c:d8:89:92:53:51:df:99:0f:
                    58:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0A:F3:81:F7:C0:31:16:BF:9C:BE:39:3F:14:80:3D:CD:C2:B2:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/475e6e04-f2a8-3bc9-93c7-9ae2d937a7df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.62.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:33:b4:1c:d2:fd:3d:1c:03:0b:94:f0:39:b8:73:f6:d0:42:
         82:8c:75:ea:02:d0:11:82:1c:8b:dd:74:a2:3b:7b:70:35:ba:
         ce:26:e6:1d:91:a4:57:44:43:bf:8a:eb:79:47:be:03:04:35:
         48:5c:91:72:cf:0b:e0:97:9b:cb:33:3d:b4:8d:80:d0:86:19:
         8c:b1:fe:1c:82:d1:f4:99:69:15:53:94:ee:24:d7:60:d3:35:
         f0:13:07:31:b6:57:2f:b2:3c:f3:c5:91:21:60:87:79:fd:c9:
         37:7c:fb:2d:a3:f9:c6:7d:0a:c0:fc:0b:b0:dc:bf:85:24:e1:
         4e:42:c6:0f:ed:f4:bb:cb:f9:24:13:f4:2d:83:72:27:64:d7:
         cc:8e:a3:d7:49:f3:07:0e:97:7a:b7:54:2d:fe:4c:0a:aa:f3:
         0b:89:2f:47:43:51:63:fb:59:79:c7:c0:ea:18:b3:7e:8e:7c:
         16:35:9c:a3:98:96:2e:bc:03:9e:b7:cc:b8:ba:66:38:42:c6:
         6c:f2:cc:85:3c:10:8d:25:e1:92:ef:25:98:8c:7a:50:8e:17:
         16:4a:d0:80:07:8a:cb:6c:28:92:a9:18:a8:6b:5d:f6:04:c8:
         07:10:ae:c3:d8:f8:95:23:95:f4:e0:8d:43:4f:3d:2d:70:31:
         6d:b8:6d:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5gsn22pgn1HwTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZjNhNWI1ZDctZTFiNi00MmI5LTgwMzgtNWE5ODFiMjRiMWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbuYoCv5YFyr3bw0W4cZe7PAJW3gt3jwfvsY
CQAO8u80cl//lhsNZKZC5YtH0FoE7YdwrN8e96WzAJ7Rr5F1LZOPvS+hw71AbMj/
lUFh8D6ahNpJ90aVYyRI+mRY1l6Svz2a00UnnAgJDZCWpxbgYQVFPdsH8Kf/dF1t
pca/awPauywLIBcYGK3F/hAwIt/nNr8JpL0a3NB1Xln8BQetZCBg4KB+dPr0ZB3Z
nXeaFc1hDQZ6Gem/w+QIFm8/CkrLTXQ24Tqnfd4EGxPUGeKIH3XFRxwqztdyZFhs
9+zDYqOn8Q0PK8naxsJnuTkpY6GHPPV2UYg82ImSU1HfmQ9YgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMEK84H3wDEWv5y+OT8UgD3NwrJWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDc1ZTZlMDQtZjJhOC0z
YmM5LTkzYzctOWFlMmQ5MzdhN2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYj72MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgztBzS/T0cAwuU8Dm4c/bQQoKMdeoC0BGCHIvddKI7e3A1us4m5h2R
pFdEQ7+K63lHvgMENUhckXLPC+CXm8szPbSNgNCGGYyx/hyC0fSZaRVTlO4k12DT
NfATBzG2Vy+yPPPFkSFgh3n9yTd8+y2j+cZ9CsD8C7Dcv4Uk4U5Cxg/t9LvL+SQT
9C2Dcidk18yOo9dJ8wcOl3q3VC3+TAqq8wuJL0dDUWP7WXnHwOoYs36OfBY1nKOY
li68A563zLi6ZjhCxmzyzIU8EI0l4ZLvJZiMelCOFxZK0IAHistsKJKpGKhrXfYE
yAcQrsPY+JUjlfTgjUNPPS1wMW24bSk=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:09:00 2024 by rpki-client on console-fra.rpki-client.org