Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e510ed8-aff6-321d-811c-3cee8f85ac1f.roa
File:                     5e510ed8-aff6-321d-811c-3cee8f85ac1f.roa (raw, json)
Hash identifier:          APWpT4/XUGup00LgjmyHwU9KyzmIk2SZ+Vvr2tjl+kk=
Subject key identifier:   20:97:F1:CD:60:41:3B:E2:D6:63:A1:8E:09:E8:47:BD:E2:53:72:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C7E320E223B80EB7008800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e510ed8-aff6-321d-811c-3cee8f85ac1f.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33668
IP address blocks:        98.243.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c7:e3:20:e2:23:b8:0e:b7:00:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=3655f470-6118-48a0-b2df-416bdb43413f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2b:21:82:dc:49:21:55:ee:fe:ef:1f:52:1c:
                    7e:bc:c1:1a:cf:04:ab:10:53:21:a9:3d:0c:57:17:
                    67:7f:8e:82:42:33:47:5c:4d:79:4c:8a:2e:75:bf:
                    87:88:23:00:da:e3:4a:1a:4a:7b:ca:0b:9d:3a:2c:
                    21:ac:b7:73:da:f8:40:61:f2:a2:bd:06:63:c3:ff:
                    39:30:6c:67:d0:70:72:03:da:e5:d9:3c:dc:b5:69:
                    ce:d3:47:17:11:0b:a9:d2:60:c5:ba:3a:40:e6:6e:
                    e2:92:e8:50:1c:7d:c4:f3:54:6c:65:4e:a2:f8:1e:
                    ab:3a:2d:b4:e6:cd:3f:30:1c:72:11:fa:17:f0:68:
                    33:b0:9f:70:b9:aa:4a:47:5c:82:09:bf:5f:23:ef:
                    ff:a9:cd:37:55:ef:93:d7:3b:32:82:a4:59:82:80:
                    7e:83:8d:a8:4a:46:47:7f:c4:e4:57:d2:1c:25:d1:
                    12:e6:e5:0c:8a:30:9a:1c:49:93:22:2c:09:90:e1:
                    fd:a4:66:f3:54:e8:29:aa:2c:13:bf:c6:c2:40:a4:
                    b6:b9:4b:87:7c:b4:84:d3:5e:69:dc:87:c9:a7:39:
                    bb:92:6d:f6:cf:29:21:ad:c7:72:53:e1:4e:1a:a9:
                    55:77:a2:3b:d4:5e:25:ea:70:91:5c:a9:ed:32:b5:
                    ce:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:97:F1:CD:60:41:3B:E2:D6:63:A1:8E:09:E8:47:BD:E2:53:72:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e510ed8-aff6-321d-811c-3cee8f85ac1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.243.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:56:e0:91:9d:47:09:ee:c4:29:f1:98:a3:fb:6b:0c:ef:77:
         0c:d0:f6:25:9c:d4:37:4a:21:78:83:09:7d:07:40:30:ea:dc:
         5a:67:76:a7:68:f8:04:0b:fe:81:26:98:11:68:50:ee:89:a6:
         2e:c5:ac:d2:56:27:fd:d8:b1:83:48:5d:a1:df:95:7c:69:77:
         c2:7c:8c:1d:d4:55:86:89:3a:df:2e:77:c6:ae:34:55:fa:29:
         aa:61:b8:16:8e:ed:29:ed:11:cd:11:0d:ad:ac:82:99:cd:e6:
         54:06:90:29:5b:75:03:9c:5c:e6:9b:1a:7e:88:02:46:6f:63:
         91:c9:3e:f6:5c:c4:58:21:b9:f2:53:b6:06:15:6a:99:c3:a2:
         e8:3f:f0:db:6e:75:c2:1f:d6:48:7d:b7:80:c9:e6:5a:03:03:
         65:13:7f:0b:b1:79:5e:86:fe:41:35:f6:f0:43:25:db:3f:15:
         fd:8c:c2:02:51:d1:9a:3a:b7:64:08:a2:58:e4:38:42:0d:d5:
         eb:79:27:6a:44:2d:14:e5:44:92:32:1d:9e:f2:0f:bf:8f:bd:
         9d:70:f7:7b:f7:64:6d:49:a2:c9:26:31:f7:ab:e5:d5:31:7d:
         6d:8d:db:7e:d8:8a:de:b4:44:35:68:70:e4:fd:67:ef:6c:71:
         89:4e:66:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0x+Mg4iO4DrcAiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
MzY1NWY0NzAtNjExOC00OGEwLWIyZGYtNDE2YmRiNDM0MTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCshgtxJIVXu/u8fUhx+vMEazwSrEFMhqT0M
Vxdnf46CQjNHXE15TIoudb+HiCMA2uNKGkp7ygudOiwhrLdz2vhAYfKivQZjw/85
MGxn0HByA9rl2TzctWnO00cXEQup0mDFujpA5m7ikuhQHH3E81RsZU6i+B6rOi20
5s0/MBxyEfoX8GgzsJ9wuapKR1yCCb9fI+//qc03Ve+T1zsygqRZgoB+g42oSkZH
f8TkV9IcJdES5uUMijCaHEmTIiwJkOH9pGbzVOgpqiwTv8bCQKS2uUuHfLSE015p
3IfJpzm7km32zykhrcdyU+FOGqlVd6I71F4l6nCRXKntMrXOmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCCX8c1gQTvi1mOhjgnoR73iU3J0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWU1MTBlZDgtYWZmNi0z
MjFkLTgxMWMtM2NlZThmODVhYzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvNUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxW4JGdRwnuxCnxmKP7awzvdwzQ9iWc1DdKIXiDCX0HQDDq3Fpndqdo
+AQL/oEmmBFoUO6Jpi7FrNJWJ/3YsYNIXaHflXxpd8J8jB3UVYaJOt8ud8auNFX6
KaphuBaO7SntEc0RDa2sgpnN5lQGkClbdQOcXOabGn6IAkZvY5HJPvZcxFghufJT
tgYVapnDoug/8NtudcIf1kh9t4DJ5loDA2UTfwuxeV6G/kE19vBDJds/Ff2MwgJR
0Zo6t2QIoljkOEIN1et5J2pELRTlRJIyHZ7yD7+PvZ1w93v3ZG1JoskmMfer5dUx
fW2N237Yit60RDVocOT9Z+9scYlOZrc=
-----END CERTIFICATE-----
Generated at Tue Nov 26 05:04:25 2024 by rpki-client on console-ams.rpki-client.org