Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75d42c93-5016-319e-9a35-f89b95c23958.roa
File:                     75d42c93-5016-319e-9a35-f89b95c23958.roa (raw, json)
Hash identifier:          EDoWEAKC//ICmWW4fIBV+Zq97ag8R4lCS32wElKt6qM=
Subject key identifier:   C1:27:71:E1:D7:5C:54:78:5C:28:05:31:5C:8B:A3:08:B8:9A:51:A4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF858C5930BF27B13368740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75d42c93-5016-319e-9a35-f89b95c23958.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        98.240.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:58:c5:93:0b:f2:7b:13:36:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=bfdc1fd5-9d6a-4cb4-bdd3-99d0e71c5a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:b3:cd:df:a9:8f:04:4b:9e:0c:4c:09:e7:
                    8c:91:a7:ff:f9:ce:55:2f:d3:da:e4:bb:51:a2:c4:
                    91:c4:f1:34:b0:a2:fe:5d:cf:7c:12:71:a8:87:67:
                    ac:8e:19:59:49:51:41:72:e9:fe:3d:fe:40:3a:28:
                    7f:61:d2:89:d4:04:70:1b:12:f5:66:5e:a0:d7:6f:
                    ed:59:19:72:ae:f4:3e:1a:b0:cb:9c:dd:07:2d:22:
                    e9:78:64:79:1d:02:53:ef:6e:1c:40:95:32:b6:f8:
                    57:5c:99:06:38:19:90:e7:35:3d:12:6a:c6:26:58:
                    a6:20:ca:e3:38:08:95:98:c1:a8:a7:09:2b:bd:3e:
                    cc:c0:89:01:a8:5c:69:c2:d5:98:77:b0:a7:a6:33:
                    97:a8:8b:8a:23:38:a4:0d:b0:fa:4e:45:11:f1:84:
                    97:89:0d:6e:22:e0:ec:35:56:e3:c2:60:f7:d4:b5:
                    7a:31:6f:e1:6c:47:45:80:75:e0:a8:61:c9:e3:f4:
                    9b:30:01:56:1c:4b:ce:e6:17:7d:c9:52:7c:35:2d:
                    ed:44:13:0d:48:36:e2:86:e4:8b:65:f1:f7:83:aa:
                    53:e1:c8:a6:2b:87:62:7c:7b:1b:e8:cb:3b:01:61:
                    3a:10:7c:ba:2a:f8:e2:e4:4a:38:e7:36:c7:08:ed:
                    a1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:27:71:E1:D7:5C:54:78:5C:28:05:31:5C:8B:A3:08:B8:9A:51:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75d42c93-5016-319e-9a35-f89b95c23958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.240.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:aa:a1:dd:57:fc:66:19:31:26:a2:1c:f6:bf:20:b1:a8:d1:
         4b:4a:bb:24:2c:f7:6d:3a:82:aa:3b:9d:0d:8b:df:7c:d0:c2:
         ef:0b:b3:50:77:0a:c4:33:df:da:51:f5:b4:6d:49:da:f5:d7:
         e2:b6:15:98:29:20:c4:ac:a9:3d:f5:51:ef:5a:e0:82:64:0b:
         9f:cc:53:2b:4c:8f:53:7a:c7:20:95:d1:0f:7b:8a:fd:7f:75:
         b0:66:44:9b:b3:91:6f:1a:ee:bb:e5:81:60:12:90:66:ac:46:
         86:be:f4:6c:c8:a8:82:5a:66:cb:62:9b:d2:45:57:03:e5:68:
         8a:b4:f6:e9:c5:91:36:a5:ba:0b:e2:52:e0:8b:c8:dd:0c:41:
         ec:02:07:81:14:a9:32:10:0f:d0:e9:b6:9d:d9:d1:da:c9:78:
         cc:0a:69:4e:eb:96:73:79:f5:0b:72:14:df:f7:3a:9b:c3:ed:
         76:ab:8d:8a:10:0f:b6:38:fc:66:1d:3c:e5:e7:72:b1:97:72:
         92:f6:fc:8d:33:c8:f3:62:ec:94:b0:67:54:54:d1:09:22:5e:
         81:72:5f:fe:16:70:64:16:54:d5:be:cf:b6:23:95:8f:53:7b:
         df:51:95:ff:4d:4c:7f:cb:92:71:e2:3b:6e:d3:7d:13:ea:f5:
         69:92:0e:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe++FjFkwvyexM2h0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
YmZkYzFmZDUtOWQ2YS00Y2I0LWJkZDMtOTlkMGU3MWM1YTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaOzzd+pjwRLngxMCeeMkaf/+c5VL9Pa5LtR
osSRxPE0sKL+Xc98EnGoh2esjhlZSVFBcun+Pf5AOih/YdKJ1ARwGxL1Zl6g12/t
WRlyrvQ+GrDLnN0HLSLpeGR5HQJT724cQJUytvhXXJkGOBmQ5zU9EmrGJlimIMrj
OAiVmMGopwkrvT7MwIkBqFxpwtWYd7CnpjOXqIuKIzikDbD6TkUR8YSXiQ1uIuDs
NVbjwmD31LV6MW/hbEdFgHXgqGHJ4/SbMAFWHEvO5hd9yVJ8NS3tRBMNSDbihuSL
ZfH3g6pT4cimK4difHsb6Ms7AWE6EHy6Kvji5Eo45zbHCO2heQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMEnceHXXFR4XCgFMVyLowi4mlGkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzVkNDJjOTMtNTAxNi0z
MTllLTlhMzUtZjg5Yjk1YzIzOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvByMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKaqod1X/GYZMSaiHPa/ILGo0UtKuyQs9206gqo7nQ2L33zQwu8Ls1B3
CsQz39pR9bRtSdr11+K2FZgpIMSsqT31Ue9a4IJkC5/MUytMj1N6xyCV0Q97iv1/
dbBmRJuzkW8a7rvlgWASkGasRoa+9GzIqIJaZstim9JFVwPlaIq09unFkTalugvi
UuCLyN0MQewCB4EUqTIQD9Dptp3Z0drJeMwKaU7rlnN59QtyFN/3OpvD7XarjYoQ
D7Y4/GYdPOXncrGXcpL2/I0zyPNi7JSwZ1RU0QkiXoFyX/4WcGQWVNW+z7YjlY9T
e99Rlf9NTH/LknHiO27TfRPq9WmSDsE=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:16:58 2024 by rpki-client on console-fra.rpki-client.org