Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/980cfcf2-ca79-3aef-b5d8-3e47446b89da.roa
File:                     980cfcf2-ca79-3aef-b5d8-3e47446b89da.roa (raw, json)
Hash identifier:          HsZK2UU9h0bMvCYrX7zOWVfyuVpFxGnkIOEj/YbqGEA=
Subject key identifier:   57:45:33:51:59:E0:31:44:E5:91:D1:6D:FA:A9:C7:19:49:21:E6:ED
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845AC88ED57C5511A8013B01D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/980cfcf2-ca79-3aef-b5d8-3e47446b89da.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     33660
IP address blocks:        98.32.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:ed:57:c5:51:1a:80:13:b0:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=c771d1ae-d6ae-4cef-b8dc-bed39c4b4ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1a:57:f6:70:a1:fe:b0:40:dc:6e:55:e0:5c:
                    18:68:c2:de:6b:b7:24:d3:39:5a:ed:ce:ef:ac:99:
                    0d:09:f6:d3:d2:6f:c1:50:04:26:85:96:92:ee:ae:
                    d6:f1:5d:3c:02:ad:7a:87:eb:9f:8e:f7:21:a9:bc:
                    f8:0d:2c:ce:c2:ec:ca:5a:d9:3a:ae:35:d3:85:28:
                    22:2e:72:92:f3:8c:27:c6:d8:57:1f:01:a3:eb:23:
                    46:ed:d9:33:81:12:30:97:d9:9a:a2:dd:6a:58:dd:
                    e0:19:b9:52:bf:51:4a:5a:4e:2e:fc:ed:3b:17:ca:
                    99:72:26:ca:af:a1:57:26:17:70:5e:db:97:ab:a3:
                    56:75:af:f6:70:15:b6:88:4b:57:42:a5:dc:76:34:
                    f6:48:93:8b:28:90:58:63:03:ea:f7:58:f1:68:38:
                    e8:d5:f9:26:70:4b:b3:83:77:49:eb:e7:35:0a:cc:
                    b7:60:b8:c4:86:69:4a:1c:90:dd:28:41:32:8b:8a:
                    e9:0a:35:6b:16:a2:e4:38:4d:79:c9:b4:fe:1b:70:
                    e0:51:f0:5d:ef:10:4b:1c:70:33:48:9e:8e:b3:1f:
                    11:2e:21:51:dd:e8:49:81:c4:42:42:b9:c5:f5:36:
                    e4:b1:12:d9:25:f1:17:f7:3c:54:cb:52:1c:f8:51:
                    e2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:45:33:51:59:E0:31:44:E5:91:D1:6D:FA:A9:C7:19:49:21:E6:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/980cfcf2-ca79-3aef-b5d8-3e47446b89da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.32.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:9c:df:a9:c4:1b:9c:3b:8b:8a:93:2b:d1:7e:58:b4:0d:e7:
         18:51:62:a8:d6:ce:50:9a:ea:b0:d3:b7:9f:92:d0:f1:4d:e5:
         6f:35:1c:a2:74:6b:94:b5:90:eb:2b:59:e6:73:ca:e7:43:d8:
         70:ed:41:8d:33:5b:22:38:74:fa:9f:a6:8e:61:2b:f6:64:e2:
         db:fa:b6:80:44:16:d4:08:fa:96:e1:54:2a:d3:c2:54:eb:ab:
         e7:8d:f2:21:9a:96:50:44:7c:1a:85:62:7a:f8:ec:b2:3a:03:
         b9:b9:d8:92:f0:c6:8f:50:c5:cf:6c:9d:b0:48:c0:67:e4:e4:
         b0:d3:46:27:31:cb:29:6e:dd:10:13:32:c2:5f:9e:3e:aa:a7:
         3d:dc:24:75:91:b0:3c:42:18:2c:20:8b:2e:18:3a:e8:03:6e:
         40:da:12:9b:70:71:4f:c0:ba:11:d7:73:bd:3b:4c:df:6d:90:
         a4:95:fd:ff:91:a4:1a:06:03:3e:98:31:1a:0c:94:3b:c3:1c:
         1a:23:9f:d6:e6:07:7a:44:44:f0:47:66:91:24:10:fb:83:e9:
         60:43:ce:63:4f:57:9a:9a:d0:36:54:49:e5:aa:43:e0:a9:f3:
         6d:e5:34:e1:a5:a9:a2:fa:a3:5c:c9:28:bb:f4:c4:2f:9b:1b:
         3c:0a:41:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWsiO1XxVEagBOwHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDQyNjEzMDAzNVoXDTI0MDcyNTEzMDAzNVowLzEtMCsGA1UEAxMk
Yzc3MWQxYWUtZDZhZS00Y2VmLWI4ZGMtYmVkMzljNGI0YWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhpX9nCh/rBA3G5V4FwYaMLea7ck0zla7c7v
rJkNCfbT0m/BUAQmhZaS7q7W8V08Aq16h+ufjvchqbz4DSzOwuzKWtk6rjXThSgi
LnKS84wnxthXHwGj6yNG7dkzgRIwl9maot1qWN3gGblSv1FKWk4u/O07F8qZcibK
r6FXJhdwXtuXq6NWda/2cBW2iEtXQqXcdjT2SJOLKJBYYwPq91jxaDjo1fkmcEuz
g3dJ6+c1Csy3YLjEhmlKHJDdKEEyi4rpCjVrFqLkOE15ybT+G3DgUfBd7xBLHHAz
SJ6Osx8RLiFR3ehJgcRCQrnF9TbksRLZJfEX9zxUy1Ic+FHiJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFdFM1FZ4DFE5ZHRbfqpxxlJIebtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTgwY2ZjZjItY2E3OS0z
YWVmLWI1ZDgtM2U0NzQ0NmI4OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiBaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABCc36nEG5w7i4qTK9F+WLQN5xhRYqjWzlCa6rDTt5+S0PFN5W81HKJ0
a5S1kOsrWeZzyudD2HDtQY0zWyI4dPqfpo5hK/Zk4tv6toBEFtQI+pbhVCrTwlTr
q+eN8iGallBEfBqFYnr47LI6A7m52JLwxo9Qxc9snbBIwGfk5LDTRicxyylu3RAT
MsJfnj6qpz3cJHWRsDxCGCwgiy4YOugDbkDaEptwcU/AuhHXc707TN9tkKSV/f+R
pBoGAz6YMRoMlDvDHBojn9bmB3pERPBHZpEkEPuD6WBDzmNPV5qa0DZUSeWqQ+Cp
823lNOGlqaL6o1zJKLv0xC+bGzwKQfw=
-----END CERTIFICATE-----
Generated at Sun May 5 02:19:47 2024 by rpki-client on console-ams.rpki-client.org