Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5cdde9d-6251-36d6-844d-89fd478fe1ce.roa
File:                     a5cdde9d-6251-36d6-844d-89fd478fe1ce.roa (raw, json)
Hash identifier:          qLd+VJhmEqeazek/KFyc0HU86f2BPCGRRttOVlIeKBk=
Subject key identifier:   B7:48:1C:AC:3D:C4:65:A7:5D:ED:D6:DE:5A:CE:FC:53:BF:F7:CE:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C86D3BA4AA028B4DE99F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5cdde9d-6251-36d6-844d-89fd478fe1ce.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.34.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:6d:3b:a4:aa:02:8b:4d:e9:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=9e48b47d-282d-4669-a7dd-3f13781b83d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:2e:de:fd:02:fb:fb:1d:3a:a3:9d:0c:fe:
                    4a:41:92:0d:11:fa:39:1a:7a:39:23:5e:af:b1:63:
                    4e:21:fe:3f:82:28:5e:f8:2e:29:28:06:42:36:50:
                    43:a7:75:ad:7b:0e:9e:d3:17:8f:aa:d2:46:e0:2d:
                    8a:0f:8a:0e:8c:fc:ef:89:1a:4f:b6:be:0a:22:c4:
                    75:02:f2:20:30:b3:03:36:f9:1f:4e:c3:9b:8c:85:
                    ba:ac:68:9e:26:12:a1:ff:b4:56:1b:6c:4f:b4:74:
                    a6:63:39:35:5b:7e:7b:ad:d8:87:60:a7:64:63:08:
                    d1:5e:fd:ac:4c:57:d5:f2:e3:82:e6:30:cd:a1:67:
                    a3:01:fa:ca:cd:d9:6d:d6:d4:56:fc:02:e7:f5:d4:
                    c5:bd:fe:17:71:ee:5c:2f:c1:59:eb:63:74:49:f4:
                    40:20:e1:6d:76:53:d6:d7:92:a0:11:66:83:f2:80:
                    df:e9:36:db:b8:a5:76:2f:15:1e:49:4c:06:bd:87:
                    25:25:0e:6a:92:48:24:75:26:43:95:b8:8d:74:c6:
                    9b:d1:8a:37:86:bc:fc:53:2d:5f:2b:75:c8:aa:2a:
                    79:d0:d4:39:c5:d9:51:5d:f3:e7:12:1c:60:bd:15:
                    65:a8:33:0b:4d:01:34:48:09:0e:36:98:cd:49:c0:
                    79:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:48:1C:AC:3D:C4:65:A7:5D:ED:D6:DE:5A:CE:FC:53:BF:F7:CE:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5cdde9d-6251-36d6-844d-89fd478fe1ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.34.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:92:fe:73:9e:e4:d7:46:e0:a4:fd:55:c6:ca:bd:ea:b6:d3:
         76:df:19:ef:90:a5:a0:1a:fe:c1:7f:e1:39:be:88:4c:d3:cf:
         23:d1:ba:95:88:11:f4:d3:68:e0:80:8b:3b:55:33:8a:b4:c3:
         95:51:d8:50:01:70:70:c7:f1:2d:97:6a:f3:3b:37:c1:b2:68:
         c5:ba:44:fb:57:d1:fe:5d:6a:70:47:ce:f1:29:fc:2d:02:d8:
         f5:a9:2c:54:15:76:0d:a2:7b:bf:af:f8:62:8d:e7:e7:63:ca:
         3f:ea:fe:f2:0e:52:99:ec:3c:0e:ee:60:4b:77:e5:45:c5:2a:
         2c:4f:08:a7:d9:5a:93:37:e3:85:ac:b9:67:d5:d0:d8:c3:d8:
         ae:54:b0:23:43:0f:5a:ae:76:9b:10:ae:64:34:dc:c6:1b:eb:
         56:a1:e9:81:00:6f:dc:89:38:6b:8e:39:3e:a0:aa:11:c2:ff:
         f9:7f:e5:67:f4:e2:e1:55:83:c9:e2:5c:81:a3:ba:4d:a1:00:
         2c:1f:c8:c5:c6:c3:dd:c2:f3:7a:a6:7b:82:6e:f4:ce:7b:83:
         0d:77:bc:33:43:5d:fe:ce:c7:ca:32:d3:ff:c7:74:50:3a:cd:
         87:f0:2d:d8:d9:dd:dd:ed:72:1d:03:67:dd:cf:6e:94:e4:18:
         25:53:84:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0yG07pKoCi03pn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
OWU0OGI0N2QtMjgyZC00NjY5LWE3ZGQtM2YxMzc4MWI4M2Q3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q4u3v0C+/sdOqOdDP5KQZINEfo5Gno5I16v
sWNOIf4/gihe+C4pKAZCNlBDp3Wtew6e0xePqtJG4C2KD4oOjPzviRpPtr4KIsR1
AvIgMLMDNvkfTsObjIW6rGieJhKh/7RWG2xPtHSmYzk1W357rdiHYKdkYwjRXv2s
TFfV8uOC5jDNoWejAfrKzdlt1tRW/ALn9dTFvf4Xce5cL8FZ62N0SfRAIOFtdlPW
15KgEWaD8oDf6TbbuKV2LxUeSUwGvYclJQ5qkkgkdSZDlbiNdMab0Yo3hrz8Uy1f
K3XIqip50NQ5xdlRXfPnEhxgvRVlqDMLTQE0SAkONpjNScB5pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLdIHKw9xGWnXe3W3lrO/FO/987oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTVjZGRlOWQtNjI1MS0z
NmQ2LTg0NGQtODlmZDQ3OGZlMWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiK4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHGS/nOe5NdG4KT9VcbKveq203bfGe+QpaAa/sF/4Tm+iEzTzyPRupWI
EfTTaOCAiztVM4q0w5VR2FABcHDH8S2XavM7N8GyaMW6RPtX0f5danBHzvEp/C0C
2PWpLFQVdg2ie7+v+GKN5+djyj/q/vIOUpnsPA7uYEt35UXFKixPCKfZWpM344Ws
uWfV0NjD2K5UsCNDD1qudpsQrmQ03MYb61ah6YEAb9yJOGuOOT6gqhHC//l/5Wf0
4uFVg8niXIGjuk2hACwfyMXGw93C83qme4Ju9M57gw13vDNDXf7Ox8oy0//HdFA6
zYfwLdjZ3d3tch0DZ93PbpTkGCVThDk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:42:30 2024 by rpki-client on console-fra.rpki-client.org