Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b65512e8-19a0-3e59-ac89-3c3202502a31.roa
File:                     b65512e8-19a0-3e59-ac89-3c3202502a31.roa (raw, json)
Hash identifier:          pZUvF310R10SBJvRbt1drcHtZ23WNtRA4Xzoc0kol/A=
Subject key identifier:   FB:D2:68:DC:61:8B:1E:07:F7:65:AF:A1:59:CE:21:40:9C:AA:00:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9CA7FC03AA061961F7C080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b65512e8-19a0-3e59-ac89-3c3202502a31.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33491
IP address blocks:        98.206.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9c:a7:fc:03:aa:06:19:61:f7:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=9990d3fb-e251-411a-8825-ed8711cdfb9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1a:4e:3c:a0:f6:6d:bf:eb:fb:22:07:ee:ea:
                    cd:77:1f:06:52:a6:0e:18:38:95:0e:b3:8d:fb:da:
                    91:40:b6:b0:23:d8:80:68:32:7f:91:55:38:1e:24:
                    8b:09:d3:ce:64:98:53:7d:50:c5:86:c5:c6:b5:25:
                    b6:9b:94:ac:c5:c7:84:62:2d:13:82:66:52:fa:43:
                    ce:14:b3:64:85:11:52:01:5c:3e:51:33:04:45:b3:
                    73:1d:60:f4:f7:d7:f1:d7:f2:18:65:2b:0e:ae:9e:
                    2e:96:e8:be:a7:30:77:ea:6e:1e:98:9f:41:42:b8:
                    5f:f4:a5:54:ee:3f:63:ac:3e:b8:17:8a:c7:e6:7c:
                    b2:fa:f8:52:2d:7f:a3:f7:a8:35:24:89:84:0c:a6:
                    37:bb:26:aa:af:12:3b:d1:29:49:24:cc:44:ab:e4:
                    39:76:a7:eb:97:eb:95:48:6c:1a:76:13:60:03:73:
                    d7:c3:27:df:02:73:de:15:b3:62:c1:0f:d8:13:ac:
                    fc:b5:f5:27:64:6d:a1:6f:ea:f1:de:35:66:e2:c4:
                    06:2f:9b:87:be:67:db:42:f9:7b:b0:73:18:c7:7f:
                    53:bb:3f:81:d3:4c:34:4c:ef:32:e5:83:6e:5f:91:
                    01:b6:1f:87:7c:83:8f:8e:fb:ee:a9:58:1b:0b:87:
                    f6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D2:68:DC:61:8B:1E:07:F7:65:AF:A1:59:CE:21:40:9C:AA:00:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b65512e8-19a0-3e59-ac89-3c3202502a31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.206.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:91:59:2b:aa:a3:94:a7:ac:ff:3e:55:e3:7f:e2:12:d6:64:
         04:ef:9f:b0:c7:a8:b0:dd:39:3a:62:51:dd:18:99:5c:76:0e:
         02:89:c9:93:cd:61:ff:d9:9e:54:61:47:97:43:9b:3e:98:c6:
         d7:4a:4d:13:da:c7:47:e9:94:eb:27:4c:5c:6a:e3:c7:10:f9:
         4f:d5:5e:00:fa:8d:30:33:bb:2e:49:ce:89:6d:25:c8:a8:23:
         22:83:b6:4b:83:40:7c:4e:3b:5a:b8:ef:d5:a3:8d:83:c9:b7:
         14:c8:1b:75:c5:18:22:48:bc:16:8c:b7:fc:e5:b2:34:fd:06:
         2d:40:ec:d2:21:8f:5a:97:a1:a0:53:71:5a:e0:ac:d2:82:0d:
         90:e9:67:e1:ec:d6:47:a6:74:7c:dd:f3:89:7d:ba:b5:b2:ed:
         c7:94:88:57:19:fb:0c:11:0e:83:a5:ff:9a:6e:af:6a:3c:31:
         24:e4:bb:73:98:15:14:8a:ac:5f:5c:92:39:95:f1:60:c7:77:
         07:69:56:7d:c4:9b:e0:73:88:71:90:8a:25:f3:d2:97:fe:b5:
         b4:32:d2:a4:b4:8e:35:45:67:dc:b1:f8:bd:09:ad:09:68:1e:
         42:a5:20:18:2a:e4:b5:e7:69:1a:e0:11:be:04:d0:64:e5:37:
         e9:60:05:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnKf8A6oGGWH3wIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
OTk5MGQzZmItZTI1MS00MTFhLTg4MjUtZWQ4NzExY2RmYjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxpOPKD2bb/r+yIH7urNdx8GUqYOGDiVDrON
+9qRQLawI9iAaDJ/kVU4HiSLCdPOZJhTfVDFhsXGtSW2m5SsxceEYi0TgmZS+kPO
FLNkhRFSAVw+UTMERbNzHWD099fx1/IYZSsOrp4ului+pzB36m4emJ9BQrhf9KVU
7j9jrD64F4rH5nyy+vhSLX+j96g1JImEDKY3uyaqrxI70SlJJMxEq+Q5dqfrl+uV
SGwadhNgA3PXwyffAnPeFbNiwQ/YE6z8tfUnZG2hb+rx3jVm4sQGL5uHvmfbQvl7
sHMYx39Tuz+B00w0TO8y5YNuX5EBth+HfIOPjvvuqVgbC4f2/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPvSaNxhix4H92WvoVnOIUCcqgC4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjY1NTEyZTgtMTlhMC0z
ZTU5LWFjODktM2MzMjAyNTAyYTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYs5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD6RWSuqo5SnrP8+VeN/4hLWZATvn7DHqLDdOTpiUd0YmVx2DgKJyZPN
Yf/ZnlRhR5dDmz6YxtdKTRPax0fplOsnTFxq48cQ+U/VXgD6jTAzuy5JzoltJcio
IyKDtkuDQHxOO1q479WjjYPJtxTIG3XFGCJIvBaMt/zlsjT9Bi1A7NIhj1qXoaBT
cVrgrNKCDZDpZ+Hs1kemdHzd84l9urWy7ceUiFcZ+wwRDoOl/5pur2o8MSTku3OY
FRSKrF9ckjmV8WDHdwdpVn3Em+BziHGQiiXz0pf+tbQy0qS0jjVFZ9yx+L0JrQlo
HkKlIBgq5LXnaRrgEb4E0GTlN+lgBXQ=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:28:31 2024 by rpki-client on console-fra.rpki-client.org