Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8e6ed24-821a-3b4e-88c2-90dbbeab5b09.roa
File:                     d8e6ed24-821a-3b4e-88c2-90dbbeab5b09.roa (raw, json)
Hash identifier:          xl71I6M8cd/o0pZjx8qqVYmKWm0OI1/AlLOhVjosIbw=
Subject key identifier:   8F:DE:8A:AD:09:8B:CF:BB:B5:13:73:98:AD:5E:58:51:61:58:B4:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858476C9DA564B8B26D2D71EA7180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8e6ed24-821a-3b4e-88c2-90dbbeab5b09.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     33651
IP address blocks:        98.47.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:a5:64:b8:b2:6d:2d:71:ea:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=d3c2d68d-5d1c-4daa-910c-b0576599a41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e9:40:0c:25:80:1a:7e:16:a8:1b:38:0c:20:
                    6e:35:11:72:78:05:1b:3c:66:ea:3b:a1:6e:d1:73:
                    30:fb:bd:6a:d0:ea:bc:66:f2:ef:8b:80:f8:18:03:
                    c1:c9:b1:77:57:53:53:89:0c:31:04:8f:69:91:e2:
                    64:f7:53:16:7c:99:34:6e:40:52:dd:7c:6a:28:fd:
                    f9:8c:49:59:7e:6d:02:b7:69:b6:d8:b4:d8:d6:b0:
                    96:3c:d0:eb:9b:82:e1:66:01:ad:4d:5a:da:14:68:
                    6b:c5:5e:be:d0:cd:bb:ad:52:e5:3e:d8:aa:04:89:
                    40:d6:21:65:ed:9e:aa:4c:84:38:49:7b:72:68:4c:
                    57:15:a6:13:f8:e8:35:b4:c0:30:76:6f:f9:55:16:
                    32:c3:15:c6:59:6f:94:c3:30:b1:53:1b:d4:9c:d5:
                    f3:ea:c3:aa:8c:28:97:0e:f5:0e:f9:e8:b1:9d:c1:
                    35:2f:5a:bf:85:39:f2:29:16:10:ab:52:8a:33:df:
                    18:68:1a:6e:84:a3:c1:11:9d:54:7c:4a:42:bb:01:
                    cb:ec:f5:69:b7:9e:06:14:94:ac:71:06:3f:e4:42:
                    0e:20:df:6e:0e:78:89:d8:0e:df:3d:4f:6d:e8:db:
                    da:38:de:17:da:df:56:c6:f1:c0:77:d2:b0:bf:1b:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DE:8A:AD:09:8B:CF:BB:B5:13:73:98:AD:5E:58:51:61:58:B4:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8e6ed24-821a-3b4e-88c2-90dbbeab5b09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.47.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:43:7c:3a:ee:7c:47:d6:84:56:ec:a5:d6:36:95:e9:43:ea:
         8d:3e:06:53:8e:57:3e:c8:2c:86:10:e4:8f:1f:60:67:bb:c5:
         59:14:be:14:ee:d1:57:50:43:73:d2:79:d0:fb:31:79:e7:5c:
         42:48:21:bf:93:98:73:97:79:0a:df:90:74:b7:2f:c6:02:e5:
         4a:72:41:ce:59:ea:d1:d8:62:32:6f:10:2c:42:80:26:45:f3:
         58:83:66:7d:8a:fe:3c:1e:ec:19:64:1b:2b:1e:c0:d2:0b:f5:
         77:d9:af:3b:70:ea:1b:2b:14:57:96:0e:8e:cf:cf:82:0b:7d:
         aa:cd:c2:cc:0e:ae:07:27:70:9c:8f:c2:6f:4d:f4:51:d0:5b:
         ec:10:1f:69:cb:37:60:a2:ce:84:a1:7d:fc:5b:75:ec:5b:04:
         2b:5a:77:eb:6a:c6:df:6a:3e:58:a3:67:c5:16:c6:a2:2f:f6:
         03:e3:ee:c6:a9:80:11:7a:61:19:a7:5e:f3:ba:b8:8b:d8:16:
         4d:83:b2:bf:69:8e:cc:f7:ee:b8:a7:f9:a9:ac:2d:f8:f4:44:
         e2:3e:ad:4c:da:3d:1a:62:1c:60:b5:85:22:e0:4a:c0:d4:f4:
         21:a9:c7:f0:7e:48:8d:86:a4:89:34:2a:fb:a5:dc:75:71:d8:
         75:db:1a:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdsnaVkuLJtLXHqcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAwNDAxMDAzMVoXDTI1MDEwMjAyMDAzMVowLzEtMCsGA1UEAxMk
ZDNjMmQ2OGQtNWQxYy00ZGFhLTkxMGMtYjA1NzY1OTlhNDFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOlADCWAGn4WqBs4DCBuNRFyeAUbPGbqO6Fu
0XMw+71q0Oq8ZvLvi4D4GAPBybF3V1NTiQwxBI9pkeJk91MWfJk0bkBS3XxqKP35
jElZfm0Ct2m22LTY1rCWPNDrm4LhZgGtTVraFGhrxV6+0M27rVLlPtiqBIlA1iFl
7Z6qTIQ4SXtyaExXFaYT+Og1tMAwdm/5VRYywxXGWW+UwzCxUxvUnNXz6sOqjCiX
DvUO+eixncE1L1q/hTnyKRYQq1KKM98YaBpuhKPBEZ1UfEpCuwHL7PVpt54GFJSs
cQY/5EIOIN9uDniJ2A7fPU9t6NvaON4X2t9WxvHAd9Kwvxv/IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/eiq0Ji8+7tRNzmK1eWFFhWLSHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDhlNmVkMjQtODIxYS0z
YjRlLTg4YzItOTBkYmJlYWI1YjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYi/2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlDfDrufEfWhFbspdY2lelD6o0+BlOOVz7ILIYQ5I8fYGe7xVkUvhTu
0VdQQ3PSedD7MXnnXEJIIb+TmHOXeQrfkHS3L8YC5UpyQc5Z6tHYYjJvECxCgCZF
81iDZn2K/jwe7BlkGysewNIL9XfZrztw6hsrFFeWDo7Pz4ILfarNwswOrgcncJyP
wm9N9FHQW+wQH2nLN2CizoShffxbdexbBCtad+tqxt9qPlijZ8UWxqIv9gPj7sap
gBF6YRmnXvO6uIvYFk2Dsr9pjsz37rin+amsLfj0ROI+rUzaPRpiHGC1hSLgSsDU
9CGpx/B+SI2GpIk0Kvul3HVx2HXbGhU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:35:57 2024 by rpki-client on console-fra.rpki-client.org