Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e823b039-907a-3f24-b311-fc654e0688b7.roa
File:                     e823b039-907a-3f24-b311-fc654e0688b7.roa (raw, json)
Hash identifier:          SgRomRFCqRJgDMES+OTWDNr4UvxQRoP0iW04dwDeZJg=
Subject key identifier:   69:05:F4:F6:BA:06:14:69:5C:BD:1E:4D:CF:BC:0D:3A:7F:D8:FF:35
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584761718B2C9C33EEA14EE670C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e823b039-907a-3f24-b311-fc654e0688b7.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     33659
IP address blocks:        98.221.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:8b:2c:9c:33:ee:a1:4e:e6:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=83a3b02a-4793-49f0-b651-a99cf44ed3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:71:44:07:ca:98:39:9e:31:11:c5:d6:1e:
                    81:c8:ba:a4:ca:47:01:3d:3f:af:4d:e7:8d:dc:c7:
                    1c:6d:31:66:ef:2f:b1:39:b8:91:c1:ca:d1:df:42:
                    60:e9:57:21:6f:20:53:30:93:14:51:95:d0:2c:e6:
                    73:ea:33:1c:6e:b7:81:ef:fa:13:59:8c:e6:3f:82:
                    ff:ba:96:e0:d1:09:d7:e5:9f:a2:02:9b:bb:82:77:
                    7c:ff:82:a4:59:b7:bd:9d:d6:16:60:00:c4:8a:49:
                    4b:0d:ba:8c:df:b0:f0:29:c7:8e:f7:52:b4:38:47:
                    65:c8:b9:42:cd:cf:38:1f:ef:0c:a8:3f:7e:f9:77:
                    22:dc:9a:14:3a:c5:70:a1:58:87:e7:67:6d:5c:79:
                    37:36:85:a5:ae:bc:b6:e5:72:ac:a8:f5:c9:9b:93:
                    b3:69:af:e7:1b:a5:d8:eb:66:99:7c:fa:59:ca:97:
                    45:ef:00:da:16:1d:3c:9c:1f:3c:fc:eb:9b:e4:84:
                    87:5f:8f:37:bb:db:e2:89:95:5e:dd:20:f7:d3:cd:
                    8a:74:35:ee:8f:40:11:a2:91:49:b9:a6:d4:81:63:
                    91:b8:ad:4c:2c:35:b0:66:2f:0c:03:5f:a7:fb:0f:
                    75:a4:dd:a0:e0:98:5e:4e:d5:b9:09:1b:c5:83:d5:
                    9b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:05:F4:F6:BA:06:14:69:5C:BD:1E:4D:CF:BC:0D:3A:7F:D8:FF:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e823b039-907a-3f24-b311-fc654e0688b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.221.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:3d:01:27:98:c7:2a:e4:09:fc:d6:53:18:03:da:3d:b6:e9:
         b1:a4:7c:ff:72:49:ca:5a:4d:b0:51:2d:8a:25:76:c9:ac:e3:
         01:51:93:7e:22:88:5d:e6:54:e3:97:5f:d5:b0:cc:bd:8a:b5:
         ea:8e:be:10:d1:de:1a:11:7c:52:ec:6a:4f:f7:a3:6e:82:22:
         35:a1:75:7d:7c:8c:4d:09:00:9f:72:f0:8a:ce:53:2e:30:08:
         18:b1:22:25:32:57:e1:53:78:ea:db:c0:f8:a3:7a:e4:4c:e1:
         fe:b5:24:3f:c1:d4:1c:b5:de:d6:d3:a2:d0:93:c0:98:4b:7c:
         a1:13:f4:6f:d8:3b:a8:ee:c6:79:16:88:69:d1:65:ea:ea:cf:
         d8:f4:b2:b6:29:36:29:03:66:bf:57:f4:af:f6:f4:84:ca:0f:
         12:fa:6d:bd:da:60:6b:ff:ce:a8:47:9f:81:79:2b:97:12:25:
         41:65:78:f7:71:9d:c7:6a:2b:e1:0c:f3:d3:79:98:9f:aa:7d:
         39:60:58:45:b3:78:a5:2a:b2:3b:e6:8f:8b:8e:50:46:29:b0:
         95:f3:0c:b6:41:0d:3a:5c:41:9b:4e:5f:a7:3d:e7:1d:8f:7a:
         75:56:e1:ed:f3:2c:69:b6:4c:f2:b3:62:07:98:17:2a:e3:10:
         ca:d3:a0:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdhcYssnDPuoU7mcMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkzMDAxMDAzMVoXDTI0MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk
ODNhM2IwMmEtNDc5My00OWYwLWI2NTEtYTk5Y2Y0NGVkM2ZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM1xRAfKmDmeMRHF1h6ByLqkykcBPT+vTeeN
3MccbTFm7y+xObiRwcrR30Jg6VchbyBTMJMUUZXQLOZz6jMcbreB7/oTWYzmP4L/
upbg0QnX5Z+iApu7gnd8/4KkWbe9ndYWYADEiklLDbqM37DwKceO91K0OEdlyLlC
zc84H+8MqD9++Xci3JoUOsVwoViH52dtXHk3NoWlrry25XKsqPXJm5Ozaa/nG6XY
62aZfPpZypdF7wDaFh08nB88/Oub5ISHX483u9viiZVe3SD3082KdDXuj0ARopFJ
uabUgWORuK1MLDWwZi8MA1+n+w91pN2g4JheTtW5CRvFg9WbiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGkF9Pa6BhRpXL0eTc+8DTp/2P81MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTgyM2IwMzktOTA3YS0z
ZjI0LWIzMTEtZmM2NTRlMDY4OGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYt2wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADk9ASeYxyrkCfzWUxgD2j226bGkfP9yScpaTbBRLYoldsms4wFRk34i
iF3mVOOXX9WwzL2KteqOvhDR3hoRfFLsak/3o26CIjWhdX18jE0JAJ9y8IrOUy4w
CBixIiUyV+FTeOrbwPijeuRM4f61JD/B1By13tbTotCTwJhLfKET9G/YO6juxnkW
iGnRZerqz9j0srYpNikDZr9X9K/29ITKDxL6bb3aYGv/zqhHn4F5K5cSJUFlePdx
ncdqK+EM89N5mJ+qfTlgWEWzeKUqsjvmj4uOUEYpsJXzDLZBDTpcQZtOX6c95x2P
enVW4e3zLGm2TPKzYgeYFyrjEMrToNA=
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:51:48 2024 by rpki-client on console-fra.rpki-client.org