Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f153fdc3-9a9d-3bc6-b737-ae9b145e0a8c.roa
File:                     f153fdc3-9a9d-3bc6-b737-ae9b145e0a8c.roa (raw, json)
Hash identifier:          K8hlAZYpSgfGeOjqw2/PwIoFvnE9D+PlGfL2RnCjVCo=
Subject key identifier:   56:38:55:33:BF:0C:D6:9C:82:77:72:D7:D5:27:C8:5B:53:F7:0B:78
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C87AA6E4D12D6E0DB75160
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f153fdc3-9a9d-3bc6-b737-ae9b145e0a8c.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.57.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:7a:a6:e4:d1:2d:6e:0d:b7:51:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=788f9a74-e5a3-42d6-b42f-9ed4892abe02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e7:01:53:0d:70:07:42:33:c7:06:d6:13:e5:
                    d1:09:44:54:4b:a6:d8:1e:bc:0d:96:1b:19:f1:32:
                    17:ac:58:c9:f6:2b:d5:07:c3:a2:4d:e1:b3:99:78:
                    f7:fc:85:6b:63:85:2f:aa:f8:25:55:59:be:1a:18:
                    b8:5b:7d:1c:fd:26:52:ae:29:e5:0d:d3:1b:c2:ac:
                    3e:55:cb:11:2c:66:e5:bf:6d:7c:65:e1:4c:7d:fe:
                    6c:f4:fe:8f:c7:52:ee:8e:a6:5b:eb:5b:2f:13:9c:
                    f3:c3:79:cb:c7:52:9a:ec:33:70:0c:ee:9a:03:81:
                    23:3e:57:91:71:87:f8:76:59:b3:4a:fa:21:1b:3e:
                    91:52:f7:a7:4b:68:15:5b:d4:73:be:6d:7e:ca:73:
                    d1:9b:64:19:bd:88:c6:8f:04:1d:22:b1:c2:a0:73:
                    30:7b:6c:04:a2:35:f6:d2:77:65:cf:a7:e5:92:a8:
                    cf:d3:9b:a5:73:6e:a1:ce:e5:d5:d4:f2:09:0f:2c:
                    ef:88:01:51:3e:c2:d2:5e:f7:b1:d0:fc:a2:8f:16:
                    d9:ec:8e:df:04:13:18:e8:f2:d5:3e:e2:17:45:18:
                    d0:45:fd:97:65:70:77:df:5a:43:a7:fe:79:61:48:
                    2b:85:4d:cc:fb:38:95:18:3b:2c:b7:9d:1d:99:87:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:38:55:33:BF:0C:D6:9C:82:77:72:D7:D5:27:C8:5B:53:F7:0B:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f153fdc3-9a9d-3bc6-b737-ae9b145e0a8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.57.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:4f:6d:1c:cb:89:2a:32:fa:2f:80:8c:bc:56:33:09:fb:3a:
         e8:21:76:34:35:85:56:f3:5d:82:55:0a:8c:a8:ab:6c:a0:b4:
         0f:d5:60:27:45:e2:df:12:19:ee:c7:43:73:8d:e8:d6:07:1b:
         8a:f5:11:40:5f:fe:7c:f3:85:32:c8:0f:e6:6a:f6:ed:8c:58:
         66:88:9f:1e:26:de:14:4e:13:1e:7a:a7:10:84:44:96:9b:21:
         9b:6f:04:8f:e7:4d:23:b5:e6:15:8b:56:73:32:3e:91:97:30:
         dd:e6:78:fb:35:6b:be:fa:f0:61:b3:86:39:05:99:4c:b7:34:
         da:52:af:97:22:db:d3:4d:52:52:66:9c:a3:5b:d4:2d:70:ba:
         e7:5f:2f:c2:23:d5:d3:05:47:89:1b:96:1b:ec:07:7b:c2:23:
         5d:ca:67:bc:7d:ee:f5:a5:8d:74:be:e1:c9:5c:9b:1c:e5:ac:
         ae:0a:91:f6:80:62:70:88:70:1f:1f:dc:c0:f2:c3:ad:c6:9d:
         14:92:d9:a7:c5:72:84:ef:1d:d9:83:1e:c7:2a:71:ed:6d:82:
         e5:66:88:44:5c:6e:00:d6:a2:d8:10:3a:f8:c6:32:df:7b:67:
         5d:bf:f4:5c:fc:78:f7:d6:b4:fe:ba:9b:11:b1:01:80:5c:5b:
         12:90:a8:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0yHqm5NEtbg23UWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
Nzg4ZjlhNzQtZTVhMy00MmQ2LWI0MmYtOWVkNDg5MmFiZTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiecBUw1wB0IzxwbWE+XRCURUS6bYHrwNlhsZ
8TIXrFjJ9ivVB8OiTeGzmXj3/IVrY4UvqvglVVm+Ghi4W30c/SZSrinlDdMbwqw+
VcsRLGblv218ZeFMff5s9P6Px1LujqZb61svE5zzw3nLx1Ka7DNwDO6aA4EjPleR
cYf4dlmzSvohGz6RUvenS2gVW9Rzvm1+ynPRm2QZvYjGjwQdIrHCoHMwe2wEojX2
0ndlz6flkqjP05ulc26hzuXV1PIJDyzviAFRPsLSXvex0PyijxbZ7I7fBBMY6PLV
PuIXRRjQRf2XZXB331pDp/55YUgrhU3M+ziVGDsst50dmYcV1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFY4VTO/DNacgndy19UnyFtT9wt4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjE1M2ZkYzMtOWE5ZC0z
YmM2LWI3MzctYWU5YjE0NWUwYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjl8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKRPbRzLiSoy+i+AjLxWMwn7OughdjQ1hVbzXYJVCoyoq2ygtA/VYCdF
4t8SGe7HQ3ON6NYHG4r1EUBf/nzzhTLID+Zq9u2MWGaInx4m3hROEx56pxCERJab
IZtvBI/nTSO15hWLVnMyPpGXMN3mePs1a7768GGzhjkFmUy3NNpSr5ci29NNUlJm
nKNb1C1wuudfL8Ij1dMFR4kblhvsB3vCI13KZ7x97vWljXS+4clcmxzlrK4KkfaA
YnCIcB8f3MDyw63GnRSS2afFcoTvHdmDHscqce1tguVmiERcbgDWotgQOvjGMt97
Z12/9Fz8ePfWtP66mxGxAYBcWxKQqK4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:48:52 2024 by rpki-client on console-fra.rpki-client.org