Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f323ac2e-806a-37f8-a031-1faf014a739d.roa
File:                     f323ac2e-806a-37f8-a031-1faf014a739d.roa (raw, json)
Hash identifier:          ZQK0fcj6QsawF52jPrQBulZVSZM6M5SUpxqwP0SEnk8=
Subject key identifier:   9A:4F:46:93:D6:2F:A5:40:62:9A:99:2F:24:23:B5:76:EC:D1:40:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584734C8612CE1B9A835B8BD3640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f323ac2e-806a-37f8-a031-1faf014a739d.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33662
IP address blocks:        98.200.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:61:2c:e1:b9:a8:35:b8:bd:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=62ed0734-1072-4340-a175-320fb64b1928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:67:8d:84:79:55:1e:45:01:c2:21:a7:4f:00:
                    b6:30:68:fc:b1:63:8d:40:e8:75:ff:cb:5e:c5:e2:
                    5b:80:36:b0:87:13:58:9f:b7:b2:27:8f:22:0b:c8:
                    8c:da:2c:31:bc:14:08:88:60:63:5f:9a:bf:82:f1:
                    b2:e4:24:6b:ea:95:da:b6:49:66:e1:b9:bd:7c:77:
                    c9:fd:6a:47:57:c7:6f:dc:b3:8d:5e:fb:60:54:32:
                    2b:23:2a:f7:d3:9d:7f:6c:c8:6d:49:05:c5:f1:2e:
                    cd:aa:67:f4:a1:cb:38:29:9e:85:3e:f2:9a:cc:cb:
                    d8:03:a5:9a:06:76:1f:d8:f0:12:e3:d1:90:e0:49:
                    37:af:c2:bd:1f:c1:c0:f2:18:51:e2:ed:7c:16:93:
                    20:d0:f0:5e:0c:8e:fb:04:a6:8a:5f:88:68:16:55:
                    0b:90:a9:3e:d9:0a:b8:f9:74:e1:78:02:52:72:ee:
                    c0:6b:37:21:68:e0:ef:79:ad:89:8d:61:59:e4:41:
                    ff:0a:52:21:a1:a1:ce:92:92:58:76:76:60:24:be:
                    dd:f9:21:53:f3:16:95:29:ad:39:03:59:e1:5e:8e:
                    6f:98:df:4d:b4:29:77:71:67:df:f4:b7:df:66:73:
                    ab:da:c0:55:75:cc:26:5a:5d:45:a9:15:2a:0f:19:
                    68:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4F:46:93:D6:2F:A5:40:62:9A:99:2F:24:23:B5:76:EC:D1:40:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f323ac2e-806a-37f8-a031-1faf014a739d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.200.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:8e:b3:89:8a:13:86:43:c3:25:f6:5f:15:e6:08:24:cf:c3:
         d0:b4:fe:1c:c2:4e:5f:b4:6b:ff:9a:98:62:03:45:54:79:e7:
         de:3d:c5:4e:de:c7:04:4e:d9:43:72:e1:4b:98:b2:57:c5:6f:
         12:b7:b4:e9:86:77:82:5c:d0:06:2d:1c:46:9d:db:86:bf:f8:
         31:eb:3c:72:71:84:86:03:d7:47:21:c6:be:66:ca:7c:ef:fa:
         51:52:c3:40:3b:d3:03:3a:c9:51:c4:3f:18:ff:79:2c:da:db:
         81:65:bc:69:50:ec:29:2e:b0:ed:15:9d:73:0f:03:ad:8d:59:
         4f:14:bc:01:a6:d4:82:d0:2d:e2:05:24:8e:d3:05:ce:11:55:
         56:88:b1:67:bf:a3:85:73:b2:7f:77:98:d7:f6:0d:51:1c:d4:
         3e:34:5f:4b:54:b2:30:0c:2f:2c:e8:80:48:73:28:2d:19:ff:
         b4:8d:dd:de:e0:3f:04:3f:be:1f:ae:46:24:1b:bf:a8:fa:d6:
         c5:b3:89:e2:cd:1e:9a:d6:50:83:dc:76:5c:ad:a5:07:3a:23:
         3b:b2:58:83:f6:f8:6d:db:55:2c:2f:71:02:aa:78:3d:9b:d3:
         fd:79:53:ec:82:9a:a5:7f:33:57:39:7e:c1:d3:3c:5a:ea:25:
         4a:ac:cc:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc0yGEs4bmoNbi9NkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDkxNDAxMDAzMloXDTI0MTIxMzAyMDAzMlowLzEtMCsGA1UEAxMk
NjJlZDA3MzQtMTA3Mi00MzQwLWExNzUtMzIwZmI2NGIxOTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGeNhHlVHkUBwiGnTwC2MGj8sWONQOh1/8te
xeJbgDawhxNYn7eyJ48iC8iM2iwxvBQIiGBjX5q/gvGy5CRr6pXatklm4bm9fHfJ
/WpHV8dv3LONXvtgVDIrIyr3051/bMhtSQXF8S7Nqmf0ocs4KZ6FPvKazMvYA6Wa
BnYf2PAS49GQ4Ek3r8K9H8HA8hhR4u18FpMg0PBeDI77BKaKX4hoFlULkKk+2Qq4
+XTheAJScu7AazchaODvea2JjWFZ5EH/ClIhoaHOkpJYdnZgJL7d+SFT8xaVKa05
A1nhXo5vmN9NtCl3cWff9LffZnOr2sBVdcwmWl1FqRUqDxlo9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJpPRpPWL6VAYpqZLyQjtXbs0UAXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjMyM2FjMmUtODA2YS0z
N2Y4LWEwMzEtMWZhZjAxNGE3MzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYshSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqOs4mKE4ZDwyX2XxXmCCTPw9C0/hzCTl+0a/+amGIDRVR55949xU7e
xwRO2UNy4UuYslfFbxK3tOmGd4Jc0AYtHEad24a/+DHrPHJxhIYD10chxr5mynzv
+lFSw0A70wM6yVHEPxj/eSza24FlvGlQ7CkusO0VnXMPA62NWU8UvAGm1ILQLeIF
JI7TBc4RVVaIsWe/o4Vzsn93mNf2DVEc1D40X0tUsjAMLyzogEhzKC0Z/7SN3d7g
PwQ/vh+uRiQbv6j61sWzieLNHprWUIPcdlytpQc6IzuyWIP2+G3bVSwvcQKqeD2b
0/15U+yCmqV/M1c5fsHTPFrqJUqszAY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:49:00 2024 by rpki-client on console-fra.rpki-client.org