Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ce94a7b9-c57c-35f2-892f-ea5fdca21d5b.roa
File:                     ce94a7b9-c57c-35f2-892f-ea5fdca21d5b.roa (raw, json)
Hash identifier:          IfnCrpWnYfP3p4676LY07CYI4fuufUFerH7L/sQ6woI=
Subject key identifier:   B6:FF:3D:CD:DC:E0:F9:C7:A9:9C:4D:B7:C4:58:15:98:71:DA:2C:59
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285848C580F0D9F1F75341D0583B80
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ce94a7b9-c57c-35f2-892f-ea5fdca21d5b.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     212238
IP address blocks:        98.159.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:f0:d9:f1:f7:53:41:d0:58:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e8166daa-d124-4ab7-9c3d-182874e54d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bf:99:1d:8f:36:f4:db:82:86:ba:a8:4e:18:
                    56:cd:11:06:fd:05:d3:94:7e:64:12:46:74:6d:aa:
                    a2:12:5d:f0:e4:06:15:0e:6e:c2:5d:99:95:f7:dc:
                    c8:fc:c3:a5:ce:91:2c:6d:cb:a6:2a:f4:74:26:a9:
                    96:a5:de:e7:44:8f:54:95:74:30:07:f4:35:35:4b:
                    68:bc:61:00:f4:52:01:b3:87:2a:90:15:5f:73:73:
                    eb:23:a5:ac:26:6b:d6:19:b1:99:6c:81:02:b8:25:
                    fe:a8:fa:97:66:10:5a:ad:f4:51:27:6d:4d:bd:07:
                    da:4e:95:58:86:01:10:17:7f:45:bf:25:80:4d:2b:
                    17:5c:12:4e:b2:6b:32:c6:ae:f7:56:30:5f:89:50:
                    7e:37:c9:86:f0:c3:be:7e:33:86:44:ad:e5:d2:95:
                    f3:20:f8:36:40:a4:6c:10:7b:33:09:9b:43:8a:21:
                    b5:b7:d0:fa:8b:1f:7c:eb:1a:c1:a8:60:83:03:42:
                    65:a5:7c:06:39:72:c3:b2:ca:63:3c:94:e9:16:cc:
                    52:2f:ed:64:d4:ce:f3:75:3c:4c:54:f5:44:fb:83:
                    7d:9c:06:ff:71:a2:b1:1f:79:18:0f:db:5b:0b:83:
                    64:11:1f:60:a4:d6:55:c5:c4:61:d2:dc:0f:fb:0e:
                    15:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FF:3D:CD:DC:E0:F9:C7:A9:9C:4D:B7:C4:58:15:98:71:DA:2C:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ce94a7b9-c57c-35f2-892f-ea5fdca21d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:82:d3:99:ca:c5:24:96:6c:b4:69:b5:24:69:e9:5c:0b:47:
         76:c2:a7:b9:85:77:a4:a6:f5:5d:64:b0:52:4d:49:24:48:3b:
         7f:a5:d7:e0:9f:1a:b7:8a:82:a7:d6:96:02:52:19:72:45:32:
         4f:04:dc:72:b3:4d:8c:c2:b2:94:26:7a:83:47:c7:33:a4:3b:
         10:f9:6c:46:77:fa:37:ee:5d:1b:10:22:5c:bb:b0:0b:9b:94:
         67:6c:67:cf:43:2f:02:6e:d9:44:e8:06:87:95:99:33:a5:a3:
         04:ce:71:8d:83:66:b6:d8:06:2f:23:4f:33:7a:a6:6e:a3:aa:
         4f:23:dd:da:f4:71:c3:ae:45:8f:d6:b5:d7:8e:61:46:fb:1a:
         aa:b7:76:ab:d8:47:57:63:b0:51:36:f4:f1:08:61:c7:19:76:
         52:ab:7c:f6:fc:20:a3:55:0c:f0:7a:72:fa:21:ad:f1:8e:18:
         e3:4f:f5:72:43:ea:b5:6c:90:73:22:c5:fb:c6:44:1f:2c:78:
         c3:e9:e5:aa:6d:87:ec:48:c3:b0:d1:7a:82:d2:27:28:df:fc:
         a7:55:78:09:11:52:ba:c0:40:e7:b0:c5:84:67:45:4c:68:3c:
         2d:4c:a4:34:85:1b:3c:17:1a:b4:07:b9:78:87:0b:0a:ab:58:
         f7:ec:f2:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPDZ8fdTQdBYO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTgxNjZkYWEtZDEyNC00YWI3LTljM2QtMTgyODc0ZTU0ZDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6b+ZHY829NuChrqoThhWzREG/QXTlH5kEkZ0
baqiEl3w5AYVDm7CXZmV99zI/MOlzpEsbcumKvR0JqmWpd7nRI9UlXQwB/Q1NUto
vGEA9FIBs4cqkBVfc3PrI6WsJmvWGbGZbIECuCX+qPqXZhBarfRRJ21NvQfaTpVY
hgEQF39FvyWATSsXXBJOsmsyxq73VjBfiVB+N8mG8MO+fjOGRK3l0pXzIPg2QKRs
EHszCZtDiiG1t9D6ix986xrBqGCDA0JlpXwGOXLDsspjPJTpFsxSL+1k1M7zdTxM
VPVE+4N9nAb/caKxH3kYD9tbC4NkER9gpNZVxcRh0twP+w4VnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLb/Pc3c4PnHqZxNt8RYFZhx2ixZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvY2U5NGE3YjktYzU3Yy0z
NWYyLTg5MmYtZWE1ZmRjYTIxZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYp/qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALCC05nKxSSWbLRptSRp6VwLR3bCp7mFd6Sm9V1ksFJNSSRIO3+l1+Cf
GreKgqfWlgJSGXJFMk8E3HKzTYzCspQmeoNHxzOkOxD5bEZ3+jfuXRsQIly7sAub
lGdsZ89DLwJu2UToBoeVmTOlowTOcY2DZrbYBi8jTzN6pm6jqk8j3dr0ccOuRY/W
tdeOYUb7Gqq3dqvYR1djsFE29PEIYccZdlKrfPb8IKNVDPB6cvohrfGOGONP9XJD
6rVskHMixfvGRB8seMPp5apth+xIw7DReoLSJyjf/KdVeAkRUrrAQOewxYRnRUxo
PC1MpDSFGzwXGrQHuXiHCwqrWPfs8vw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:40 2025 by rpki-client