Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/11caecce-9970-30b9-a504-e87b6f540c94.roa
File:                     11caecce-9970-30b9-a504-e87b6f540c94.roa (raw, json)
Hash identifier:          /+IvSr9U3Sr5M1JO3kNPc9gdmYF5hae0OWujtTcIOvM=
Subject key identifier:   5C:B1:96:81:99:3A:87:C9:E1:58:72:68:90:EE:B7:F5:4B:61:49:35
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F432858450ABAD4B610536DF729609B40
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/11caecce-9970-30b9-a504-e87b6f540c94.roa
Signing time:             Wed 28 Feb 2024 14:00:31 +0000
ROA not before:           Wed 28 Feb 2024 14:00:31 +0000
ROA not after:            Tue 28 May 2024 13:00:31 +0000
asID:                     32133
IP address blocks:        64.98.0.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0a:ba:d4:b6:10:53:6d:f7:29:60:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Feb 28 14:00:31 2024 GMT
            Not After : May 28 13:00:31 2024 GMT
        Subject: CN=d38a1f92-c967-44b8-ac12-8c77043ce416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f5:3d:5d:44:f1:06:4d:d2:cb:38:94:17:e4:
                    6a:a1:a3:41:18:cc:cd:ea:fe:a3:57:eb:fd:91:87:
                    c8:f5:16:e2:0a:cc:b9:4f:ef:68:b8:d7:b2:2f:cf:
                    8f:98:a4:c1:df:c5:52:4f:c5:95:42:8d:0a:d4:75:
                    7b:c0:a2:e5:88:72:57:17:a6:c5:c3:b7:ca:b2:44:
                    ee:d4:6f:51:c0:2b:00:14:fb:27:54:45:d5:e0:c6:
                    8b:05:d5:30:50:a3:11:0e:80:d5:8a:bd:82:aa:7a:
                    93:08:58:c7:b0:9c:91:5c:ac:81:16:07:45:f3:8c:
                    2d:1e:21:d1:57:2e:ef:56:30:63:89:60:ec:c5:04:
                    1d:7f:80:6c:ee:8c:09:91:70:af:57:18:88:d0:b8:
                    64:66:71:34:f4:ff:79:37:4d:57:28:c3:87:b5:f1:
                    9c:f0:28:85:50:d5:33:b1:15:47:a3:d6:32:03:9d:
                    3f:85:1c:df:44:f6:cc:67:b6:02:b7:fe:ed:99:c0:
                    10:2a:86:cc:20:fe:8e:ea:67:24:a0:7f:db:5f:ca:
                    0a:01:bd:c0:e0:01:2c:a4:f1:26:9f:ed:3c:58:86:
                    d6:5b:77:d3:f1:84:6d:42:5a:19:84:b5:d3:8b:87:
                    31:62:f1:26:aa:a5:1f:46:a2:c6:e8:a6:d2:58:f5:
                    25:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B1:96:81:99:3A:87:C9:E1:58:72:68:90:EE:B7:F5:4B:61:49:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/11caecce-9970-30b9-a504-e87b6f540c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:15:bc:c9:db:9e:94:39:0d:c4:9a:e8:3c:4b:4f:ad:6a:cd:
         2b:aa:55:d2:5a:97:f8:1b:83:8b:07:11:07:6e:37:ee:c6:1f:
         9b:09:b9:a2:d7:f8:bf:69:d3:03:db:ff:49:d6:13:78:02:0b:
         10:59:66:af:98:3b:55:a3:bb:8e:e6:a5:47:5f:b2:a9:e1:6b:
         6d:2d:59:d1:12:6e:49:81:f4:aa:21:45:bd:f0:1e:33:f0:76:
         10:c0:2b:15:bc:1d:48:71:7e:49:ab:53:52:e9:4c:a3:ac:50:
         3d:b4:65:84:ac:ec:b3:be:4a:51:e2:72:f6:b0:53:4a:80:0f:
         21:24:0f:e0:b4:bc:1a:bb:7f:08:24:bf:56:c7:4e:78:ac:d2:
         22:94:31:6c:4b:19:16:c3:e2:e6:79:cb:f7:8d:74:0b:25:1c:
         2c:b3:c4:c5:4c:cf:ae:24:10:c3:47:60:6c:3a:66:e8:d2:b5:
         a0:98:cf:d1:7c:45:f0:0e:fc:5d:01:0a:58:a4:41:b4:61:f7:
         58:cb:f9:be:25:ec:21:83:ec:68:b8:4e:3b:09:6e:b3:ae:59:
         ae:0c:c5:9f:a7:64:be:37:e7:c3:87:6d:eb:3e:e3:f1:10:df:
         bf:4b:8d:c6:4c:22:bf:ba:42:cc:27:e4:26:e3:40:fd:2d:68:
         96:d8:30:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUKutS2EFNt9ylgm0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk
ZDBiMB4XDTI0MDIyODE0MDAzMVoXDTI0MDUyODEzMDAzMVowLzEtMCsGA1UEAxMk
ZDM4YTFmOTItYzk2Ny00NGI4LWFjMTItOGM3NzA0M2NlNDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/U9XUTxBk3SyziUF+RqoaNBGMzN6v6jV+v9
kYfI9RbiCsy5T+9ouNeyL8+PmKTB38VST8WVQo0K1HV7wKLliHJXF6bFw7fKskTu
1G9RwCsAFPsnVEXV4MaLBdUwUKMRDoDVir2CqnqTCFjHsJyRXKyBFgdF84wtHiHR
Vy7vVjBjiWDsxQQdf4Bs7owJkXCvVxiI0LhkZnE09P95N01XKMOHtfGc8CiFUNUz
sRVHo9YyA50/hRzfRPbMZ7YCt/7tmcAQKobMIP6O6mckoH/bX8oKAb3A4AEspPEm
n+08WIbWW3fT8YRtQloZhLXTi4cxYvEmqqUfRqLG6KbSWPUlqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFyxloGZOofJ4VhyaJDut/VLYUk1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5
MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvMTFjYWVjY2UtOTk3MC0z
MGI5LWE1MDQtZTg3YjZmNTQwYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy
YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3
ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy
M2VhN2RkMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQGIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIAVvMnbnpQ5DcSa6DxLT61qzSuqVdJal/gbg4sHEQduN+7GH5sJuaLX
+L9p0wPb/0nWE3gCCxBZZq+YO1Wju47mpUdfsqnha20tWdESbkmB9KohRb3wHjPw
dhDAKxW8HUhxfkmrU1LpTKOsUD20ZYSs7LO+SlHicvawU0qADyEkD+C0vBq7fwgk
v1bHTnis0iKUMWxLGRbD4uZ5y/eNdAslHCyzxMVMz64kEMNHYGw6ZujStaCYz9F8
RfAO/F0BClikQbRh91jL+b4l7CGD7Gi4TjsJbrOuWa4MxZ+nZL4358OHbes+4/EQ
379LjcZMIr+6Qswn5CbjQP0taJbYMGg=
-----END CERTIFICATE-----
Generated at Sat May 11 15:30:47 2024 by rpki-client on console-fra.rpki-client.org