Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa
File:                     b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa (raw, json)
Hash identifier:          IYBudrucTiOrbhGl1SilmFkQ9E6Xv5r6ddnPlIRpiS0=
Subject key identifier:   0A:98:3D:38:89:C4:04:E5:47:C6:7A:DB:FE:F9:C9:E4:ED:47:F2:73
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858478CB6902996C1CF85D153D500
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     394285
IP address blocks:        174.137.98.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:90:29:96:c1:cf:85:d1:53:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=65839144-95d8-4ca4-ac0c-ec71698c39aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0e:48:98:65:3d:b8:b7:7d:0a:0a:7e:c3:4f:
                    6d:2a:82:15:b1:20:c3:3e:90:cc:1e:b5:57:89:fa:
                    e7:33:0b:86:52:ec:4a:13:d3:db:29:23:c5:55:7d:
                    29:7f:9b:46:7c:52:7f:5a:97:f5:97:fd:03:19:69:
                    e2:c5:15:4f:8e:a7:9c:54:12:7b:4d:d8:66:7f:7f:
                    95:0e:4c:28:cd:f6:05:83:42:32:fc:98:78:2e:9b:
                    42:e5:42:be:b6:f8:cb:4b:14:7e:f3:fb:50:a2:60:
                    bd:47:17:d6:1b:12:32:10:1b:86:ae:4f:9d:4d:70:
                    d8:89:ed:ac:c9:6e:94:e8:e3:67:5c:eb:f1:8b:b6:
                    e8:9d:fd:3d:55:9e:82:ac:52:ae:33:5c:31:f4:c9:
                    85:39:4f:b2:7b:8d:bb:a5:48:b8:fe:4b:c6:63:fd:
                    e7:75:cc:d2:ff:37:a5:01:f1:c6:80:c5:52:76:4e:
                    11:bd:2d:ac:d0:ba:82:90:2f:a6:42:cc:1e:26:1d:
                    0a:6a:d0:04:b8:c5:38:ed:77:45:59:97:e1:4c:7a:
                    be:6e:78:75:c0:7a:4a:ba:ea:e6:eb:6a:b8:73:76:
                    e7:c8:bf:10:fa:e0:1c:68:b1:45:b2:e8:8b:10:db:
                    f8:fb:2c:f1:fa:bf:12:e4:04:dc:2c:2a:2f:0a:e8:
                    63:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:98:3D:38:89:C4:04:E5:47:C6:7A:DB:FE:F9:C9:E4:ED:47:F2:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/b4ebf42e-8c6c-37f5-bf41-9a840b46d68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:eb:0f:01:95:4f:11:75:8f:46:f6:78:92:74:63:03:3a:11:
         95:aa:ec:bc:4e:f8:97:4a:b2:d6:9a:7c:aa:c6:bf:a3:07:5a:
         0a:64:30:2c:23:3c:df:4e:af:b9:58:74:b5:e4:d5:e1:33:74:
         31:1f:cc:d0:5d:81:2d:28:8c:77:94:92:63:cf:52:32:54:fe:
         1d:af:ce:8f:50:a0:4f:4f:c1:d9:2f:18:34:00:a7:28:aa:78:
         0e:dc:d8:31:b8:81:a1:9a:48:c3:27:5c:e9:06:63:a0:20:c9:
         33:e7:da:82:ac:85:48:ac:06:2d:39:b0:f5:fc:92:6d:f6:47:
         5c:a1:1a:f9:a8:ec:ee:c1:22:82:ee:5b:d8:92:fd:73:05:95:
         88:5e:22:e2:e9:ca:82:a6:72:a1:4d:d2:0f:8c:40:24:8c:5b:
         c2:f7:93:cd:24:05:3a:a1:ed:ca:25:eb:0b:8d:b5:8f:85:75:
         d8:2c:3e:ef:a9:50:4f:49:15:52:e0:b5:5a:f4:ba:0a:cd:66:
         c0:ec:de:22:c0:84:14:a9:3b:db:82:b9:a2:b3:dc:c1:92:29:
         50:15:22:bb:d5:23:50:e3:2b:a3:db:fc:ec:81:46:f5:fc:6e:
         f5:2c:3c:c5:97:e0:52:77:0f:ab:5f:fa:3b:82:db:e7:af:20:
         b1:66:d5:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeMtpAplsHPhdFT1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI0MTAxNTEzMDA0N1oXDTI1MDExMzE0MDA0N1owLzEtMCsGA1UEAxMk
NjU4MzkxNDQtOTVkOC00Y2E0LWFjMGMtZWM3MTY5OGMzOWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg5ImGU9uLd9Cgp+w09tKoIVsSDDPpDMHrVX
ifrnMwuGUuxKE9PbKSPFVX0pf5tGfFJ/Wpf1l/0DGWnixRVPjqecVBJ7Tdhmf3+V
DkwozfYFg0Iy/Jh4LptC5UK+tvjLSxR+8/tQomC9RxfWGxIyEBuGrk+dTXDYie2s
yW6U6ONnXOvxi7bonf09VZ6CrFKuM1wx9MmFOU+ye427pUi4/kvGY/3ndczS/zel
AfHGgMVSdk4RvS2s0LqCkC+mQsweJh0KatAEuMU47XdFWZfhTHq+bnh1wHpKuurm
62q4c3bnyL8Q+uAcaLFFsuiLENv4+yzx+r8S5ATcLCovCuhjNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAqYPTiJxATlR8Z62/75yeTtR/JzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvYjRlYmY0MmUtOGM2Yy0z
N2Y1LWJmNDEtOWE4NDBiNDZkNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroliMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLrDwGVTxF1j0b2eJJ0YwM6EZWq7LxO+JdKstaafKrGv6MHWgpkMCwj
PN9Or7lYdLXk1eEzdDEfzNBdgS0ojHeUkmPPUjJU/h2vzo9QoE9PwdkvGDQApyiq
eA7c2DG4gaGaSMMnXOkGY6AgyTPn2oKshUisBi05sPX8km32R1yhGvmo7O7BIoLu
W9iS/XMFlYheIuLpyoKmcqFN0g+MQCSMW8L3k80kBTqh7col6wuNtY+FddgsPu+p
UE9JFVLgtVr0ugrNZsDs3iLAhBSpO9uCuaKz3MGSKVAVIrvVI1DjK6Pb/OyBRvX8
bvUsPMWX4FJ3D6tf+juC2+evILFm1cs=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:15:07 2024 by rpki-client on console-ams.rpki-client.org