Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96c2d158-c3ea-3c40-b9b9-8b355b682476.roa
File:                     96c2d158-c3ea-3c40-b9b9-8b355b682476.roa (raw, json)
Hash identifier:          EqPgS9OpiCQdBYCbN6DIZOyGvp3TN4D7RJMaFSzSY10=
Subject key identifier:   F5:0C:1A:94:34:B7:12:80:A4:1B:CE:3E:48:A7:93:67:C1:14:14:ED
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285845025AD1A2C6A3B45761198640
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96c2d158-c3ea-3c40-b9b9-8b355b682476.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     62610
IP address blocks:        98.98.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:d1:a2:c6:a3:b4:57:61:19:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=3efa72b6-39fc-46ea-883a-8ad2e41d8a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:01:79:c3:77:5a:59:4b:3d:32:32:63:7e:1d:
                    c3:1e:c1:c2:86:bb:8a:8e:c5:a6:92:70:90:00:a7:
                    14:a7:d1:3a:3d:cb:8b:0d:bb:ef:be:31:34:1d:14:
                    9f:32:ed:9a:6d:2e:1b:10:11:db:30:f7:6f:b7:d2:
                    b1:a5:3f:a1:3b:d5:6c:d9:d1:ad:f7:bb:aa:2f:5d:
                    a2:6d:9b:ed:60:24:25:4c:3b:12:05:ff:68:a0:a1:
                    7e:56:31:df:39:f4:44:c4:89:f0:0f:85:cd:7c:ad:
                    23:90:56:4b:5f:d6:f6:83:92:a0:0b:81:7b:6e:2c:
                    94:13:a1:e7:1b:35:14:ad:08:63:e7:7b:35:76:9c:
                    0a:96:22:d3:12:48:f7:e6:ea:19:23:25:32:6e:7b:
                    ba:8f:07:59:37:93:2e:ea:93:2b:98:92:f1:57:2a:
                    e8:56:ce:0a:ac:27:99:40:4c:68:55:e7:3e:36:61:
                    72:a4:9f:be:c6:1f:55:68:57:ca:f7:54:b3:b6:ce:
                    a2:8c:2b:b7:81:55:4f:74:43:f3:3b:1a:20:a8:67:
                    93:06:13:3f:04:aa:27:3f:3b:89:40:1b:92:7f:2d:
                    44:23:ea:ab:bc:a5:6f:3f:42:9d:ef:3e:5a:3d:be:
                    d0:78:8f:d4:b0:e9:8d:18:9f:9f:8d:9d:2f:5c:58:
                    ef:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0C:1A:94:34:B7:12:80:A4:1B:CE:3E:48:A7:93:67:C1:14:14:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96c2d158-c3ea-3c40-b9b9-8b355b682476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a8:94:e2:a7:9c:af:1b:af:70:e2:19:f9:bd:cd:b2:3e:c5:
         23:5d:74:ad:dd:18:dc:34:52:84:5b:5d:84:d5:7e:98:bb:27:
         28:bc:a9:a9:c1:a3:13:5e:df:7b:57:5e:89:78:f8:4e:ee:66:
         1c:d7:d0:c0:bc:60:5d:f4:cb:62:a2:d4:41:cd:68:f7:7b:f9:
         71:21:00:16:b1:56:e4:45:27:33:5a:17:4c:84:ea:3d:18:9f:
         db:e9:3e:f7:f2:48:64:d3:f2:6c:b2:63:63:6c:d4:ff:7a:5d:
         5f:a3:d9:97:ec:06:01:68:29:e0:9d:93:bf:0e:4a:5b:93:05:
         2d:07:2b:77:04:4a:d0:33:2e:50:ab:2f:dc:04:a2:6a:0f:23:
         ba:9e:57:53:05:4c:50:8c:d8:ee:48:f2:ed:88:61:fa:33:8a:
         1d:17:73:0b:59:3b:12:33:08:2d:f0:d3:ba:c3:2b:2c:43:0e:
         de:3f:00:c9:d1:41:d4:56:29:a6:f0:b1:66:fb:48:d0:e8:44:
         ae:ef:9d:4e:ed:d1:88:89:74:d9:d5:88:e5:e6:0e:f7:5c:22:
         40:18:f2:c5:64:2f:87:17:56:27:34:45:86:59:4d:0b:79:ac:
         1c:cc:a1:90:77:b2:4f:7b:db:6b:11:e6:fb:52:a3:d5:29:a3:
         40:91:13:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUCWtGixqO0V2EZhkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI0MDIyNTE0MDAzNFoXDTI0MDUyNTEzMDAzNFowLzEtMCsGA1UEAxMk
M2VmYTcyYjYtMzlmYy00NmVhLTg4M2EtOGFkMmU0MWQ4YTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gF5w3daWUs9MjJjfh3DHsHChruKjsWmknCQ
AKcUp9E6PcuLDbvvvjE0HRSfMu2abS4bEBHbMPdvt9KxpT+hO9Vs2dGt97uqL12i
bZvtYCQlTDsSBf9ooKF+VjHfOfRExInwD4XNfK0jkFZLX9b2g5KgC4F7biyUE6Hn
GzUUrQhj53s1dpwKliLTEkj35uoZIyUybnu6jwdZN5Mu6pMrmJLxVyroVs4KrCeZ
QExoVec+NmFypJ++xh9VaFfK91Szts6ijCu3gVVPdEPzOxogqGeTBhM/BKonPzuJ
QBuSfy1EI+qrvKVvP0Kd7z5aPb7QeI/UsOmNGJ+fjZ0vXFjvwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPUMGpQ0txKApBvOPkink2fBFBTtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvOTZjMmQxNTgtYzNlYS0z
YzQwLWI5YjktOGIzNTViNjgyNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmIUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAOolOKnnK8br3DiGfm9zbI+xSNddK3dGNw0UoRbXYTVfpi7Jyi8qanB
oxNe33tXXol4+E7uZhzX0MC8YF30y2Ki1EHNaPd7+XEhABaxVuRFJzNaF0yE6j0Y
n9vpPvfySGTT8myyY2Ns1P96XV+j2ZfsBgFoKeCdk78OSluTBS0HK3cEStAzLlCr
L9wEomoPI7qeV1MFTFCM2O5I8u2IYfozih0XcwtZOxIzCC3w07rDKyxDDt4/AMnR
QdRWKabwsWb7SNDoRK7vnU7t0YiJdNnViOXmDvdcIkAY8sVkL4cXVic0RYZZTQt5
rBzMoZB3sk9722sR5vtSo9Upo0CRE/M=
-----END CERTIFICATE-----
Generated at Sun May 12 02:13:30 2024 by rpki-client on console-ams.rpki-client.org