Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/26578730-4989-3c55-8f1c-c17a76f2e1fd.roa
File:                     26578730-4989-3c55-8f1c-c17a76f2e1fd.roa (raw, json)
Hash identifier:          Q++KDdBVGLw4prtEeEii6DU3KXjyRDg/2hWJzq1fX1Q=
Subject key identifier:   06:96:F2:CD:2C:02:DA:25:B0:79:32:FE:5E:44:ED:FD:7F:58:98:4D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E6DDE77AB1FA90DAFAC80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/26578730-4989-3c55-8f1c-c17a76f2e1fd.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20001
IP address blocks:        98.147.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:6d:de:77:ab:1f:a9:0d:af:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=2dfb6282-ac79-4aaf-886a-f192c9aa580e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:b6:2c:6e:ea:c9:b5:e3:ba:e2:19:f5:b0:
                    55:f6:32:a1:21:4b:c8:9b:05:fa:8c:c7:75:2f:57:
                    ef:35:1e:3f:dc:e9:56:1a:3b:de:c8:ef:08:3b:37:
                    1d:19:f1:4c:b4:d0:f8:67:ac:08:b0:0b:3e:6d:10:
                    94:1b:de:60:94:72:05:95:61:98:67:f1:7e:6b:b6:
                    66:2a:6f:6c:53:76:f8:eb:75:bc:35:37:a1:2c:3e:
                    73:15:a3:e4:af:8a:dd:e3:b8:9b:11:64:27:8a:31:
                    c4:5c:80:69:29:84:a7:f8:26:b7:43:b7:e5:6a:cf:
                    df:08:4a:50:ac:4b:ce:05:85:e4:76:89:07:77:f1:
                    a9:c2:1c:a9:fd:8d:5c:fa:f2:79:7d:a2:8c:e8:95:
                    7a:8e:74:82:16:e9:d1:9b:3f:b8:12:01:f2:09:41:
                    5b:88:b5:f2:01:c3:b2:b5:3f:2d:6d:2f:65:ad:82:
                    a3:31:84:25:11:f6:2f:b7:ed:e8:25:12:96:95:02:
                    33:1c:5d:02:a4:58:71:b5:91:bd:8a:ac:ac:f5:e1:
                    20:3a:cd:f4:c3:ac:e1:21:37:ed:6f:0d:da:46:93:
                    ec:12:4c:cc:fb:7e:64:f7:80:f1:42:4a:dc:de:50:
                    27:cf:e9:f4:8f:d5:9b:53:28:1f:31:72:35:c1:e6:
                    0f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:96:F2:CD:2C:02:DA:25:B0:79:32:FE:5E:44:ED:FD:7F:58:98:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/26578730-4989-3c55-8f1c-c17a76f2e1fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.147.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:bf:46:4e:7d:a6:f8:20:df:04:37:c4:b1:aa:ad:97:7c:ca:
         51:55:ad:ad:5e:00:68:dc:a3:cb:a3:98:de:05:ae:1b:39:b9:
         d7:d4:f5:6c:f9:4c:3b:45:94:2b:27:62:c3:1a:b7:43:69:72:
         3f:80:fe:09:eb:a5:0c:82:87:20:57:7b:d6:01:96:ba:f6:11:
         94:3b:92:f6:1b:23:a0:7a:5e:ce:cc:fc:af:9d:6c:15:69:a5:
         d1:28:a5:17:2d:55:f9:fa:21:98:da:57:ad:29:50:af:86:82:
         a9:c6:d9:09:07:c0:cc:a0:5b:2c:21:3c:2c:5e:6a:bf:19:1e:
         56:e7:6f:2e:ce:1b:44:1d:83:3b:b8:bb:80:b1:a0:67:29:77:
         99:6e:7a:69:11:a1:c4:d3:63:91:38:ad:5f:e4:57:16:f3:6d:
         91:ac:29:1f:8c:4a:d2:c3:6c:7a:e9:b6:d5:e1:58:10:72:41:
         ea:3e:84:b9:6d:d5:32:04:84:2c:1c:e7:f1:d4:78:58:81:92:
         86:7b:cb:a2:e2:c1:5b:74:f1:57:90:3d:61:17:fb:fe:70:9e:
         49:c2:d5:8c:b1:ab:0f:3d:7a:d2:9b:d7:b0:8a:ef:c5:ad:0c:
         f2:48:3d:14:ba:a4:96:5b:38:13:a2:b9:bb:89:74:4d:10:9b:
         e7:57:a8:44
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEVijm3ed6sfqQ2vrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MmRmYjYyODItYWM3OS00YWFmLTg4NmEtZjE5MmM5YWE1ODBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5C2LG7qybXjuuIZ9bBV9jKhIUvImwX6jMd1
L1fvNR4/3OlWGjveyO8IOzcdGfFMtND4Z6wIsAs+bRCUG95glHIFlWGYZ/F+a7Zm
Km9sU3b463W8NTehLD5zFaPkr4rd47ibEWQnijHEXIBpKYSn+Ca3Q7flas/fCEpQ
rEvOBYXkdokHd/Gpwhyp/Y1c+vJ5faKM6JV6jnSCFunRmz+4EgHyCUFbiLXyAcOy
tT8tbS9lrYKjMYQlEfYvt+3oJRKWlQIzHF0CpFhxtZG9iqys9eEgOs30w6zhITft
bw3aRpPsEkzM+35k94DxQkrc3lAnz+n0j9WbUygfMXI1weYPYwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAaW8s0sAtolsHky/l5E7f1/WJhNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMjY1Nzg3MzAtNDk4OS0z
YzU1LThmMWMtYzE3YTc2ZjJlMWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYpMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAA79GTn2m+CDfBDfEsaqtl3zKUVWtrV4AaNyjy6OY3gWuGzm519T1bPlM
O0WUKydiwxq3Q2lyP4D+CeulDIKHIFd71gGWuvYRlDuS9hsjoHpezsz8r51sFWml
0SilFy1V+fohmNpXrSlQr4aCqcbZCQfAzKBbLCE8LF5qvxkeVudvLs4bRB2DO7i7
gLGgZyl3mW56aRGhxNNjkTitX+RXFvNtkawpH4xK0sNseum21eFYEHJB6j6EuW3V
MgSELBzn8dR4WIGShnvLouLBW3TxV5A9YRf7/nCeScLVjLGrDz160pvXsIrvxa0M
8kg9FLqklls4E6K5u4l0TRCb51eoRA==
-----END CERTIFICATE-----
Generated at Wed May 1 16:30:16 2024 by rpki-client on console-fra.rpki-client.org