Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b14ef75-ec9a-3b27-8ddb-2634c1a69d62.roa
File:                     2b14ef75-ec9a-3b27-8ddb-2634c1a69d62.roa (raw, json)
Hash identifier:          jSa1K3QpLBlBjAfFpGOkZ6A4Ac0shFNH8SmnLQArvTI=
Subject key identifier:   E9:BC:9D:B5:B5:3E:D9:EC:94:70:1E:C5:4D:53:7E:F0:22:92:27:26
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A088AA822114CDBCA8AF80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b14ef75-ec9a-3b27-8ddb-2634c1a69d62.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     10796
IP address blocks:        98.123.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:88:aa:82:21:14:cd:bc:a8:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=c39a89d7-805a-44b6-8600-3599b511f6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:f1:f8:24:aa:57:fd:25:c4:3e:22:4e:8f:
                    4a:0b:54:c0:b5:77:77:1d:cf:bf:23:7d:f2:4e:c4:
                    c0:1d:da:88:1e:a5:70:36:e5:33:5f:2a:14:da:06:
                    97:b0:39:0b:4b:5f:05:1f:53:85:7b:d8:76:c2:a5:
                    c4:8b:40:ce:5f:b7:04:6e:22:a4:00:68:48:9a:ea:
                    81:10:d1:6e:8d:81:3e:c9:07:97:3e:e8:1d:a8:d4:
                    9a:e8:87:aa:c7:a0:9d:12:02:ad:b1:68:dc:0f:aa:
                    b3:1c:b1:be:61:00:b0:6f:a4:66:50:a3:15:bb:0a:
                    9e:1e:3a:f2:14:3f:e7:40:69:a7:a2:b5:d3:6c:2b:
                    6e:56:3f:96:55:de:f6:f8:8f:03:a1:94:6a:1f:cd:
                    14:ba:b1:24:af:24:28:c7:7a:04:99:c8:61:91:f4:
                    30:fb:7d:4b:34:e7:f7:69:a7:6c:7f:03:87:89:25:
                    7f:67:60:2c:96:4c:a0:4a:ca:53:9a:4b:3b:6c:24:
                    8a:52:b8:d8:6d:fa:0a:b0:49:f6:b7:28:24:24:0e:
                    b9:45:14:20:7f:2e:01:4c:73:f8:89:2f:0e:5e:3d:
                    04:6e:9b:f7:b2:1e:ef:dd:4d:4c:83:d7:9d:3d:02:
                    78:de:be:9e:44:21:fa:cb:13:35:ae:84:5e:3b:75:
                    2c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BC:9D:B5:B5:3E:D9:EC:94:70:1E:C5:4D:53:7E:F0:22:92:27:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b14ef75-ec9a-3b27-8ddb-2634c1a69d62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.123.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c8:70:00:50:c8:7f:b1:54:2d:4e:ec:de:3c:47:80:73:50:
         03:95:10:ab:0d:e8:6c:e0:80:74:b4:72:09:7a:22:bd:31:09:
         04:b7:0c:1f:6f:61:b0:f4:51:7e:01:52:a9:1a:0e:b5:69:b5:
         24:3d:e1:19:7c:94:8a:b5:3e:f2:6e:dd:93:eb:7b:50:d6:24:
         00:46:c0:84:14:90:59:3b:8a:b9:4d:c1:df:1c:57:c1:e6:4b:
         65:61:e4:c2:6d:af:82:a5:5a:25:7c:33:7c:ca:65:23:27:43:
         dd:6d:8c:81:cc:96:40:7c:17:09:b1:33:e0:1b:46:1e:0d:39:
         03:da:b0:45:66:94:bd:76:6e:fb:e6:34:c8:3c:e7:32:95:91:
         d9:22:ca:5a:47:88:b2:38:56:47:c4:41:9d:4f:b5:16:b1:94:
         dc:bb:1c:42:99:84:c7:a9:11:6e:b5:03:46:eb:16:53:33:3c:
         f4:67:30:36:4a:7e:3f:3b:1c:c3:3c:f5:01:74:01:9c:13:bf:
         ed:76:24:42:3b:93:48:73:6a:56:5a:81:9a:fe:68:2b:34:5e:
         59:ca:40:03:80:06:71:d6:50:84:b6:ab:2a:c7:5f:4a:9e:f2:
         3b:7a:dc:56:8b:57:7a:d0:c1:3a:0b:98:72:d3:c1:ce:e1:6e:
         ea:fc:09:88
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEcioIiqgiEUzbyor4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
YzM5YTg5ZDctODA1YS00NGI2LTg2MDAtMzU5OWI1MTFmNmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKfx+CSqV/0lxD4iTo9KC1TAtXd3Hc+/I33y
TsTAHdqIHqVwNuUzXyoU2gaXsDkLS18FH1OFe9h2wqXEi0DOX7cEbiKkAGhImuqB
ENFujYE+yQeXPugdqNSa6Ieqx6CdEgKtsWjcD6qzHLG+YQCwb6RmUKMVuwqeHjry
FD/nQGmnorXTbCtuVj+WVd72+I8DoZRqH80UurEkryQox3oEmchhkfQw+31LNOf3
aadsfwOHiSV/Z2AslkygSspTmks7bCSKUrjYbfoKsEn2tygkJA65RRQgfy4BTHP4
iS8OXj0Ebpv3sh7v3U1Mg9edPQJ43r6eRCH6yxM1roReO3UslQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOm8nbW1PtnslHAexU1TfvAikicmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMmIxNGVmNzUtZWM5YS0z
YjI3LThkZGItMjYzNGMxYTY5ZDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYnswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVshwAFDIf7FULU7s3jxHgHNQA5UQqw3obOCAdLRyCXoivTEJBLcMH29h
sPRRfgFSqRoOtWm1JD3hGXyUirU+8m7dk+t7UNYkAEbAhBSQWTuKuU3B3xxXweZL
ZWHkwm2vgqVaJXwzfMplIydD3W2MgcyWQHwXCbEz4BtGHg05A9qwRWaUvXZu++Y0
yDznMpWR2SLKWkeIsjhWR8RBnU+1FrGU3LscQpmEx6kRbrUDRusWUzM89GcwNkp+
Pzscwzz1AXQBnBO/7XYkQjuTSHNqVlqBmv5oKzReWcpAA4AGcdZQhLarKsdfSp7y
O3rcVotXetDBOguYctPBzuFu6vwJiA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:23 2024 by rpki-client on console-fra.rpki-client.org