Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/499ebee2-c71a-36f9-88ea-16d16ebeb2fe.roa
File:                     499ebee2-c71a-36f9-88ea-16d16ebeb2fe.roa (raw, json)
Hash identifier:          OZOdzi8PLIjZi5Zw2hNzRkd4g2j2EqNCQltX69BpC7I=
Subject key identifier:   EB:A8:39:78:FB:7D:A9:CA:2C:57:78:8E:41:19:27:8D:E5:89:9E:94
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858385DD239675204AE3F8450A100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/499ebee2-c71a-36f9-88ea-16d16ebeb2fe.roa
Signing time:             Wed 23 Dec 2020 05:00:00 +0000
ROA not before:           Wed 23 Dec 2020 05:00:00 +0000
ROA not after:            Wed 16 Dec 2026 05:00:00 +0000
asID:                     10796
IP address blocks:        98.28.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:5d:d2:39:67:52:04:ae:3f:84:50:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Dec 23 05:00:00 2020 GMT
            Not After : Dec 16 05:00:00 2026 GMT
        Subject: CN=b34a9916-283f-4b05-9601-f5c82e4da794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:0a:3e:63:d8:55:13:22:e1:92:78:65:d3:
                    a5:b9:d4:4f:84:1b:b0:55:a1:c0:65:e7:b5:10:6b:
                    db:32:1c:ba:2e:e9:44:68:be:a5:7e:c4:3d:a6:93:
                    64:96:b7:e1:2f:f9:64:29:22:f2:dd:c7:25:ca:ad:
                    68:57:8b:a9:57:8f:25:3a:6a:57:82:a0:35:8b:7f:
                    6a:e1:09:07:7a:75:86:36:72:e3:14:f0:21:e1:71:
                    81:36:82:3b:02:5c:63:a9:8f:d0:65:41:c2:9e:31:
                    1b:e6:ae:b9:c7:72:83:57:81:32:4d:7b:34:e4:d0:
                    5c:f2:1f:3f:55:e6:18:50:5f:33:d1:06:77:66:af:
                    62:c6:36:69:60:69:ca:79:74:bd:92:b4:86:52:3e:
                    a6:2b:9e:be:12:d2:77:53:89:19:c6:e8:0c:51:af:
                    34:ba:1e:19:05:80:cb:73:24:7a:fe:a8:3b:60:d7:
                    49:06:6a:5c:d0:30:c4:d4:38:7d:ab:e4:8e:bb:aa:
                    81:d6:d1:9f:a4:2f:7f:66:42:db:66:b0:71:80:9f:
                    ef:c3:fa:c8:1d:ea:41:af:62:86:ab:89:24:29:c1:
                    1f:5f:5c:8b:87:3a:98:17:14:bc:26:08:21:ef:1e:
                    12:c7:f7:4b:fc:02:56:dd:77:99:40:34:85:08:e6:
                    58:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A8:39:78:FB:7D:A9:CA:2C:57:78:8E:41:19:27:8D:E5:89:9E:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/499ebee2-c71a-36f9-88ea-16d16ebeb2fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.28.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:33:24:81:16:84:ec:e0:07:46:b5:71:4a:ab:73:26:e2:1c:
         2f:2a:d4:86:cc:55:52:2f:7f:6f:f0:ae:ae:63:3b:c7:2d:a7:
         6e:c7:ac:6f:ff:eb:76:12:4c:7d:20:5d:35:c3:85:36:e3:9c:
         01:66:0d:56:c2:62:54:c9:1b:b8:ca:20:8c:b0:e9:94:cb:f0:
         6a:8d:26:ba:a8:5a:f1:3d:f0:b4:93:73:d6:52:58:6b:a2:09:
         0e:9f:08:87:6c:20:dd:7e:7c:0c:1e:12:37:1b:0a:90:73:57:
         f5:87:62:77:95:f7:2b:ec:75:5a:d8:06:64:0f:14:6d:d1:e3:
         c8:5c:d1:63:92:ab:e6:b3:94:7b:b0:23:5a:bd:57:79:1f:02:
         80:4d:6f:aa:04:9f:db:1d:cc:1c:78:96:bb:4b:7b:fe:63:ef:
         5a:c9:2b:9c:8e:2e:b1:f1:30:0d:af:f5:87:4a:f6:12:e5:5b:
         36:a5:20:11:34:6a:ca:d0:f1:11:a4:07:5c:e4:bc:9f:92:42:
         c3:80:72:2e:91:eb:0e:b7:ea:6c:64:b5:b3:3d:07:25:7f:03:
         f6:f4:b5:4b:23:d7:85:d3:e7:2c:3f:b1:49:7f:69:08:c3:62:
         8c:35:ac:ca:05:23:58:51:c5:92:51:17:ee:58:33:e9:d1:7a:
         37:64:9d:e0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDhd0jlnUgSuP4RQoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTIwMTIyMzA1MDAwMFoXDTI2MTIxNjA1MDAwMFowLzEtMCsGA1UEAxMk
YjM0YTk5MTYtMjgzZi00YjA1LTk2MDEtZjVjODJlNGRhNzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopgKPmPYVRMi4ZJ4ZdOludRPhBuwVaHAZee1
EGvbMhy6LulEaL6lfsQ9ppNklrfhL/lkKSLy3cclyq1oV4upV48lOmpXgqA1i39q
4QkHenWGNnLjFPAh4XGBNoI7AlxjqY/QZUHCnjEb5q65x3KDV4EyTXs05NBc8h8/
VeYYUF8z0QZ3Zq9ixjZpYGnKeXS9krSGUj6mK56+EtJ3U4kZxugMUa80uh4ZBYDL
cyR6/qg7YNdJBmpc0DDE1Dh9q+SOu6qB1tGfpC9/ZkLbZrBxgJ/vw/rIHepBr2KG
q4kkKcEfX1yLhzqYFxS8Jggh7x4Sx/dL/AJW3XeZQDSFCOZYMQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOuoOXj7fanKLFd4jkEZJ43liZ6UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNDk5ZWJlZTItYzcxYS0z
NmY5LTg4ZWEtMTZkMTZlYmViMmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBYhwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMDMkgRaE7OAHRrVxSqtzJuIcLyrUhsxVUi9/b/CurmM7xy2nbsesb//r
dhJMfSBdNcOFNuOcAWYNVsJiVMkbuMogjLDplMvwao0muqha8T3wtJNz1lJYa6IJ
Dp8Ih2wg3X58DB4SNxsKkHNX9Ydid5X3K+x1WtgGZA8UbdHjyFzRY5Kr5rOUe7Aj
Wr1XeR8CgE1vqgSf2x3MHHiWu0t7/mPvWskrnI4usfEwDa/1h0r2EuVbNqUgETRq
ytDxEaQHXOS8n5JCw4ByLpHrDrfqbGS1sz0HJX8D9vS1SyPXhdPnLD+xSX9pCMNi
jDWsygUjWFHFklEX7lgz6dF6N2Sd4A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:05 2024 by rpki-client on console-ams.rpki-client.org