Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/60f3757a-0ff5-3f1f-8663-0bfc2a144b54.roa
File:                     60f3757a-0ff5-3f1f-8663-0bfc2a144b54.roa (raw, json)
Hash identifier:          4Y2ptDN9WbhZP8wEDmK2P/D32HJEkPF2V2xp9uVk1BA=
Subject key identifier:   D8:95:C0:F0:83:96:4A:F0:1F:9C:D8:D5:73:DD:67:86:CB:62:D6:DD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628E6EC9BEDD1FC0588AB0C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/60f3757a-0ff5-3f1f-8663-0bfc2a144b54.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20001
IP address blocks:        98.155.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:6e:c9:be:dd:1f:c0:58:8a:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=08bf2804-43dd-46f3-98fc-d8e4729b6dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:cd:1e:e1:be:cc:1a:43:05:f2:8a:e7:55:
                    cc:9a:2f:3c:3b:22:6c:42:7e:8f:8f:d3:97:b9:3a:
                    ba:ce:f1:8d:09:37:ba:38:44:23:4f:fe:59:18:30:
                    3b:f3:e0:2d:8f:96:e1:89:d8:de:6d:d5:08:fa:aa:
                    e0:48:f7:cf:f8:a5:20:99:52:42:91:f2:38:1a:ed:
                    21:5b:b4:4a:18:76:e7:9e:9b:2f:a7:01:b8:8f:31:
                    3a:72:8c:5f:40:40:6f:9f:3c:fc:04:6c:f0:a2:6f:
                    1d:83:ea:76:23:5c:ff:40:ef:84:89:40:92:f7:1e:
                    a2:d1:ca:d3:36:a2:3f:62:08:59:61:76:53:4b:7a:
                    4d:b2:50:43:3a:cf:7d:bb:8e:0c:6b:6c:a3:1f:80:
                    d3:a4:b8:6c:35:4b:76:74:ff:ca:09:21:0b:c6:de:
                    5a:02:e4:d3:11:e2:3b:6a:05:48:0c:27:dd:a9:56:
                    12:fa:c0:82:71:ca:39:30:27:bf:74:50:b7:d6:20:
                    81:9b:54:5b:3b:44:96:10:d0:1b:d4:40:92:b2:e3:
                    ff:fa:82:f1:ff:0b:d9:07:58:8f:de:08:2d:c5:95:
                    a0:d7:a9:05:47:d1:29:f8:e4:21:a6:1a:71:cf:8d:
                    48:a7:b0:ae:8d:8e:04:c0:a3:1d:69:80:38:72:46:
                    10:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:95:C0:F0:83:96:4A:F0:1F:9C:D8:D5:73:DD:67:86:CB:62:D6:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/60f3757a-0ff5-3f1f-8663-0bfc2a144b54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.155.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a8:03:02:8f:bb:14:fc:ee:05:4c:05:fb:5e:65:26:2f:1b:
         75:aa:5e:33:ae:82:c1:b0:a4:43:23:b1:8b:f6:a2:b4:db:2b:
         bf:10:e0:6c:57:ba:50:de:ac:a1:4c:a3:3a:dc:ae:a0:85:f5:
         28:74:ac:a4:12:a2:a6:75:3f:d8:20:04:6b:49:70:ba:29:61:
         b6:78:6f:d7:7c:19:a8:a0:91:18:55:a2:5a:2d:e4:97:ff:5c:
         f3:78:7b:d4:8d:8b:98:6d:49:a0:37:da:30:ac:58:5d:31:6a:
         e2:7b:66:1d:0e:0a:1a:69:15:78:31:3b:4f:db:9a:12:8d:3d:
         1c:98:c5:77:12:07:cb:e8:d1:3e:11:3a:5d:78:69:b6:6b:21:
         fd:46:5e:51:80:9d:7f:a3:54:c3:c9:f5:62:7d:82:1c:e5:d1:
         ce:2c:ef:25:bd:59:03:b7:4d:88:e0:d1:29:af:ed:2a:77:1c:
         51:43:fe:e6:7e:52:b1:32:80:4b:20:b3:75:a7:00:67:64:83:
         45:cf:2a:10:f2:64:4c:89:43:5a:c2:85:16:2c:a5:17:4f:01:
         97:35:1d:cb:de:36:90:cc:5d:00:11:ef:72:bf:58:cb:d7:16:
         4e:74:82:25:aa:09:ce:8b:f7:40:96:c0:fa:13:ba:a0:fc:64:
         88:8f:61:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijm7Jvt0fwFiKsMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
MDhiZjI4MDQtNDNkZC00NmYzLTk4ZmMtZDhlNDcyOWI2ZGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEnNHuG+zBpDBfKK51XMmi88OyJsQn6Pj9OX
uTq6zvGNCTe6OEQjT/5ZGDA78+Atj5bhidjebdUI+qrgSPfP+KUgmVJCkfI4Gu0h
W7RKGHbnnpsvpwG4jzE6coxfQEBvnzz8BGzwom8dg+p2I1z/QO+EiUCS9x6i0crT
NqI/YghZYXZTS3pNslBDOs99u44Ma2yjH4DTpLhsNUt2dP/KCSELxt5aAuTTEeI7
agVIDCfdqVYS+sCCcco5MCe/dFC31iCBm1RbO0SWENAb1ECSsuP/+oLx/wvZB1iP
3ggtxZWg16kFR9Ep+OQhphpxz41Ip7CujY4EwKMdaYA4ckYQxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNiVwPCDlkrwH5zY1XPdZ4bLYtbdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNjBmMzc1N2EtMGZmNS0z
ZjFmLTg2NjMtMGJmYzJhMTQ0YjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYpsAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWoAwKPuxT87gVMBfteZSYvG3WqXjOugsGwpEMjsYv2orTbK78Q4GxX
ulDerKFMozrcrqCF9Sh0rKQSoqZ1P9ggBGtJcLopYbZ4b9d8GaigkRhVolot5Jf/
XPN4e9SNi5htSaA32jCsWF0xauJ7Zh0OChppFXgxO0/bmhKNPRyYxXcSB8vo0T4R
Ol14abZrIf1GXlGAnX+jVMPJ9WJ9ghzl0c4s7yW9WQO3TYjg0Smv7Sp3HFFD/uZ+
UrEygEsgs3WnAGdkg0XPKhDyZEyJQ1rChRYspRdPAZc1HcveNpDMXQAR73K/WMvX
Fk50giWqCc6L90CWwPoTuqD8ZIiPYeo=
-----END CERTIFICATE-----
Generated at Wed May 1 15:56:01 2024 by rpki-client on console-ams.rpki-client.org