Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6affad5b-9910-3b96-a03e-af59f9e303e0.roa
File:                     6affad5b-9910-3b96-a03e-af59f9e303e0.roa (raw, json)
Hash identifier:          /wGq2x3NQxoQdenCZXRy1WppULsaHU5FgctWBuzJ3rA=
Subject key identifier:   D4:60:56:08:A7:1A:52:13:95:12:B7:B5:B9:53:7E:BC:DE:E8:84:EA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628DE12B18D5D5F250B25C80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6affad5b-9910-3b96-a03e-af59f9e303e0.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     40294
IP address blocks:        98.8.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:e1:2b:18:d5:d5:f2:50:b2:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=fda36318-dad4-41e4-8e4c-d0e3db324e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:bc:d8:ce:89:70:25:4f:e9:ae:7a:5e:07:
                    3f:f6:81:f9:a5:8a:f8:ae:7b:ce:9c:08:4f:ed:63:
                    c9:f4:36:07:c0:75:ce:bc:cb:80:1c:69:05:05:d3:
                    c7:c7:93:33:3a:94:b1:6a:fb:9e:2f:78:24:23:70:
                    fa:96:37:87:ef:54:a2:97:c4:64:17:32:40:b1:81:
                    42:02:bd:d3:fd:e3:10:4e:95:d7:d6:30:44:b2:34:
                    40:04:a9:0a:82:ef:42:47:ef:80:81:9f:97:8f:d8:
                    c1:ff:0a:13:44:b5:f5:18:1c:f3:41:ff:7c:53:d5:
                    39:5d:f2:63:b2:4a:cb:67:2c:8a:17:7d:a2:aa:47:
                    e9:d3:29:41:05:97:8f:7f:77:f2:b4:91:2e:c9:a8:
                    1b:aa:e2:04:c2:dd:cb:11:00:36:77:28:97:e2:54:
                    6f:63:7b:ad:10:ac:33:ea:39:a5:74:76:d6:2c:91:
                    ce:38:f7:cc:1d:2f:75:ee:07:2c:92:01:1f:98:db:
                    2f:4d:39:67:8c:58:1a:69:c6:2a:17:a8:4b:1e:42:
                    49:a5:25:0f:3c:e4:c3:6e:3d:ae:fd:c5:61:c5:df:
                    76:d1:5e:b7:07:00:29:d3:ae:0c:e7:c2:23:a8:e4:
                    38:52:d5:66:5e:b0:8a:5a:58:95:18:a6:5c:17:9c:
                    75:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:60:56:08:A7:1A:52:13:95:12:B7:B5:B9:53:7E:BC:DE:E8:84:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6affad5b-9910-3b96-a03e-af59f9e303e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.8.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:2a:e9:46:d8:f3:54:24:d0:52:8f:26:27:53:90:0b:f8:5d:
         0b:ba:aa:7e:83:cb:c7:60:8e:f5:33:26:94:f1:a8:27:b3:9c:
         a3:51:12:2e:6e:c1:22:42:70:15:a9:28:06:26:12:c2:56:94:
         ec:94:fe:06:70:de:7f:a4:3f:3c:07:d5:a4:c4:de:ce:db:31:
         50:a3:02:b2:b4:90:dd:f5:37:8f:7d:7b:c5:9e:1e:aa:5e:c1:
         40:73:4b:33:cd:6b:5e:90:80:a9:4b:b7:74:bf:20:00:e7:8a:
         fd:70:36:5e:4a:5d:8f:b7:bf:c6:8e:b2:4e:ac:b9:bf:0c:b5:
         de:d1:48:ba:6e:72:74:9a:85:bf:7c:61:08:d2:22:f8:fe:a1:
         3c:71:51:74:6f:b9:64:02:e6:a9:58:54:3e:64:d4:a5:ef:33:
         13:a5:c5:9b:12:e7:3c:9b:76:56:2e:aa:b7:08:45:ef:e4:cf:
         39:eb:74:10:94:ce:60:69:03:1f:8e:b9:60:e1:3d:c3:ac:7a:
         e3:ac:16:b1:99:5c:c0:27:fa:9a:ac:b8:61:72:44:cf:4a:83:
         07:bd:b5:96:a8:2d:28:3f:4e:24:a6:44:2d:e6:49:c0:5b:0a:
         e4:a5:38:d5:10:8e:83:a1:58:94:89:5b:80:72:c6:01:9f:c3:
         ef:47:db:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVijeErGNXV8lCyXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDMzMTAxMDAyNloXDTI0MDYyOTAxMDAyNlowLzEtMCsGA1UEAxMk
ZmRhMzYzMTgtZGFkNC00MWU0LThlNGMtZDBlM2RiMzI0ZTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBa82M6JcCVP6a56Xgc/9oH5pYr4rnvOnAhP
7WPJ9DYHwHXOvMuAHGkFBdPHx5MzOpSxavueL3gkI3D6ljeH71Sil8RkFzJAsYFC
Ar3T/eMQTpXX1jBEsjRABKkKgu9CR++AgZ+Xj9jB/woTRLX1GBzzQf98U9U5XfJj
skrLZyyKF32iqkfp0ylBBZePf3fytJEuyagbquIEwt3LEQA2dyiX4lRvY3utEKwz
6jmldHbWLJHOOPfMHS917gcskgEfmNsvTTlnjFgaacYqF6hLHkJJpSUPPOTDbj2u
/cVhxd920V63BwAp064M58IjqOQ4UtVmXrCKWliVGKZcF5x1zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNRgVginGlITlRK3tblTfrze6ITqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNmFmZmFkNWItOTkxMC0z
Yjk2LWEwM2UtYWY1OWY5ZTMwM2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYggsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACcq6UbY81Qk0FKPJidTkAv4XQu6qn6Dy8dgjvUzJpTxqCeznKNREi5u
wSJCcBWpKAYmEsJWlOyU/gZw3n+kPzwH1aTE3s7bMVCjArK0kN31N499e8WeHqpe
wUBzSzPNa16QgKlLt3S/IADniv1wNl5KXY+3v8aOsk6sub8Mtd7RSLpucnSahb98
YQjSIvj+oTxxUXRvuWQC5qlYVD5k1KXvMxOlxZsS5zybdlYuqrcIRe/kzznrdBCU
zmBpAx+OuWDhPcOseuOsFrGZXMAn+pqsuGFyRM9Kgwe9tZaoLSg/TiSmRC3mScBb
CuSlONUQjoOhWJSJW4ByxgGfw+9H2zU=
-----END CERTIFICATE-----
Generated at Thu May 2 04:25:12 2024 by rpki-client on console-fra.rpki-client.org