Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c245cb4c-690b-33c2-ba01-174af8e4d1c5.roa
File:                     c245cb4c-690b-33c2-ba01-174af8e4d1c5.roa (raw, json)
Hash identifier:          yGZb/CZOLaZBgUpdnTk4GHxERLHvCNokdZnQtCBJlbM=
Subject key identifier:   B7:F3:94:0C:FA:D3:D2:9E:C8:8F:BF:B4:76:D9:FA:C2:51:59:9E:D3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584722A13B54B18252B46DE15B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c245cb4c-690b-33c2-ba01-174af8e4d1c5.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     19115
IP address blocks:        98.8.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:3b:54:b1:82:52:b4:6d:e1:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=8fc0f362-26b8-451e-914f-4e6c81857f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:54:5a:15:0d:9d:c1:d7:ab:41:12:eb:e1:
                    8b:e6:8a:f3:0a:78:ce:41:29:8b:ad:13:b2:61:51:
                    3e:75:1b:74:da:89:e0:e8:3a:0f:d0:0a:52:53:6b:
                    ea:d8:f2:3e:be:a9:ca:90:52:99:c9:e8:56:b9:a6:
                    9a:55:9d:1b:b8:50:c5:ff:75:7d:ec:8b:54:af:e0:
                    98:81:60:5c:dd:2f:29:af:9b:7e:bc:c9:d2:85:75:
                    d0:90:f5:67:eb:39:24:27:f5:6c:40:15:da:8e:d5:
                    a0:21:d4:ed:c2:c6:85:64:67:9b:e6:06:b0:77:42:
                    c9:89:73:72:dc:17:86:15:30:de:85:b0:dc:93:7e:
                    7e:7b:ce:97:b2:3b:b0:a3:26:5f:8c:a0:72:01:2c:
                    e9:dc:ba:b4:fe:58:40:1c:d5:e3:71:be:f0:c5:7a:
                    2f:78:ea:5f:0d:cf:ba:79:f4:2a:40:87:14:ec:3f:
                    d4:8e:37:a7:77:b8:5f:98:7e:82:12:a1:d7:bd:08:
                    f9:9d:33:bf:17:45:4d:34:a4:dc:30:5f:44:dd:16:
                    69:70:60:7e:3a:d7:6c:08:8d:7f:fa:ec:c9:ff:a6:
                    13:91:50:3b:52:65:3a:cd:63:e5:be:fd:a4:7f:6a:
                    0b:90:43:28:be:6f:a5:b3:72:03:19:b7:86:7f:1e:
                    62:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F3:94:0C:FA:D3:D2:9E:C8:8F:BF:B4:76:D9:FA:C2:51:59:9E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c245cb4c-690b-33c2-ba01-174af8e4d1c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.8.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:17:91:49:96:70:bf:59:25:62:2d:53:cd:a5:0b:99:d2:74:
         b4:84:6d:d5:0a:a9:a0:e0:1c:c6:2a:70:21:fa:e8:bb:d3:b1:
         ad:88:eb:d7:76:09:1c:1b:28:c6:e4:b0:c0:fc:34:37:be:7d:
         20:cf:70:d4:87:87:b0:c9:eb:84:92:7f:ed:de:cc:e2:41:13:
         72:88:d1:f2:01:51:e5:7c:54:9e:4b:c4:5c:4c:e7:2b:ce:49:
         88:c5:0f:dc:ee:e6:81:1d:e3:f5:86:61:e6:e6:dc:02:ab:7a:
         3e:c7:e6:47:de:bd:8f:fb:b1:42:80:60:53:6c:96:23:c0:dd:
         bf:52:36:01:9f:ad:db:b3:a7:4a:d2:ed:2c:57:95:41:00:c0:
         92:20:7a:46:e6:fb:cb:98:31:a8:21:8b:2e:0f:d2:50:05:6c:
         15:5f:8e:75:ae:42:3f:a7:7d:e7:c6:a6:4c:fe:63:8a:94:ae:
         50:e8:37:d0:f1:cf:79:a1:75:f6:1c:a2:ad:46:f7:04:39:96:
         24:e6:f2:06:6d:3c:4e:50:5d:47:3a:3b:ad:bf:48:3b:96:0b:
         89:36:c1:23:bc:ee:bd:e8:a3:be:64:bd:19:44:e0:8d:9e:01:
         9b:73:1e:62:cf:6d:77:cd:c7:69:55:c5:0c:fc:20:bb:d7:df:
         d3:9f:a7:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcioTtUsYJStG3hWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI0MDkwNzEzMDA0MVoXDTI0MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
OGZjMGYzNjItMjZiOC00NTFlLTkxNGYtNGU2YzgxODU3Zjg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqhUWhUNncHXq0ES6+GL5orzCnjOQSmLrROy
YVE+dRt02ong6DoP0ApSU2vq2PI+vqnKkFKZyehWuaaaVZ0buFDF/3V97ItUr+CY
gWBc3S8pr5t+vMnShXXQkPVn6zkkJ/VsQBXajtWgIdTtwsaFZGeb5gawd0LJiXNy
3BeGFTDehbDck35+e86XsjuwoyZfjKByASzp3Lq0/lhAHNXjcb7wxXoveOpfDc+6
efQqQIcU7D/Ujjend7hfmH6CEqHXvQj5nTO/F0VNNKTcMF9E3RZpcGB+OtdsCI1/
+uzJ/6YTkVA7UmU6zWPlvv2kf2oLkEMovm+ls3IDGbeGfx5iRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLfzlAz609KeyI+/tHbZ+sJRWZ7TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYzI0NWNiNGMtNjkwYi0z
M2MyLWJhMDEtMTc0YWY4ZTRkMWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYggkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgXkUmWcL9ZJWItU82lC5nSdLSEbdUKqaDgHMYqcCH66LvTsa2I69d2
CRwbKMbksMD8NDe+fSDPcNSHh7DJ64SSf+3ezOJBE3KI0fIBUeV8VJ5LxFxM5yvO
SYjFD9zu5oEd4/WGYebm3AKrej7H5kfevY/7sUKAYFNsliPA3b9SNgGfrduzp0rS
7SxXlUEAwJIgekbm+8uYMaghiy4P0lAFbBVfjnWuQj+nfefGpkz+Y4qUrlDoN9Dx
z3mhdfYcoq1G9wQ5liTm8gZtPE5QXUc6O62/SDuWC4k2wSO87r3oo75kvRlE4I2e
AZtzHmLPbXfNx2lVxQz8ILvX39OfpxU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:36 2024 by rpki-client on console-fra.rpki-client.org