Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/98339d1e-93c9-3515-ac59-aaed66353d77.roa
File:                     98339d1e-93c9-3515-ac59-aaed66353d77.roa (raw, json)
Hash identifier:          fqTl4Fq/QKX23Kq/Gy2sGeGZCh8ggqGIc/aOTg5RDdo=
Subject key identifier:   11:C0:8D:61:4E:DA:F9:7F:0B:29:1B:38:F8:6E:46:EE:0E:20:A8:6B
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F432858451A1587D4B11FB745087FFDE0
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/98339d1e-93c9-3515-ac59-aaed66353d77.roa
Signing time:             Tue 05 Mar 2024 02:00:26 +0000
ROA not before:           Tue 05 Mar 2024 02:00:26 +0000
ROA not after:            Mon 03 Jun 2024 01:00:26 +0000
asID:                     1239
IP address blocks:        104.153.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:15:87:d4:b1:1f:b7:45:08:7f:fd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Mar  5 02:00:26 2024 GMT
            Not After : Jun  3 01:00:26 2024 GMT
        Subject: CN=a640cbc1-471a-43d5-aaf3-022d3bde715a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:99:20:cb:8a:d5:82:11:cf:d2:49:9c:f9:
                    cc:15:e3:07:94:2d:bd:3f:e2:52:d8:0f:25:0e:9a:
                    9f:46:ae:87:1b:b3:df:d2:bf:e1:54:69:ad:7f:b2:
                    90:0b:08:66:49:79:5d:9a:fe:81:31:c8:a1:40:9b:
                    18:35:13:e5:0c:fc:9e:05:e7:a9:b2:12:22:c5:f3:
                    ad:1c:24:9d:d3:98:11:4a:0e:21:16:42:21:37:d2:
                    da:dc:f0:fc:f1:a4:80:b0:04:9a:12:f0:27:67:2d:
                    57:bc:e5:70:29:06:ba:00:ef:1f:9f:86:39:8a:62:
                    41:6e:02:a7:b1:31:93:f9:ad:a5:f6:60:38:c0:9a:
                    40:18:7d:87:31:f1:f7:67:92:da:72:8a:a8:3f:a0:
                    66:3d:47:4a:ee:5f:fe:90:59:03:4e:ce:c7:9b:ca:
                    b2:49:da:0e:5c:23:39:1e:c7:bc:79:43:45:58:cf:
                    c8:e7:22:96:b0:20:bc:15:49:30:86:cb:0a:ea:b5:
                    71:79:8b:d2:5e:c9:ed:19:d3:9c:a2:1e:f9:97:33:
                    fa:f6:ad:66:38:39:94:6a:44:f7:c2:48:c0:05:d2:
                    ae:e9:b1:19:a1:d6:ba:3e:8a:f1:d5:50:3c:ae:1e:
                    7c:e8:47:75:25:0f:81:ea:3d:3c:73:07:22:d9:e6:
                    88:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C0:8D:61:4E:DA:F9:7F:0B:29:1B:38:F8:6E:46:EE:0E:20:A8:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/98339d1e-93c9-3515-ac59-aaed66353d77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.153.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:94:82:89:85:a9:35:b9:3a:78:f6:38:c1:19:23:8c:cd:3a:
         8e:1c:72:7d:20:0c:d5:64:1b:24:ba:8b:20:de:bc:fd:42:c7:
         2d:54:12:69:16:e7:92:53:ef:44:70:5b:3b:fb:63:7f:68:b4:
         c1:21:6b:d6:cd:7e:75:b3:c3:95:96:57:87:36:05:d0:24:59:
         f8:07:26:3b:2c:9f:06:c9:c4:1a:46:43:f4:94:04:1b:6b:c0:
         36:15:a5:87:5c:46:14:72:dc:2d:d3:ab:ea:ee:49:62:7f:72:
         a1:a2:dd:20:5b:ae:5f:30:85:c4:12:c7:c3:0f:8a:65:e5:a3:
         fc:bd:13:f0:a6:ef:fc:2b:86:f6:c2:54:71:d2:83:0a:25:93:
         12:2e:de:df:5b:17:84:0b:da:5b:99:41:07:17:57:d2:f0:5a:
         ee:bc:7a:42:ef:b3:c8:a1:0f:ca:28:06:89:4c:d1:1c:c9:63:
         66:66:23:18:2a:e6:ed:d7:2b:22:b2:74:08:c3:8a:8a:25:4b:
         de:e4:34:66:97:28:5d:6b:ac:62:56:61:e9:1d:7f:18:e6:52:
         01:ca:5c:04:14:d5:96:52:6a:88:ed:59:f6:5a:da:ce:c3:c8:
         d6:09:c0:01:4d:1b:88:2c:0c:61:21:61:b0:16:87:d9:2a:ce:
         98:55:1c:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUaFYfUsR+3RQh//eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTVjOWFmNGEtZTJlNC00ZmI5LTlmNTMtODY5Yzg3NzEw
ZTMxMB4XDTI0MDMwNTAyMDAyNloXDTI0MDYwMzAxMDAyNlowLzEtMCsGA1UEAxMk
YTY0MGNiYzEtNDcxYS00M2Q1LWFhZjMtMDIyZDNiZGU3MTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw02ZIMuK1YIRz9JJnPnMFeMHlC29P+JS2A8l
DpqfRq6HG7Pf0r/hVGmtf7KQCwhmSXldmv6BMcihQJsYNRPlDPyeBeepshIixfOt
HCSd05gRSg4hFkIhN9La3PD88aSAsASaEvAnZy1XvOVwKQa6AO8fn4Y5imJBbgKn
sTGT+a2l9mA4wJpAGH2HMfH3Z5LacoqoP6BmPUdK7l/+kFkDTs7Hm8qySdoOXCM5
Hse8eUNFWM/I5yKWsCC8FUkwhssK6rVxeYvSXsntGdOcoh75lzP69q1mODmUakT3
wkjABdKu6bEZoda6Porx1VA8rh586Ed1JQ+B6j08cwci2eaIHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBHAjWFO2vl/CykbOPhuRu4OIKhrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5
YWY0YS1lMmU0LTRmYjktOWY1My04NjljODc3MTBlMzEvOTgzMzlkMWUtOTNjOS0z
NTE1LWFjNTktYWFlZDY2MzUzZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTVjOWFmNGEtZTJlNC00ZmI5LTlm
NTMtODY5Yzg3NzEwZTMxLzU1YzlhZjRhLWUyZTQtNGZiOS05ZjUzLTg2OWM4Nzcx
MGUzMS5jcmwwHwYDVR0jBBgwFoAUzg6k1wXsiaJO1eLQ7FrRxeIdW8YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5YWY0YS1lMmU0LTRmYjktOWY1My04Njlj
ODc3MTBlMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJlTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIeUgomFqTW5Onj2OMEZI4zNOo4ccn0gDNVkGyS6iyDevP1Cxy1UEmkW
55JT70RwWzv7Y39otMEha9bNfnWzw5WWV4c2BdAkWfgHJjssnwbJxBpGQ/SUBBtr
wDYVpYdcRhRy3C3Tq+ruSWJ/cqGi3SBbrl8whcQSx8MPimXlo/y9E/Cm7/wrhvbC
VHHSgwolkxIu3t9bF4QL2luZQQcXV9LwWu68ekLvs8ihD8ooBolM0RzJY2ZmIxgq
5u3XKyKydAjDioolS97kNGaXKF1rrGJWYekdfxjmUgHKXAQU1ZZSaojtWfZa2s7D
yNYJwAFNG4gsDGEhYbAWh9kqzphVHG4=
-----END CERTIFICATE-----
Generated at Thu May 9 15:32:21 2024 by rpki-client on console-fra.rpki-client.org