Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c95177a4-9ed4-315d-96d5-2797939b3f4a.roa
File:                     c95177a4-9ed4-315d-96d5-2797939b3f4a.roa (raw, json)
Hash identifier:          wDhHaEv8VSU6HJs0h1+ZJdUAKbqlFEJOapp0NfY/91o=
Subject key identifier:   03:ED:36:97:8F:DF:18:C4:A6:9F:42:FC:93:27:25:A9:02:65:97:2A
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F432858476B3646809115965C076E1980
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c95177a4-9ed4-315d-96d5-2797939b3f4a.roa
Signing time:             Thu 03 Oct 2024 13:00:41 +0000
ROA not before:           Thu 03 Oct 2024 13:00:41 +0000
ROA not after:            Wed 01 Jan 2025 14:00:41 +0000
asID:                     14192
IP address blocks:        198.150.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:36:46:80:91:15:96:5c:07:6e:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Oct  3 13:00:41 2024 GMT
            Not After : Jan  1 14:00:41 2025 GMT
        Subject: CN=1efa2d98-5992-4c0a-94a0-425ff79ca1f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:f8:94:09:9a:e6:df:e0:83:71:c3:ff:c4:
                    03:b5:f1:4e:3a:54:06:f3:6a:29:e8:cd:b7:15:0b:
                    23:2f:bd:a4:1c:68:af:fb:e0:59:a4:2f:d7:3b:f8:
                    1d:41:eb:b2:c5:83:81:ec:42:47:35:b1:41:03:dc:
                    15:03:d6:de:da:dd:2c:1b:29:d8:9d:78:60:cf:0b:
                    a5:34:53:ab:d6:dc:93:be:58:39:96:0e:40:fd:0c:
                    fe:65:69:17:73:13:1e:dc:4f:26:9c:ee:1f:09:6f:
                    91:4f:6b:e5:78:b7:b2:b6:93:1f:e8:e9:a6:bb:5b:
                    84:d1:4e:b7:9d:cf:9a:68:f5:f3:32:2f:9b:cf:6d:
                    76:f4:db:f0:e2:29:a6:0a:53:96:85:53:2e:69:54:
                    ae:f8:cc:b0:56:a7:64:db:d3:17:64:87:2d:a9:ab:
                    82:30:30:95:8f:b4:44:72:96:6b:1b:2c:ad:0b:10:
                    eb:ef:8b:a6:da:3a:37:f1:52:b7:73:f6:b1:6c:6a:
                    b7:fc:77:cf:43:4a:10:91:3d:80:5a:c3:f1:1c:21:
                    e5:98:d4:f6:d6:52:7a:7a:34:28:ea:f4:09:15:2a:
                    37:0a:d5:3b:70:3b:8a:fa:d5:21:d4:22:44:be:00:
                    15:db:71:7f:63:ce:be:a9:3b:90:8e:9a:ec:c0:a0:
                    2d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:ED:36:97:8F:DF:18:C4:A6:9F:42:FC:93:27:25:A9:02:65:97:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c95177a4-9ed4-315d-96d5-2797939b3f4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f0:26:29:46:93:63:1e:b2:4c:0d:d4:22:a2:09:0c:5a:3a:
         84:62:1b:96:14:b3:74:3d:15:50:76:41:f0:ea:c1:01:86:7b:
         ac:9c:1d:ea:24:f6:b0:3e:4e:8b:a8:db:a5:8b:54:5b:30:11:
         31:2f:d2:3d:d4:8e:0d:8b:54:da:34:8e:b2:cf:cc:2a:79:07:
         d3:f8:40:fb:65:d2:73:ae:bc:36:ef:ad:4d:a4:b3:a2:92:96:
         d7:5c:17:af:a8:7b:a9:4c:78:37:04:38:16:e2:a2:66:1c:c0:
         87:c8:f6:4e:39:eb:20:9a:49:65:06:0d:30:50:14:6f:ff:e0:
         71:42:69:d9:c2:5e:4f:49:52:c2:69:a3:79:67:66:0e:7c:4a:
         b7:90:f9:28:d2:01:48:4e:3d:99:78:0c:84:d7:a6:22:d4:f4:
         f8:65:4b:63:43:cd:87:ac:e1:c9:c7:2f:b8:e4:17:49:3e:71:
         63:6b:b9:aa:2e:09:71:97:f2:dc:5f:8c:19:72:f3:1c:a8:6c:
         03:c6:f5:23:f0:2d:ee:ef:55:ed:32:6a:78:22:6d:19:0d:4d:
         65:11:db:62:28:87:f2:b5:8a:53:2f:4f:e3:30:6a:36:ac:76:
         2a:e2:76:26:8b:d3:fd:88:6d:c2:ee:68:8d:de:05:db:4d:a3:
         e5:ab:20:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdrNkaAkRWWXAduGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4
NDc5MB4XDTI0MTAwMzEzMDA0MVoXDTI1MDEwMTE0MDA0MVowLzEtMCsGA1UEAxMk
MWVmYTJkOTgtNTk5Mi00YzBhLTk0YTAtNDI1ZmY3OWNhMWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoz4lAma5t/gg3HD/8QDtfFOOlQG82op6M23
FQsjL72kHGiv++BZpC/XO/gdQeuyxYOB7EJHNbFBA9wVA9be2t0sGynYnXhgzwul
NFOr1tyTvlg5lg5A/Qz+ZWkXcxMe3E8mnO4fCW+RT2vleLeytpMf6Ommu1uE0U63
nc+aaPXzMi+bz2129Nvw4immClOWhVMuaVSu+MywVqdk29MXZIctqauCMDCVj7RE
cpZrGyytCxDr74um2jo38VK3c/axbGq3/HfPQ0oQkT2AWsPxHCHlmNT21lJ6ejQo
6vQJFSo3CtU7cDuK+tUh1CJEvgAV23F/Y86+qTuQjprswKAtaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAPtNpeP3xjEpp9C/JMnJakCZZcqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz
Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvYzk1MTc3YTQtOWVkNC0z
MTVkLTk2ZDUtMjc5NzkzOWIzZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5
ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0
ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz
Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpZdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXwJilGk2MeskwN1CKiCQxaOoRiG5YUs3Q9FVB2QfDqwQGGe6ycHeok
9rA+Touo26WLVFswETEv0j3Ujg2LVNo0jrLPzCp5B9P4QPtl0nOuvDbvrU2ks6KS
ltdcF6+oe6lMeDcEOBbiomYcwIfI9k456yCaSWUGDTBQFG//4HFCadnCXk9JUsJp
o3lnZg58SreQ+SjSAUhOPZl4DITXpiLU9PhlS2NDzYes4cnHL7jkF0k+cWNruaou
CXGX8txfjBly8xyobAPG9SPwLe7vVe0yangibRkNTWUR22Ioh/K1ilMvT+Mwajas
diridiaL0/2IbcLuaI3eBdtNo+WrIJM=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:03 2024 by rpki-client on console-ams.rpki-client.org