Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6bc2c048-33b7-36c1-a4de-a549fd8f6e01.roa
File:                     6bc2c048-33b7-36c1-a4de-a549fd8f6e01.roa (raw, json)
Hash identifier:          c/OhUf6tFIkcA+TASkBq2cWuV2hAUDrw1/L08QFpf1k=
Subject key identifier:   FA:7F:A5:26:09:97:12:B8:AC:0D:AD:88:07:12:1C:CF:92:5A:C0:D4
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F43285847362B4D7C227396C7682D9C00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6bc2c048-33b7-36c1-a4de-a549fd8f6e01.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        52.129.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:4d:7c:22:73:96:c7:68:2d:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=348980f2-94a7-4df2-a2a9-493433d6d99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fe:92:8f:48:0c:81:7e:35:62:b3:39:1e:b0:
                    e9:3c:a5:00:ad:5d:e4:3b:74:22:0f:b1:f7:1f:28:
                    7a:69:67:cc:63:f3:0f:37:83:6e:b5:8b:b7:8b:3b:
                    d3:fd:b5:6b:02:de:7e:75:85:a9:93:7e:9f:82:e9:
                    55:08:56:19:aa:68:d8:4a:59:31:ad:fb:4a:dd:a8:
                    e8:53:6a:26:05:01:85:d9:b3:fe:21:57:59:dc:41:
                    82:63:73:82:d0:3e:74:f8:9e:0a:36:37:6f:70:59:
                    ab:d6:c3:f5:48:1a:c5:f9:17:c7:d1:a3:77:85:d3:
                    34:21:e4:00:7e:9e:29:65:ec:05:ac:d5:0f:21:6d:
                    74:8c:10:27:a7:3d:db:1c:28:ee:70:5f:f9:2e:fd:
                    17:33:00:14:8a:8b:2f:8f:a1:0e:71:86:62:06:f3:
                    ff:92:5a:87:0e:c0:5d:3d:33:37:3c:b3:95:41:99:
                    55:f6:ee:65:1f:51:07:39:b5:17:74:4e:bb:08:11:
                    5c:da:2b:54:e6:8f:b3:f9:5c:7c:d1:9f:17:2d:f2:
                    aa:44:08:20:a2:19:47:f8:63:fc:15:b6:0f:7c:d8:
                    d2:ce:10:6f:cf:d9:b0:d8:30:b0:f6:a0:4d:a4:26:
                    8f:43:d4:bc:a3:b8:dc:96:6e:d4:75:c9:30:75:1c:
                    44:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7F:A5:26:09:97:12:B8:AC:0D:AD:88:07:12:1C:CF:92:5A:C0:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/6bc2c048-33b7-36c1-a4de-a549fd8f6e01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:78:5a:b0:7f:04:4b:6d:86:62:ac:ea:98:a2:7e:c4:69:96:
         57:d5:d1:87:ef:83:ff:5b:de:c3:fb:f3:03:32:8d:6c:fe:0e:
         ae:23:88:5e:c9:34:0d:4f:dd:e7:69:95:a2:4a:27:6c:ce:e2:
         2e:eb:45:5d:f9:59:42:44:77:35:0d:98:65:c1:19:72:83:5d:
         90:f5:58:9b:b4:23:ab:fa:f8:a1:5c:c4:a6:fe:06:1e:c0:58:
         e1:3d:da:7c:a1:e1:42:c1:cb:f1:cf:2d:a0:c2:1e:9e:60:87:
         ca:f3:3d:e5:35:0a:ae:48:8c:a6:c9:07:82:60:ab:a4:30:e6:
         a0:11:8a:7b:8e:d7:78:fe:06:e8:b4:14:e3:43:e5:59:10:31:
         d0:a8:7d:9a:73:c7:30:9c:c3:af:0a:a3:c5:3f:03:8d:1f:24:
         a5:01:14:78:a7:ba:4a:50:35:2a:fc:95:13:7e:fa:52:d0:d7:
         35:fa:d2:d9:68:a1:e3:b5:8b:84:86:b5:5d:34:1c:23:a0:00:
         24:69:41:86:6d:04:ac:65:e8:2d:f8:3f:ef:6d:35:c3:e9:14:
         46:d0:d3:04:32:48:0e:96:47:e2:77:45:1a:7e:34:f2:ea:69:
         68:92:b0:5d:9f:4a:06:e6:d2:6f:2e:5c:78:39:d7:0c:be:33:
         af:e7:0c:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2K018InOWx2gtnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk
MzQ4OTgwZjItOTRhNy00ZGYyLWEyYTktNDkzNDMzZDZkOTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP6Sj0gMgX41YrM5HrDpPKUArV3kO3QiD7H3
Hyh6aWfMY/MPN4NutYu3izvT/bVrAt5+dYWpk36fgulVCFYZqmjYSlkxrftK3ajo
U2omBQGF2bP+IVdZ3EGCY3OC0D50+J4KNjdvcFmr1sP1SBrF+RfH0aN3hdM0IeQA
fp4pZewFrNUPIW10jBAnpz3bHCjucF/5Lv0XMwAUiosvj6EOcYZiBvP/klqHDsBd
PTM3PLOVQZlV9u5lH1EHObUXdE67CBFc2itU5o+z+Vx80Z8XLfKqRAggohlH+GP8
FbYPfNjSzhBvz9mw2DCw9qBNpCaPQ9S8o7jclm7UdckwdRxEvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPp/pSYJlxK4rA2tiAcSHM+SWsDUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvNmJjMmMwNDgtMzNiNy0z
NmMxLWE0ZGUtYTU0OWZkOGY2ZTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE14WrB/BEtthmKs6piifsRpllfV0Yfvg/9b3sP78wMyjWz+Dq4jiF7J
NA1P3edplaJKJ2zO4i7rRV35WUJEdzUNmGXBGXKDXZD1WJu0I6v6+KFcxKb+Bh7A
WOE92nyh4ULBy/HPLaDCHp5gh8rzPeU1Cq5IjKbJB4Jgq6Qw5qARinuO13j+Bui0
FOND5VkQMdCofZpzxzCcw68Ko8U/A40fJKUBFHinukpQNSr8lRN++lLQ1zX60tlo
oeO1i4SGtV00HCOgACRpQYZtBKxl6C34P+9tNcPpFEbQ0wQySA6WR+J3RRp+NPLq
aWiSsF2fSgbm0m8uXHg51wy+M6/nDHU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:29 2024 by rpki-client on console-fra.rpki-client.org