Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5e6d856-a0a9-3273-8466-54b9fac287ab.roa
File:                     a5e6d856-a0a9-3273-8466-54b9fac287ab.roa (raw, json)
Hash identifier:          s6jN60/r9/h1d6+x7mvZLNP5CaCTX/8WO3vcKcCnPoQ=
Subject key identifier:   4A:1C:92:37:CE:A5:94:46:B8:A6:DC:2D:B7:52:25:4B:AD:87:47:C7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858459368B10F5AC4DD802C64F880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5e6d856-a0a9-3273-8466-54b9fac287ab.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     701
IP address blocks:        98.111.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:b1:0f:5a:c4:dd:80:2c:64:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=2c7f8de2-eabd-40b1-976c-7f3898248a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b5:d2:0d:51:ed:7c:08:b9:b9:17:96:01:1e:
                    f6:45:ed:db:c0:2b:f4:35:e3:ab:cc:5a:d7:24:8c:
                    63:5b:37:61:cd:c3:92:34:77:9c:6a:4d:4e:da:56:
                    78:56:78:c9:91:50:fc:08:73:d3:f1:ff:41:bb:ea:
                    fc:12:0b:c2:b3:46:9a:57:64:91:a9:62:6d:ae:e4:
                    45:96:36:b9:11:a3:41:44:c1:c3:f7:92:c8:8e:40:
                    f6:d4:43:2f:da:52:11:ef:98:35:9f:bd:c5:10:80:
                    17:1c:8e:66:51:14:9c:f7:46:05:ed:6b:af:c2:e5:
                    f8:9c:83:76:8c:0b:db:bf:98:6d:79:bf:c4:86:1d:
                    72:f3:fa:b7:f7:55:08:f9:31:01:4b:b5:1a:52:46:
                    d4:29:83:ed:c1:20:41:31:29:1b:da:7c:e0:1f:a4:
                    1e:22:b5:15:37:d2:1a:f6:2d:c8:a4:cb:92:70:e7:
                    58:95:d7:7c:7a:9e:0f:f4:a9:3b:c7:85:cb:8b:b5:
                    e6:2b:8c:06:9c:21:78:a6:ba:e8:73:c5:63:50:ed:
                    a9:cb:8e:7f:19:af:76:ba:e4:b8:14:9d:48:5a:51:
                    9c:09:49:a3:85:67:4f:3c:82:63:c1:80:bb:9f:a5:
                    73:3d:06:78:ba:ac:bd:47:de:44:d9:0f:8d:da:8d:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1C:92:37:CE:A5:94:46:B8:A6:DC:2D:B7:52:25:4B:AD:87:47:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5e6d856-a0a9-3273-8466-54b9fac287ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.111.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:cb:8e:eb:f1:6d:eb:a6:9c:b9:1b:37:ab:05:64:b5:82:
         34:27:cb:ea:5d:21:64:7f:36:35:79:88:c8:4f:1c:28:ff:7f:
         da:e9:9f:4f:9e:38:e6:6d:99:06:37:21:5a:13:2d:68:e3:31:
         f8:37:37:c8:1b:e2:65:5e:9e:f3:48:6a:c7:11:80:34:57:b6:
         a2:d9:5f:89:d0:67:8b:3b:b7:6e:0f:f2:1b:65:ac:d4:a8:3b:
         2e:f1:06:0c:d5:5b:b1:eb:74:c7:30:f7:b4:74:2c:0c:d9:a3:
         89:68:f4:66:ea:ab:d6:05:69:0e:2f:10:53:70:27:b9:d4:fb:
         c2:ab:2d:1c:cd:46:70:c7:b6:4f:35:86:a6:19:b5:c2:6e:53:
         c7:44:2f:be:c0:bd:79:4f:99:ef:13:40:4a:1c:5c:92:3d:5a:
         25:70:2e:6f:17:e0:3b:dc:c6:75:38:24:c5:ee:f2:13:25:b0:
         9c:1a:93:26:a0:a2:de:25:89:72:74:cb:94:2a:9c:3b:bd:e6:
         00:6b:ad:2b:3e:43:19:71:8c:d8:a0:70:45:10:21:ad:f4:22:
         2e:26:e3:68:7f:34:36:45:55:f1:c1:38:6c:da:5b:5d:6b:ee:
         e9:d5:1c:c2:63:40:8c:61:00:42:7f:fa:20:5f:7c:dc:33:ca:
         89:1c:b6:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaLEPWsTdgCxk+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk
MmM3ZjhkZTItZWFiZC00MGIxLTk3NmMtN2YzODk4MjQ4YTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7XSDVHtfAi5uReWAR72Re3bwCv0NeOrzFrX
JIxjWzdhzcOSNHecak1O2lZ4VnjJkVD8CHPT8f9Bu+r8EgvCs0aaV2SRqWJtruRF
lja5EaNBRMHD95LIjkD21EMv2lIR75g1n73FEIAXHI5mURSc90YF7WuvwuX4nIN2
jAvbv5hteb/Ehh1y8/q391UI+TEBS7UaUkbUKYPtwSBBMSkb2nzgH6QeIrUVN9Ia
9i3IpMuScOdYldd8ep4P9Kk7x4XLi7XmK4wGnCF4prroc8VjUO2py45/Ga92uuS4
FJ1IWlGcCUmjhWdPPIJjwYC7n6VzPQZ4uqy9R95E2Q+N2o0BDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEockjfOpZRGuKbcLbdSJUuth0fHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTVlNmQ4NTYtYTBhOS0z
MjczLTg0NjYtNTRiOWZhYzI4N2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYm+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH39y47r8W3rppy5GzerBWS1gjQny+pdIWR/NjV5iMhPHCj/f9rpn0+e
OOZtmQY3IVoTLWjjMfg3N8gb4mVenvNIascRgDRXtqLZX4nQZ4s7t24P8htlrNSo
Oy7xBgzVW7HrdMcw97R0LAzZo4lo9Gbqq9YFaQ4vEFNwJ7nU+8KrLRzNRnDHtk81
hqYZtcJuU8dEL77AvXlPme8TQEocXJI9WiVwLm8X4DvcxnU4JMXu8hMlsJwakyag
ot4liXJ0y5QqnDu95gBrrSs+QxlxjNigcEUQIa30Ii4m42h/NDZFVfHBOGzaW11r
7unVHMJjQIxhAEJ/+iBffNwzyokcttE=
-----END CERTIFICATE-----
Generated at Thu May 9 01:33:27 2024 by rpki-client on console-fra.rpki-client.org