Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84617fef-aed5-300e-856b-34d46debd9aa.roa
File:                     84617fef-aed5-300e-856b-34d46debd9aa.roa (raw, json)
Hash identifier:          gpPYDruf1uOkdHDpn6ubd1egl1QVR0RXAc0o7dnqXow=
Subject key identifier:   DC:00:82:8C:0E:69:99:F3:82:05:30:57:3E:4E:00:3B:5F:C7:F6:CE
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285847D29F8218C9291432EC651B80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84617fef-aed5-300e-856b-34d46debd9aa.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     174
IP address blocks:        198.16.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:82:18:c9:29:14:32:ec:65:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=3ca5ea79-d089-426b-a051-4c939d2e0a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ea:c3:4a:ee:e0:90:3d:a6:21:56:71:75:4c:
                    2f:4f:6d:22:20:71:21:28:94:a7:c3:44:22:f9:67:
                    a8:eb:e9:32:9f:65:51:8a:38:6e:cc:34:d9:4f:fd:
                    ec:ad:30:4e:7a:12:42:c2:67:1b:24:90:e3:f1:f1:
                    25:37:89:23:91:3b:bf:43:36:bc:6c:9e:f5:b6:59:
                    9a:1d:3e:ec:76:e6:1e:05:7b:83:12:5d:cf:bc:a0:
                    da:15:c2:02:36:74:b0:72:8b:95:9c:33:cf:13:70:
                    de:64:3a:85:39:f1:ec:00:1e:ee:a7:85:00:a0:47:
                    70:e7:c4:cf:ff:5a:4f:51:90:e7:82:83:6f:66:70:
                    6e:fa:68:55:b0:5a:de:50:e5:69:fb:84:6e:97:ad:
                    20:4e:50:ef:16:99:54:32:11:00:8b:32:8e:b3:c0:
                    90:67:92:05:26:94:16:6b:f9:30:e6:f6:c3:ec:31:
                    b3:28:99:e6:d4:94:c4:e8:7c:bd:51:d0:50:17:1a:
                    b6:44:23:a1:98:10:c9:5f:97:ec:f9:b8:e0:c5:6f:
                    ef:b1:24:e6:0a:35:98:ad:d9:51:d9:0c:f9:7a:73:
                    5f:62:c3:c5:bc:58:93:a4:f5:6e:9a:8b:df:73:2b:
                    ca:2c:e6:a0:2d:17:79:44:99:c4:6e:8b:39:9e:4d:
                    fe:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:00:82:8C:0E:69:99:F3:82:05:30:57:3E:4E:00:3B:5F:C7:F6:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84617fef-aed5-300e-856b-34d46debd9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.16.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:97:5b:d0:ec:7f:88:4e:75:5b:03:2f:61:b2:ab:c8:90:be:
         ea:38:46:54:8e:ec:05:61:40:e9:52:4f:3a:7d:76:8c:f5:5c:
         06:22:b9:50:81:81:2d:ee:cd:e8:f6:4d:11:b9:bb:23:5b:c5:
         82:7a:bd:d5:ae:a9:02:ee:a5:c6:34:27:e8:af:fb:0c:c0:f4:
         a7:76:11:a4:26:0f:65:1c:d8:85:d5:3a:52:12:3b:5c:b2:62:
         8b:ab:c3:fd:d9:a4:9e:42:c9:29:39:ca:88:3c:dc:f3:86:78:
         70:d0:35:7e:c5:21:93:91:57:dd:e7:a7:a4:ac:50:bb:c2:c0:
         2f:79:1a:0e:04:ee:a2:48:7c:4e:ea:02:f3:10:8c:ba:a9:75:
         66:5d:4b:c8:0a:94:9e:a7:ed:dc:e9:06:57:8e:cb:df:bf:b9:
         71:63:d8:5c:49:01:13:2f:8c:91:e1:26:30:9c:50:3c:57:3c:
         81:60:9b:1e:eb:41:e3:29:88:0b:f0:49:41:94:6a:05:a7:5e:
         7a:ba:bc:c5:b0:70:7c:69:f7:8d:1c:9c:cc:b0:d3:f4:b5:f9:
         06:86:08:9f:e1:b0:c9:1c:70:36:20:22:61:60:61:c7:87:36:
         45:e9:df:56:13:42:e3:a6:f2:0d:9b:c3:43:e1:f3:38:4a:cf:
         6b:e6:44:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfSn4IYySkUMuxlG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI0MTEwOTE0MDA0MFoXDTI1MDIwNzE0MDA0MFowLzEtMCsGA1UEAxMk
M2NhNWVhNzktZDA4OS00MjZiLWEwNTEtNGM5MzlkMmUwYTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOrDSu7gkD2mIVZxdUwvT20iIHEhKJSnw0Qi
+Weo6+kyn2VRijhuzDTZT/3srTBOehJCwmcbJJDj8fElN4kjkTu/Qza8bJ71tlma
HT7sduYeBXuDEl3PvKDaFcICNnSwcouVnDPPE3DeZDqFOfHsAB7up4UAoEdw58TP
/1pPUZDngoNvZnBu+mhVsFreUOVp+4Rul60gTlDvFplUMhEAizKOs8CQZ5IFJpQW
a/kw5vbD7DGzKJnm1JTE6Hy9UdBQFxq2RCOhmBDJX5fs+bjgxW/vsSTmCjWYrdlR
2Qz5enNfYsPFvFiTpPVumovfcyvKLOagLRd5RJnEbos5nk3++wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNwAgowOaZnzggUwVz5OADtfx/bOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvODQ2MTdmZWYtYWVkNS0z
MDBlLTg1NmItMzRkNDZkZWJkOWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxhBYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGeXW9Dsf4hOdVsDL2Gyq8iQvuo4RlSO7AVhQOlSTzp9doz1XAYiuVCB
gS3uzej2TRG5uyNbxYJ6vdWuqQLupcY0J+iv+wzA9Kd2EaQmD2Uc2IXVOlISO1yy
Yourw/3ZpJ5CySk5yog83POGeHDQNX7FIZORV93np6SsULvCwC95Gg4E7qJIfE7q
AvMQjLqpdWZdS8gKlJ6n7dzpBleOy9+/uXFj2FxJARMvjJHhJjCcUDxXPIFgmx7r
QeMpiAvwSUGUagWnXnq6vMWwcHxp940cnMyw0/S1+QaGCJ/hsMkccDYgImFgYceH
NkXp31YTQuOm8g2bw0Ph8zhKz2vmROQ=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:06 2024 by rpki-client on console-ams.rpki-client.org