Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2528e009-2f80-3eba-a987-ae15dd9f9a2e.roa
File:                     2528e009-2f80-3eba-a987-ae15dd9f9a2e.roa (raw, json)
Hash identifier:          jKi5mBiD7hqUslaE2RUFO+JLXZ6q4jBy4YNEve+B6W4=
Subject key identifier:   97:A5:F1:0E:74:6E:00:39:78:85:B1:6C:9C:BE:57:FB:BF:7F:99:1B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AC5B0F518529B444F4B80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2528e009-2f80-3eba-a987-ae15dd9f9a2e.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     10796
IP address blocks:        98.120.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:c5:b0:f5:18:52:9b:44:4f:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=439b9e7e-da65-4ffd-ac02-83194a37056d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:21:29:ff:bf:00:5e:c4:a7:e5:75:26:55:6f:
                    8a:67:9f:a4:f1:9d:7e:7c:0c:ac:53:59:be:80:ed:
                    eb:e9:60:ce:eb:c4:08:8a:61:9c:70:14:7f:9c:90:
                    f6:46:94:a1:7b:7c:db:02:60:31:74:32:29:04:7e:
                    25:7d:c7:f7:6d:ae:23:b8:c7:d5:37:20:54:55:64:
                    de:15:ec:08:16:30:61:63:b9:8e:6e:c0:59:7f:a3:
                    9e:f4:ac:8d:44:e3:db:8b:b9:16:b1:32:dd:7e:94:
                    31:f1:22:62:9a:2b:4a:ba:f0:9a:47:54:aa:1d:dc:
                    cd:bd:de:0f:3a:63:c9:cc:d8:c9:8c:02:e9:f4:bf:
                    b0:2d:9a:32:20:d6:b6:c7:a6:cb:46:40:a2:bf:4c:
                    09:22:04:d3:68:d1:0e:64:4a:34:71:7f:8f:4c:07:
                    4f:f8:f1:06:aa:52:94:2a:33:33:3a:af:cc:54:c0:
                    73:99:73:3e:e9:48:aa:3b:42:60:16:5e:14:32:9e:
                    95:b5:d1:ef:3b:6b:18:c9:4f:60:97:7e:4a:94:53:
                    47:58:37:da:46:d4:ad:41:60:16:ed:a5:1b:13:c2:
                    22:99:30:c2:7c:b9:19:0b:99:f4:cb:3f:78:82:c8:
                    c8:7a:64:b6:1e:6c:81:d0:3b:c9:bc:87:49:3c:8e:
                    16:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A5:F1:0E:74:6E:00:39:78:85:B1:6C:9C:BE:57:FB:BF:7F:99:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2528e009-2f80-3eba-a987-ae15dd9f9a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.120.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:54:fb:ce:53:d8:da:8d:81:f2:c8:79:ea:bc:f7:1d:31:54:
         d5:be:96:fe:c1:f0:ad:11:62:bf:ca:a0:85:4e:6b:23:c3:86:
         08:e9:46:80:e7:69:d6:ff:91:cb:e1:74:9f:98:25:e1:fc:ca:
         52:cc:f5:05:6c:a9:6f:89:33:93:d5:ca:2e:64:87:14:16:e6:
         24:a2:67:f4:1e:7f:d8:78:d2:17:27:0c:0d:57:50:17:2e:49:
         d9:87:2b:4e:bb:1f:ab:10:56:80:7b:5d:91:1e:d4:8a:2a:2d:
         06:18:11:70:84:b7:45:70:e3:28:69:47:a3:05:85:68:a5:25:
         2b:42:44:2b:9e:24:f5:96:76:ad:86:56:ee:d9:5f:f5:34:fc:
         5d:b9:d8:ce:da:d6:ae:9b:41:ad:4c:69:cc:8a:97:3a:87:93:
         8f:b6:e0:c7:06:ab:c1:e7:f7:f1:23:34:cf:03:2e:ae:70:17:
         56:d8:c1:7a:d9:3a:dc:89:37:f9:2d:ef:0c:eb:e2:71:4c:ed:
         4b:01:8b:aa:e9:86:14:96:52:88:6e:33:bd:15:cf:35:70:d5:
         f5:38:43:5a:a5:21:be:31:94:ac:c5:06:0e:c9:00:7a:3a:24:
         89:ae:f5:8c:5c:11:07:bc:3c:52:da:b7:f7:d5:93:e1:2e:68:
         83:af:1f:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCsWw9RhSm0RPS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
NDM5YjllN2UtZGE2NS00ZmZkLWFjMDItODMxOTRhMzcwNTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiEp/78AXsSn5XUmVW+KZ5+k8Z1+fAysU1m+
gO3r6WDO68QIimGccBR/nJD2RpShe3zbAmAxdDIpBH4lfcf3ba4juMfVNyBUVWTe
FewIFjBhY7mObsBZf6Oe9KyNROPbi7kWsTLdfpQx8SJimitKuvCaR1SqHdzNvd4P
OmPJzNjJjALp9L+wLZoyINa2x6bLRkCiv0wJIgTTaNEOZEo0cX+PTAdP+PEGqlKU
KjMzOq/MVMBzmXM+6UiqO0JgFl4UMp6VtdHvO2sYyU9gl35KlFNHWDfaRtStQWAW
7aUbE8IimTDCfLkZC5n0yz94gsjIemS2HmyB0DvJvIdJPI4WbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJel8Q50bgA5eIWxbJy+V/u/f5kbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMjUyOGUwMDktMmY4MC0z
ZWJhLWE5ODctYWUxNWRkOWY5YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYnhtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5U+85T2NqNgfLIeeq89x0xVNW+lv7B8K0RYr/KoIVOayPDhgjpRoDn
adb/kcvhdJ+YJeH8ylLM9QVsqW+JM5PVyi5khxQW5iSiZ/Qef9h40hcnDA1XUBcu
SdmHK067H6sQVoB7XZEe1IoqLQYYEXCEt0Vw4yhpR6MFhWilJStCRCueJPWWdq2G
Vu7ZX/U0/F252M7a1q6bQa1MacyKlzqHk4+24McGq8Hn9/EjNM8DLq5wF1bYwXrZ
OtyJN/kt7wzr4nFM7UsBi6rphhSWUohuM70VzzVw1fU4Q1qlIb4xlKzFBg7JAHo6
JImu9YxcEQe8PFLat/fVk+EuaIOvHxI=
-----END CERTIFICATE-----
Generated at Sun May 11 10:11:50 2025 by rpki-client