Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f681c5f-cb2b-34bf-b4f6-af647f5d7aa4.roa
File:                     0f681c5f-cb2b-34bf-b4f6-af647f5d7aa4.roa (raw, json)
Hash identifier:          KKC7WYTIg9jyWREGGoAeK9+cjXeBwAQXeXLosXwQVhY=
Subject key identifier:   38:68:D1:04:F6:D1:88:7D:AE:05:73:DF:8C:B4:1E:16:A1:E9:C5:E7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCBFCDC06341299B5A8218880
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f681c5f-cb2b-34bf-b4f6-af647f5d7aa4.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        98.187.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:fc:dc:06:34:12:99:b5:a8:21:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=2ac634e0-c48f-4e84-8f4f-8585a44a47a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:8a:18:66:a7:bd:cb:89:f9:6c:6f:61:7c:
                    7e:cc:31:1b:f7:ee:1c:05:eb:ec:b0:65:6c:25:2a:
                    23:38:51:26:57:f4:f9:47:a5:2f:e2:71:6e:01:c3:
                    20:45:a3:45:48:ed:b0:0a:00:58:5b:09:c1:0b:4b:
                    86:37:d0:c8:34:27:d5:25:8b:b3:1f:34:e6:37:bb:
                    c9:f2:ee:9f:e3:e8:a6:71:86:aa:f2:7b:80:c1:d1:
                    84:66:b7:ac:76:9d:50:a7:7c:94:7e:96:c2:98:74:
                    25:90:5c:b4:68:c0:53:68:c2:4f:e3:ba:24:3f:f8:
                    d1:02:ed:52:8d:d8:3e:82:0b:d4:7c:61:33:22:eb:
                    e2:49:db:a1:de:8c:e1:7b:94:05:0c:63:f7:91:de:
                    2c:71:02:a2:42:eb:d5:29:f6:d9:ba:8e:07:25:7b:
                    fa:e6:4c:05:cb:07:f5:5b:6d:ec:ef:0c:1b:d3:dc:
                    a3:23:2b:af:32:59:d9:3d:9c:9b:44:26:7a:50:24:
                    0d:11:57:ed:41:b4:ac:a4:90:c5:26:ea:e9:bc:96:
                    82:65:3d:2f:01:46:57:f1:ba:29:30:5c:a6:ee:d3:
                    cd:dc:87:74:09:31:6c:e9:96:f5:c7:81:f6:b5:ca:
                    ba:d1:20:b3:9e:71:6f:29:7c:db:f9:58:06:fa:e5:
                    73:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:68:D1:04:F6:D1:88:7D:AE:05:73:DF:8C:B4:1E:16:A1:E9:C5:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f681c5f-cb2b-34bf-b4f6-af647f5d7aa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.187.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:7c:0a:96:59:bc:1b:7b:f5:20:17:c2:e7:4a:b4:4f:2b:77:
         7d:09:19:49:66:da:5f:1f:fc:92:8f:c6:ae:83:9f:8d:d9:90:
         36:b7:ef:58:a9:d8:1c:55:be:87:48:7b:ea:c4:3a:66:70:f4:
         fe:94:3d:0b:c0:72:65:c0:a6:09:13:28:91:e6:aa:80:44:46:
         2f:3f:a0:85:c7:a3:00:5f:88:56:14:71:22:b7:b6:e9:0f:79:
         98:29:27:90:48:16:67:ac:b8:65:af:ca:18:69:ea:74:da:be:
         ba:99:4c:99:bb:af:93:34:26:b7:65:9b:62:ab:3e:60:13:f7:
         d5:44:6d:fd:57:6b:0c:33:72:54:66:b9:b4:d5:50:f1:4a:d5:
         08:2a:00:ce:f2:e7:f5:f7:89:54:e8:f2:7b:dc:5d:2a:0b:ba:
         e5:c0:f6:94:f7:db:6f:b4:ed:d0:c4:37:20:73:4f:3c:87:09:
         ab:10:4b:11:41:4b:55:9a:47:65:fb:e0:d0:0a:4b:07:53:b2:
         f7:8b:74:72:47:43:57:6c:72:e8:8a:bb:b1:8e:50:1d:3d:96:
         ec:b7:52:bd:e5:ee:71:d2:f0:cc:2d:8e:ef:54:c6:66:12:93:
         39:2c:1c:5a:f8:5f:13:48:36:9f:bc:b4:87:cc:2e:58:11:af:
         a4:56:11:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3L/NwGNBKZtaghiIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTIyMDUwNDEyMDAwMFoXDTI3MDUwNTA0MDAwMFowLzEtMCsGA1UEAxMk
MmFjNjM0ZTAtYzQ4Zi00ZTg0LThmNGYtODU4NWE0NGE0N2E5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRCKGGanvcuJ+WxvYXx+zDEb9+4cBevssGVs
JSojOFEmV/T5R6Uv4nFuAcMgRaNFSO2wCgBYWwnBC0uGN9DINCfVJYuzHzTmN7vJ
8u6f4+imcYaq8nuAwdGEZresdp1Qp3yUfpbCmHQlkFy0aMBTaMJP47okP/jRAu1S
jdg+ggvUfGEzIuviSduh3ozhe5QFDGP3kd4scQKiQuvVKfbZuo4HJXv65kwFywf1
W23s7wwb09yjIyuvMlnZPZybRCZ6UCQNEVftQbSspJDFJurpvJaCZT0vAUZX8bop
MFym7tPN3Id0CTFs6Zb1x4H2tcq60SCznnFvKXzb+VgG+uVz8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDho0QT20Yh9rgVz34y0Hhah6cXnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGY2ODFjNWYtY2IyYi0z
NGJmLWI0ZjYtYWY2NDdmNWQ3YWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYrtgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGF8CpZZvBt79SAXwudKtE8rd30JGUlm2l8f/JKPxq6Dn43ZkDa371ip
2BxVvodIe+rEOmZw9P6UPQvAcmXApgkTKJHmqoBERi8/oIXHowBfiFYUcSK3tukP
eZgpJ5BIFmesuGWvyhhp6nTavrqZTJm7r5M0Jrdlm2KrPmAT99VEbf1XawwzclRm
ubTVUPFK1QgqAM7y5/X3iVTo8nvcXSoLuuXA9pT322+07dDENyBzTzyHCasQSxFB
S1WaR2X74NAKSwdTsveLdHJHQ1dscuiKu7GOUB09luy3Ur3l7nHS8Mwtju9UxmYS
kzksHFr4XxNINp+8tIfMLlgRr6RWEWI=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:42:38 2024 by rpki-client on console-fra.rpki-client.org