Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f8763cd-8107-31cb-be1f-cb30190fbf14.roa
File:                     0f8763cd-8107-31cb-be1f-cb30190fbf14.roa (raw, json)
Hash identifier:          pHXWB0dcDiTqXacsOI9s7U1sRAzX7J8C7qlV90q1Evg=
Subject key identifier:   36:72:61:6C:19:1C:1B:0B:54:A5:85:4D:51:2E:8E:A9:C8:D7:3E:C2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584905B6B9F9391BA903BA97C820
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f8763cd-8107-31cb-be1f-cb30190fbf14.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     22773
IP address blocks:        98.185.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b9:f9:39:1b:a9:03:ba:97:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=bbd8dd37-19f7-4c89-b459-fcf8529ef608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:84:01:86:6c:57:f5:b5:4f:7b:9a:c1:b3:ff:
                    98:1e:66:85:56:4a:82:53:d4:0e:90:5e:c9:06:50:
                    b9:dc:69:e1:ac:e2:78:4e:d4:d8:67:3a:10:b7:58:
                    0f:01:10:ec:44:46:a5:be:cb:1f:7c:9e:91:30:59:
                    8d:a0:2b:98:c6:c8:17:1a:81:21:46:fc:21:b5:2b:
                    57:e8:dd:9e:ac:39:2d:c3:e8:ff:72:ad:8a:60:73:
                    d8:ec:68:92:15:e3:24:82:99:10:b7:fb:de:ef:0d:
                    ca:07:bc:1a:f5:b9:bd:06:3b:04:f1:d6:8c:9d:9a:
                    03:ca:8e:e7:57:2a:b8:c4:44:0d:cf:9d:db:1d:1d:
                    05:87:81:fc:23:d3:b0:5c:66:a8:dd:68:fd:87:6b:
                    bd:42:25:f7:f3:cc:b8:1f:e1:34:94:73:00:d4:0e:
                    90:ed:f1:c3:7f:40:74:6e:14:85:29:67:18:c5:f6:
                    e6:66:04:86:2e:b8:bf:67:56:a8:3d:31:af:de:a0:
                    ed:9e:29:39:bf:84:ed:b2:58:dd:f9:3e:ea:8a:cc:
                    11:6f:bb:e9:45:31:45:f2:73:1d:6b:e6:44:66:e0:
                    56:34:11:ff:95:1e:7c:ad:95:5e:69:83:75:a7:61:
                    ec:64:ba:c4:51:e6:80:e4:db:27:e3:57:de:17:0c:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:72:61:6C:19:1C:1B:0B:54:A5:85:4D:51:2E:8E:A9:C8:D7:3E:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f8763cd-8107-31cb-be1f-cb30190fbf14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.185.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:6f:71:85:e9:9e:a6:d4:ce:ca:94:5f:6e:6e:39:b6:94:0c:
         24:66:65:99:21:29:57:d3:19:b8:91:de:11:17:8f:fa:9a:0e:
         e4:41:33:43:98:d0:3b:6d:04:d6:b7:16:ad:64:d5:f6:55:6a:
         5e:96:c9:54:86:48:dd:9c:4e:5b:fc:e4:26:53:10:c7:63:94:
         f3:68:1f:43:c1:6d:6c:45:c2:f6:a7:ca:e2:9b:17:a2:59:92:
         f0:ee:aa:82:9d:08:93:53:d7:1c:bd:35:25:0f:e9:05:49:8c:
         49:d1:eb:28:4a:b1:53:49:8e:d3:71:ce:39:be:d1:b4:85:de:
         93:26:de:2d:df:7d:9a:2f:fd:17:f3:ec:7d:3e:0c:97:fa:f2:
         2f:e7:38:06:65:e2:91:a3:2d:98:14:e6:92:e7:92:2d:29:d3:
         1b:0b:e7:18:c2:d2:ff:f3:12:40:92:6b:7a:9f:a2:eb:41:fa:
         94:64:a7:23:93:61:c9:0a:5f:65:e2:8d:3e:7e:a1:a8:93:a7:
         b4:c6:37:6c:c4:17:26:cb:e8:15:c3:e8:df:8c:5e:cd:e7:39:
         9b:ab:7b:a8:cc:10:0d:21:a7:c0:95:2b:fe:10:91:85:7d:2b:
         e8:bc:c8:04:65:be:0d:78:b4:c3:4f:71:39:f7:80:86:09:1a:
         24:1f:e2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:15:06 2025 by rpki-client