Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a8e11c7-fa04-3e92-a903-7a359cd9563e.roa
File:                     1a8e11c7-fa04-3e92-a903-7a359cd9563e.roa (raw, json)
Hash identifier:          0YmU2gCI1IFbs/38owYSn+zoi2Ryo25w4AjQfqYS8fI=
Subject key identifier:   6B:98:B3:13:BB:08:D1:B0:39:55:83:6D:C8:F6:09:33:EC:99:E6:79
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583E7E9988F0BB1DE14BBA07B620
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a8e11c7-fa04-3e92-a903-7a359cd9563e.roa
Signing time:             Thu 07 Jul 2022 12:00:00 +0000
ROA not before:           Thu 07 Jul 2022 12:00:00 +0000
ROA not after:            Thu 08 Jul 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        98.163.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:7e:99:88:f0:bb:1d:e1:4b:ba:07:b6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul  7 12:00:00 2022 GMT
            Not After : Jul  8 04:00:00 2027 GMT
        Subject: CN=35728a11-81eb-4874-ad9f-125ee38a7ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3a:c3:66:9a:32:eb:a9:2f:4d:3f:88:b3:03:
                    75:78:60:05:eb:fd:5b:43:37:20:85:8a:f8:85:91:
                    4b:90:22:43:31:21:b4:68:1c:c6:d6:28:2d:6b:8d:
                    b7:25:77:4e:fd:5f:aa:fb:9d:4e:bb:86:1a:d8:5d:
                    51:c6:43:0b:30:9d:a6:46:25:cf:46:2c:46:d4:5c:
                    ae:f6:d8:55:15:51:3f:a2:53:81:b6:73:60:8a:99:
                    42:ca:d0:b5:e9:39:f7:f6:9d:29:c9:26:c1:f9:78:
                    8e:1b:14:36:cd:65:f5:c9:7d:9b:bd:8f:09:dd:97:
                    80:ef:e5:f7:25:d4:8f:f4:8b:b2:b6:ab:42:bf:da:
                    53:5a:cb:d8:9e:3d:8e:1a:d6:af:28:80:cb:68:17:
                    72:42:0b:1c:68:f9:7b:6d:16:5d:76:da:96:fd:a9:
                    5c:e2:71:01:0a:e0:7c:42:71:a1:22:18:1d:1b:b4:
                    b0:56:97:dc:4b:9c:12:73:35:24:bb:96:e0:2e:48:
                    75:5e:78:ee:16:87:6b:29:5f:b0:d7:c4:b2:57:e2:
                    54:5e:bc:4f:38:6e:17:47:0f:33:73:de:38:9e:c7:
                    3f:f1:0b:32:52:02:dd:88:79:2e:1d:07:be:12:d6:
                    70:8b:d8:0c:d9:d9:ee:ec:4a:e3:d7:ff:e9:cf:e2:
                    e1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:98:B3:13:BB:08:D1:B0:39:55:83:6D:C8:F6:09:33:EC:99:E6:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a8e11c7-fa04-3e92-a903-7a359cd9563e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.163.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:fb:a5:55:60:3f:7c:dd:f5:f9:30:66:66:9c:b4:5f:5b:11:
         7a:ea:f1:17:bd:fe:88:0e:68:fd:f7:62:bb:04:20:08:b2:44:
         36:4e:8b:a9:fc:5d:30:ae:79:d7:56:16:13:92:ef:b1:9e:1d:
         dd:ad:48:7d:f2:b4:80:bd:57:5a:2f:2a:04:76:50:41:7a:92:
         c3:1a:af:6e:a8:30:e0:6f:08:c8:62:6e:3a:cf:22:c1:9a:21:
         33:e2:b6:50:61:52:25:c0:d0:d9:04:bf:35:5b:c2:aa:97:50:
         6e:e0:f1:a9:b4:7d:e9:fa:22:a6:53:13:0e:c2:d8:07:30:45:
         96:58:8b:39:5b:91:31:66:19:77:22:b3:9a:87:36:1f:64:a7:
         ea:0d:cc:19:c7:b8:13:8c:5f:54:ec:01:31:76:34:57:ec:95:
         a7:5a:41:fb:56:10:b7:0b:62:32:09:fb:10:35:41:84:f0:9d:
         44:dc:a8:48:17:c4:e7:55:f9:f9:f4:9f:1b:79:69:f0:6b:f3:
         a8:21:c2:aa:70:58:4d:db:26:3c:af:7a:9e:c3:be:82:0a:d2:
         00:b7:c5:b9:a5:ab:73:40:11:56:8e:b0:0e:d3:73:c9:6f:e8:
         43:4c:d4:83:b6:21:cc:4a:ce:ab:eb:bf:bd:cd:85:26:45:a3:
         7e:49:8b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:39:07 2024 by rpki-client on console-fra.rpki-client.org