Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d73225a-63e5-364a-84b6-2bacbbebc6c1.roa
File:                     3d73225a-63e5-364a-84b6-2bacbbebc6c1.roa (raw, json)
Hash identifier:          jc0ilGwyYYxCUXITpHS4feH+lNfRH6H7U/lWapor6fE=
Subject key identifier:   54:12:90:78:A0:1D:BD:BE:24:C9:09:6C:EA:52:6B:EB:6B:C3:71:48
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285847F41FA24EB91EB4D19E51FA80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d73225a-63e5-364a-84b6-2bacbbebc6c1.roa
Signing time:             Thu 21 Nov 2024 14:00:51 +0000
ROA not before:           Thu 21 Nov 2024 14:00:51 +0000
ROA not after:            Wed 19 Feb 2025 14:00:51 +0000
asID:                     22773
IP address blocks:        98.175.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:1f:a2:4e:b9:1e:b4:d1:9e:51:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Nov 21 14:00:51 2024 GMT
            Not After : Feb 19 14:00:51 2025 GMT
        Subject: CN=70f9d763-3417-4161-84e7-c3b1f5923d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ae:cd:7a:a0:3d:23:6d:62:c0:b2:00:f3:90:
                    25:50:e5:83:65:45:1b:7d:1a:5e:57:f9:db:01:2b:
                    8d:e4:f2:d8:6b:ac:77:a3:55:82:fd:e1:dc:81:c0:
                    5a:9c:01:6b:5b:7f:25:6f:8c:40:42:46:5c:63:a6:
                    07:ea:a8:bb:37:0e:c2:90:a7:a2:08:13:75:6b:49:
                    75:b1:12:24:36:f6:2d:a5:b2:aa:a8:ec:71:f5:4f:
                    88:ce:79:0b:89:9c:57:ee:e0:ef:77:54:a0:3d:58:
                    f0:14:8f:fb:dc:a1:2d:76:29:28:ed:43:c4:c4:05:
                    83:78:26:f6:f8:e0:e6:5a:55:b4:31:18:16:43:c0:
                    c8:84:72:34:5b:0d:05:3f:a7:52:cb:02:ec:5a:83:
                    58:c4:a4:37:76:0c:ef:61:50:65:04:fd:24:6f:bf:
                    ac:cc:24:d8:10:f7:f7:86:7b:ac:17:8a:68:6e:2a:
                    67:8f:67:06:37:58:59:e3:29:d5:2c:e7:8e:19:4a:
                    c1:03:26:cc:50:4a:83:00:90:1f:87:65:b1:0f:0c:
                    69:f5:a4:99:e6:01:eb:a9:48:27:a5:0a:a6:98:df:
                    3a:21:72:4c:65:5a:fe:0f:c4:a5:a6:16:aa:e9:81:
                    f6:98:69:fa:c7:40:76:1b:0f:02:b4:aa:11:b3:ae:
                    7d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:12:90:78:A0:1D:BD:BE:24:C9:09:6C:EA:52:6B:EB:6B:C3:71:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d73225a-63e5-364a-84b6-2bacbbebc6c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.175.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e4:85:29:a7:3b:d2:09:27:c5:b8:16:35:27:cd:6b:39:db:
         3a:e8:11:39:b1:84:eb:2d:e4:a6:15:5e:f4:ce:7c:58:2c:fe:
         b6:e1:e1:63:a5:c3:72:65:e4:fc:a3:e3:88:f3:a9:9d:1d:40:
         fa:1d:14:66:ca:39:5a:98:61:27:ad:25:57:62:97:74:a9:c4:
         fa:4f:d9:cf:91:89:a2:80:9a:c8:c1:96:24:79:4a:84:6d:9c:
         c5:98:ab:59:82:3f:b4:b7:ca:65:91:7a:ed:2d:1b:e6:1f:4a:
         b0:4f:e3:e0:74:91:8c:f8:3c:85:23:07:0e:ee:79:13:62:fb:
         8e:4a:89:1e:e8:46:0d:e4:92:b9:01:13:97:a1:1e:c2:e0:f7:
         b4:8c:84:ba:d7:37:f2:e0:a7:8c:fd:d4:68:d3:2a:d7:d3:26:
         76:1e:30:50:74:1c:7f:c8:d8:5b:0b:b4:29:d7:84:4b:27:83:
         4a:c9:8c:38:dc:6c:1a:b4:44:c9:05:f3:a4:80:fa:99:55:f3:
         2f:fd:b6:90:ce:73:0e:be:ac:c1:f6:19:f5:09:bc:62:a4:26:
         26:0f:ef:69:19:02:fb:1e:cf:53:ec:9a:9e:58:a0:49:23:85:
         38:67:b2:38:ca:af:85:2b:24:2a:a6:c8:80:eb:d7:66:0d:ac:
         91:16:45:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:53 2024 by rpki-client on console-ams.rpki-client.org