Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e5f6278-79d1-3b0b-b76f-35a214995eae.roa
File:                     3e5f6278-79d1-3b0b-b76f-35a214995eae.roa (raw, json)
Hash identifier:          HMgCAQge3/Ix4A72NGBbv6Z1XNM3tz0Uq7jKfiJGseE=
Subject key identifier:   0D:C5:EB:D7:1D:F5:C1:86:BB:24:8D:EB:CC:0A:72:3C:8A:7D:1E:00
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCBFCE09894F5B4E0D4BF2740
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e5f6278-79d1-3b0b-b76f-35a214995eae.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        98.191.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Sep 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:fc:e0:98:94:f5:b4:e0:d4:bf:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=7e71e287-84fc-43bd-b184-7a2eb36d68ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:fb:f9:52:4d:48:9b:6d:56:91:20:7f:50:
                    ae:97:9f:ea:c3:5e:17:f8:0c:2c:18:c4:fe:bd:d9:
                    cf:12:00:97:6b:91:93:71:c3:23:9e:d4:91:93:ab:
                    54:6e:37:65:b7:cf:64:4b:80:3b:13:c1:70:d0:92:
                    05:a6:34:4b:b0:6f:cf:0d:45:e8:77:25:42:b5:6b:
                    0d:40:2d:5d:87:14:df:b8:db:e9:96:49:3d:4b:7a:
                    5c:4c:65:8f:55:28:e5:4f:17:c2:19:41:d0:36:45:
                    e3:0d:91:64:1a:34:06:61:aa:1d:2f:82:b3:14:8b:
                    1d:4c:54:20:dd:50:e5:8e:56:32:62:19:d4:1b:07:
                    dd:2a:66:35:52:44:7a:53:7f:6d:08:e5:13:4a:c3:
                    13:9c:eb:6b:86:6e:33:85:ba:8d:40:ef:9b:16:a9:
                    24:fa:53:28:8b:59:de:5f:36:7f:f6:81:36:06:16:
                    45:38:b8:b4:af:89:bc:bc:2c:66:3f:37:40:6e:3e:
                    19:0e:d7:27:05:76:18:e7:ad:33:fb:2f:23:ae:29:
                    02:d0:2c:32:fc:ee:82:11:dd:f3:b2:ac:7a:fc:13:
                    d0:bd:29:05:30:db:90:72:e3:11:f5:26:3d:a3:53:
                    40:37:6e:bf:7b:de:2e:56:df:68:45:22:2c:f2:dc:
                    ae:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C5:EB:D7:1D:F5:C1:86:BB:24:8D:EB:CC:0A:72:3C:8A:7D:1E:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e5f6278-79d1-3b0b-b76f-35a214995eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.191.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:86:c2:a4:67:ba:d1:54:43:4d:ec:bb:09:3e:01:75:02:82:
         5a:c1:e3:ef:27:77:59:54:91:31:8e:ba:fe:98:a7:24:b0:51:
         34:fd:ea:77:3a:63:9a:cd:ac:72:26:9d:6b:bf:cb:28:68:af:
         dc:32:8b:30:5f:9b:82:af:20:49:4e:1b:3a:e3:0c:bb:97:2f:
         47:9e:d8:56:2f:2e:9a:25:54:33:ef:7e:c8:2d:57:58:4e:90:
         b1:39:82:e0:e4:14:e9:aa:82:d9:cd:8b:e4:3a:5d:35:9e:35:
         24:d9:24:9f:1f:90:39:f0:88:fc:c0:01:02:c6:0d:65:2e:33:
         98:2d:f6:9c:81:cc:c7:0a:28:88:4c:f9:f1:f1:16:94:ff:cc:
         7c:a8:1e:9e:c3:58:d3:9a:4f:8d:03:bd:65:1b:84:b8:5b:00:
         33:ef:bc:28:0a:10:82:ea:31:8f:36:93:de:30:9c:df:8e:47:
         00:38:f3:75:d8:30:5f:6e:6e:3f:d8:d2:b9:b8:1b:57:99:ae:
         2a:fe:d4:18:b8:05:af:cd:7a:fb:9e:a0:8e:e2:55:5e:b3:7d:
         fa:87:4e:06:27:e0:85:6d:e0:51:aa:77:4c:49:0d:5f:07:39:
         72:5e:d1:e6:ac:4e:47:7f:59:35:be:1b:5c:95:58:35:e5:26:
         84:bf:18:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 15:09:07 2024 by rpki-client on console-ams.rpki-client.org