Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54263b1c-021a-3ed4-9e6e-1d84d057e21c.roa
File:                     54263b1c-021a-3ed4-9e6e-1d84d057e21c.roa (raw, json)
Hash identifier:          D3nm75AKT+rcAYhGtiHoC+TIVISSARjyzX9ehX1l9kw=
Subject key identifier:   18:38:9B:51:C0:C7:8D:77:6E:76:C5:2A:81:DB:C2:21:F2:9D:ED:75
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D40468A89CF3FA12D00074F20
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54263b1c-021a-3ed4-9e6e-1d84d057e21c.roa
Signing time:             Wed 16 Mar 2022 04:00:00 +0000
ROA not before:           Wed 16 Mar 2022 04:00:00 +0000
ROA not after:            Tue 16 Mar 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        98.168.68.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:40:46:8a:89:cf:3f:a1:2d:00:07:4f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 16 04:00:00 2022 GMT
            Not After : Mar 16 04:00:00 2027 GMT
        Subject: CN=68ca7490-638a-450e-ba66-706ec08a3672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:d9:6d:49:f1:ff:14:76:62:06:86:86:a4:
                    62:3d:00:07:bf:20:09:f4:16:f2:76:bd:97:64:2b:
                    3f:6f:7a:f2:10:75:bc:46:a6:86:46:5d:5a:50:e8:
                    5f:00:f3:69:32:42:79:22:9a:15:c4:5a:87:a2:67:
                    b6:61:0b:ac:74:a9:fd:a1:b2:20:6a:c0:35:ea:7f:
                    6c:5f:13:ed:b1:57:f7:76:8c:d3:e0:05:7c:16:26:
                    ee:cb:39:2d:bc:52:58:79:36:eb:30:4e:32:7d:04:
                    e5:ba:1d:05:50:53:68:4e:17:b0:15:37:8a:4a:45:
                    0c:13:8d:ef:cb:5e:fb:36:93:cc:f7:a5:54:cb:e3:
                    5f:52:d4:c3:7f:9b:16:5a:0c:2e:8f:4b:52:2f:f0:
                    47:da:23:89:67:09:b7:5e:68:78:54:3d:1a:e0:6f:
                    d9:4e:86:fc:b3:d8:9a:0c:6e:78:54:24:c9:39:29:
                    53:8b:91:be:2f:38:22:62:06:a2:22:48:9f:ad:41:
                    b7:72:ce:66:6b:19:62:30:ec:08:e0:23:1b:b0:d2:
                    96:2a:f8:3a:87:9d:a8:02:cf:73:8b:f5:26:1d:bd:
                    48:12:1f:c3:1b:aa:c4:7c:75:30:1c:8c:f8:d2:df:
                    84:6b:48:60:74:36:36:e1:d9:75:36:cb:92:5d:dd:
                    97:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:38:9B:51:C0:C7:8D:77:6E:76:C5:2A:81:DB:C2:21:F2:9D:ED:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54263b1c-021a-3ed4-9e6e-1d84d057e21c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.168.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:93:ea:33:cb:30:0d:ee:89:71:83:69:a7:1b:9b:5c:90:6a:
         04:da:a4:43:f8:01:c0:08:67:c7:80:df:d8:0e:e0:ae:29:fb:
         41:cb:3b:2c:1d:b3:94:bf:57:c8:89:6c:47:20:47:5f:79:05:
         9b:a4:d5:f7:15:29:41:c2:21:90:fc:61:6d:f7:5d:f5:a4:44:
         b3:33:38:5e:75:15:b5:4b:94:17:e6:d3:46:89:27:33:78:29:
         b7:90:00:af:61:cb:36:e6:59:d8:60:ce:18:da:49:b5:96:a6:
         de:3f:85:76:0f:fc:50:3a:d8:6b:8c:43:c7:cc:25:3c:b8:6d:
         32:42:da:58:d3:fc:fc:ec:e9:34:c0:ba:b2:0f:7d:aa:a5:6f:
         1a:f2:b8:96:75:ed:17:ec:57:d2:fc:39:b1:98:45:fb:29:b7:
         1a:04:3c:40:df:d2:15:61:de:63:68:1c:77:9f:50:85:ab:f8:
         44:47:78:15:3c:1c:7c:71:63:90:f8:3e:54:19:7f:f0:05:8c:
         01:d4:d1:d4:ca:1f:95:f4:31:1e:99:db:2e:43:e6:53:84:6c:
         5a:ac:c1:33:74:ad:a9:54:a9:66:98:66:6c:b1:4e:61:c3:26:
         9a:f8:dc:c2:57:94:99:3b:d3:ed:63:36:47:90:be:3c:f1:07:
         02:48:7d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:58:24 2024 by rpki-client on console-fra.rpki-client.org