Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/671ca387-c9b6-3c01-a8fa-7190c474a0ba.roa
File:                     671ca387-c9b6-3c01-a8fa-7190c474a0ba.roa (raw, json)
Hash identifier:          n+brIUEr4XugpCvaiUKBTXMxaytwTeNdNoLB8DIqJrw=
Subject key identifier:   D1:DE:2F:25:2E:90:91:8C:0F:7B:B3:E5:5C:3B:8A:4F:02:B0:F8:F9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCBFCB31A9FC25E65274605C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/671ca387-c9b6-3c01-a8fa-7190c474a0ba.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        98.163.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:fc:b3:1a:9f:c2:5e:65:27:46:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=435b285c-a52d-4c57-805a-0a46490483fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:24:b1:d5:3e:fc:e9:44:23:8e:05:6b:d0:41:
                    ba:e9:17:7b:64:d9:3c:4f:54:02:d8:1e:8d:b1:33:
                    61:40:98:4d:66:6e:46:5c:81:9b:34:09:c8:08:3e:
                    17:eb:9d:5d:1c:b2:e3:de:ad:c8:8e:73:d2:d4:7b:
                    cd:81:47:fb:d2:2a:56:92:00:c1:3c:7e:e5:0f:bd:
                    56:b3:03:4c:86:ba:7c:12:6c:c9:da:48:de:bc:c6:
                    77:8a:c2:67:b3:a8:92:03:3b:da:72:5a:81:5c:7a:
                    30:51:06:b2:be:68:80:aa:d3:07:fb:2b:43:43:7a:
                    4b:2a:15:1e:4b:72:7a:62:d6:c4:bf:01:bb:5d:b7:
                    f9:03:c0:cc:26:6e:89:ed:41:44:91:07:3f:60:b9:
                    80:52:b5:df:e2:b4:9c:d2:af:c7:80:f9:09:80:f8:
                    af:2e:ee:ea:05:e7:b2:92:2f:0e:38:0c:27:06:75:
                    0d:a1:1c:49:db:cf:da:40:2f:25:e1:99:25:28:c8:
                    7f:88:e9:87:64:37:94:49:f2:81:08:42:85:66:03:
                    32:8a:c1:92:68:0a:49:8f:82:33:f4:c3:62:61:2b:
                    82:50:98:7b:f4:c6:11:c0:2d:52:81:b3:7b:70:36:
                    4d:34:81:6e:0e:4e:5e:85:ed:1c:42:a7:b4:57:c8:
                    ab:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DE:2F:25:2E:90:91:8C:0F:7B:B3:E5:5C:3B:8A:4F:02:B0:F8:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/671ca387-c9b6-3c01-a8fa-7190c474a0ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.163.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:33:23:4a:5e:fb:05:e2:9f:03:ec:85:f7:cb:25:a4:1e:06:
         53:2e:37:d8:be:8b:58:54:a2:d9:67:3d:79:93:b9:da:66:0a:
         31:96:9e:4e:fb:7d:51:36:c2:a2:33:c0:87:73:da:91:af:f1:
         8b:23:fd:a5:36:26:45:bf:8d:5d:16:d2:e0:79:c4:1e:40:40:
         2a:6f:26:4f:59:4f:6e:4f:9d:e2:57:02:65:5b:6a:88:84:d4:
         d8:62:29:99:18:77:d4:10:ea:07:8c:db:dc:ef:b8:d8:99:3f:
         7f:2a:09:ef:5b:5b:2a:91:0a:93:87:c5:a0:ae:c0:50:d3:a5:
         78:ba:55:53:a2:67:33:75:26:ec:d6:da:f6:c5:36:3c:17:df:
         43:7d:5a:bc:84:61:a2:36:fe:91:13:4f:49:63:6c:df:59:0d:
         b8:c6:0a:ba:93:32:0f:1b:38:15:38:71:46:b9:3d:bb:30:da:
         57:c6:48:7c:cd:8d:b9:12:20:69:c9:4e:a6:b9:77:5f:04:60:
         35:7e:c5:06:8c:44:d3:e9:2f:e7:25:8d:df:ae:10:81:9f:5a:
         46:ac:4f:fa:e0:43:93:ca:e3:c4:d5:da:0c:ba:f7:51:7e:6e:
         8c:d5:15:18:24:66:d5:88:87:a4:08:d9:83:5d:2b:b8:6e:66:
         8b:4e:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:42:44 2024 by rpki-client on console-fra.rpki-client.org