Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75829d4d-16c8-39de-b1a1-50bec7103855.roa
File:                     75829d4d-16c8-39de-b1a1-50bec7103855.roa (raw, json)
Hash identifier:          7+ld2rgW/nHHJHJxzvqTyWZE+KaxjvxSSBooslAhH4g=
Subject key identifier:   3B:89:F8:11:94:11:DE:27:47:06:6D:C1:56:34:BB:2A:E2:13:51:F6
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCBFCC912ED00100B26786900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75829d4d-16c8-39de-b1a1-50bec7103855.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     62957
IP address blocks:        98.173.88.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:fc:c9:12:ed:00:10:0b:26:78:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=e449c572-b1f5-4231-8988-e8c769ea6cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:b4:70:54:0b:a6:a2:47:cb:f8:38:b1:36:
                    d5:58:0a:bf:d8:41:b1:79:e4:f2:58:34:e3:53:ba:
                    ad:18:09:6f:4e:6f:2c:2d:43:60:b1:8a:78:e4:e2:
                    69:bb:77:26:8c:a2:6e:b8:45:1b:f3:e4:36:59:21:
                    f8:a2:16:90:35:6d:87:3d:3d:7d:d0:7d:c3:fb:75:
                    71:1e:1d:18:5f:5e:55:12:c4:42:63:58:42:31:47:
                    06:56:0a:35:54:e4:13:30:26:07:0f:78:26:fa:81:
                    24:01:77:20:ef:d2:8b:8f:b4:80:dd:11:bb:01:60:
                    72:7b:1d:34:61:75:c5:72:a3:12:8c:34:7f:26:b5:
                    4c:73:9d:d6:18:34:38:23:31:9b:b7:a7:f7:93:e8:
                    72:76:ef:4a:4d:db:b6:3d:95:d2:c2:da:c3:05:09:
                    75:f9:d1:05:c6:d2:aa:b8:35:00:17:4a:1c:a7:ca:
                    7b:2e:77:34:1a:ee:87:30:0f:2c:43:3d:aa:76:88:
                    59:2c:1a:ef:35:95:ab:15:5a:11:7f:bd:b9:51:36:
                    c8:b3:e6:49:7e:63:ac:5f:59:0f:87:bf:ab:bc:88:
                    52:df:a1:60:5f:45:6d:28:b2:ff:b8:cd:df:b5:ed:
                    d1:86:a5:19:34:d2:50:dd:dc:18:ab:bc:71:95:7e:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:89:F8:11:94:11:DE:27:47:06:6D:C1:56:34:BB:2A:E2:13:51:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75829d4d-16c8-39de-b1a1-50bec7103855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.173.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:89:20:7b:61:67:4b:3c:41:0d:fa:74:0a:44:38:07:a3:2e:
         53:b7:83:d5:c9:33:35:61:98:e6:71:9b:24:7e:53:f1:19:61:
         fb:a4:ca:3e:41:93:a2:ed:3f:5e:01:fe:2a:b8:31:ae:cc:2d:
         a1:60:b3:b8:90:1b:f6:00:03:f4:ad:ee:74:b8:eb:e6:9e:23:
         35:c1:a1:87:d2:55:45:fd:e2:7f:52:64:cf:7a:4b:1d:cc:d5:
         b8:ff:a4:11:4c:17:2d:87:ec:75:2e:c2:36:75:a3:1f:48:d8:
         08:fd:11:71:d2:4d:96:43:8a:b8:53:79:79:13:fb:f3:1a:08:
         0a:fc:c5:8a:fd:68:5d:0d:20:6b:cd:d1:71:4f:f1:29:10:e5:
         f8:3a:e3:1b:f1:25:e3:3a:67:4d:72:d8:8d:c0:1b:24:c9:de:
         d7:d6:ee:e5:82:f0:68:56:02:d8:9a:74:25:c7:7a:45:b2:97:
         a5:6c:86:2a:f6:10:62:94:7d:85:f1:26:91:88:4d:a0:cf:5f:
         9c:db:25:0f:20:a4:b8:1f:6a:b2:6c:dc:b4:8e:51:22:71:76:
         2f:c6:ed:fe:6d:bd:5c:e5:8b:33:30:2c:cc:b7:c3:6e:9c:ed:
         f3:b7:f6:bf:5a:21:cf:51:98:72:fc:99:f5:55:da:1b:88:99:
         b6:44:8a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:41 2024 by rpki-client on console-fra.rpki-client.org