Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86cfcaad-c7ab-3bcc-b964-6ce66fc68850.roa
File:                     86cfcaad-c7ab-3bcc-b964-6ce66fc68850.roa (raw, json)
Hash identifier:          5Ymj2iRJxKOclPxMPjjht8155AZ0+++17KA0R7i2KGY=
Subject key identifier:   D3:15:F3:A4:BB:52:11:8B:30:BE:86:88:D7:93:A3:FE:41:B5:02:D0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584555334A5AC81F036C081BEC80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86cfcaad-c7ab-3bcc-b964-6ce66fc68850.roa
Signing time:             Tue 26 Mar 2024 06:13:08 +0000
ROA not before:           Tue 26 Mar 2024 06:13:08 +0000
ROA not after:            Mon 24 Jun 2024 06:13:08 +0000
asID:                     22773
IP address blocks:        98.178.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:55:33:4a:5a:c8:1f:03:6c:08:1b:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 26 06:13:08 2024 GMT
            Not After : Jun 24 06:13:08 2024 GMT
        Subject: CN=79fe9a6c-0c68-405a-b25d-9b28256da703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fa:77:db:1e:89:05:6a:35:92:14:2e:e9:e0:
                    fe:47:32:c3:92:30:df:e8:2c:8d:9a:34:d3:78:72:
                    87:e5:73:92:d0:b6:1b:f8:3a:bf:f2:7f:a0:0c:6b:
                    78:9d:38:18:b4:70:1c:de:2a:4b:9b:83:4d:c7:cf:
                    76:fd:4b:8e:45:09:76:5e:b8:74:41:f0:aa:ac:8e:
                    6f:37:f0:60:ba:3c:e9:ba:f1:d7:07:fb:7d:dd:75:
                    e9:50:6b:ce:f6:2e:67:89:92:c2:05:e9:41:b6:8a:
                    bb:dd:c0:35:01:51:5d:10:2b:d3:26:92:e0:ce:ba:
                    14:da:85:fd:8f:78:38:45:16:04:2b:5b:ac:99:b3:
                    8d:1c:f0:73:f5:af:8a:bc:43:96:01:44:d1:43:59:
                    4e:ae:51:d3:99:0c:f6:87:36:ff:5b:d1:cb:d6:1f:
                    b6:6a:0a:f0:39:a6:29:a4:65:08:a7:5f:c3:7f:91:
                    61:f5:8e:d1:ad:4e:bc:3c:4d:e6:8a:54:33:f5:b5:
                    02:80:57:ae:7e:61:3f:c5:12:cd:0b:80:f4:be:12:
                    ec:d7:a5:5d:5d:3e:02:0a:af:e9:61:6b:50:7e:a8:
                    fd:a1:ae:3b:80:bc:df:c2:0a:e8:ce:98:20:96:4a:
                    af:c7:a5:6b:21:2c:d9:ae:ed:b2:68:6c:47:6e:0e:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:15:F3:A4:BB:52:11:8B:30:BE:86:88:D7:93:A3:FE:41:B5:02:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86cfcaad-c7ab-3bcc-b964-6ce66fc68850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.178.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:85:72:22:c2:19:51:c9:69:c6:e8:85:84:94:c4:e0:bf:98:
         16:61:18:82:73:45:b5:5a:6d:d0:7a:b3:2c:86:be:94:d2:46:
         61:ed:a4:05:c3:06:aa:e3:cd:7b:87:08:ef:62:1e:4c:b7:84:
         0a:e3:9d:55:6d:7e:35:32:6d:0d:c7:cf:7c:65:3b:f9:26:1a:
         3a:8c:8e:e8:11:b1:76:bd:da:3f:c3:94:27:da:d2:3d:e1:b7:
         79:fc:5a:79:42:8b:e2:d3:07:e0:d4:07:52:52:ae:da:d0:ff:
         2d:cb:6f:29:08:9f:07:11:b2:aa:5a:44:c2:7f:66:72:3c:3f:
         78:cb:c4:07:d1:97:61:ee:92:60:5c:04:fd:d5:ec:98:f0:24:
         41:e8:be:1d:d8:be:d4:4a:28:f4:a1:c1:d9:99:c7:4d:7c:bb:
         9f:ec:c4:79:36:6d:5e:ce:1d:ac:19:82:7e:98:7e:c8:63:fc:
         6c:bb:57:79:6e:7b:c3:87:0d:9d:be:bf:ad:5c:ee:2c:95:f8:
         d1:97:1a:43:2b:5c:ea:3e:ab:34:aa:82:19:03:8d:4d:5d:68:
         cf:6c:d4:a9:9f:d3:5a:5c:b9:c4:75:e6:1f:bb:c5:00:46:69:
         1e:ad:56:3f:97:8b:b2:1d:ef:42:c1:30:5d:ef:31:27:a5:26:
         c5:6c:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:24:14 2024 by rpki-client on console-ams.rpki-client.org