Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89674b84-c4f2-3e05-b0cd-b790bbf45982.roa
File:                     89674b84-c4f2-3e05-b0cd-b790bbf45982.roa (raw, json)
Hash identifier:          2C8th1OEd5CsuONmkXYUN5HuoeQkRqpKCAu7np2ZouA=
Subject key identifier:   83:3A:C7:A3:2C:A0:56:8E:AA:50:31:06:B0:F5:51:48:90:E2:46:0A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCBFC26C142B7D4F0A7935580
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89674b84-c4f2-3e05-b0cd-b790bbf45982.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        98.171.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:fc:26:c1:42:b7:d4:f0:a7:93:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=a773070c-a4b8-43a8-9af6-834111422f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5a:51:95:a4:67:17:ca:9d:b8:91:f4:a5:07:
                    b6:0d:79:7d:1b:18:17:f9:68:f7:76:29:7c:6e:57:
                    cf:30:4e:35:58:97:a6:31:f5:b4:79:e6:2c:b2:6c:
                    04:d3:30:6b:87:f0:16:f0:cc:44:0b:76:07:a6:df:
                    5c:9f:e5:4b:37:08:50:84:9b:b0:5d:98:79:4a:fc:
                    45:24:42:fa:c9:94:af:64:eb:fd:ae:95:ad:24:f8:
                    0e:75:28:27:71:9c:a4:1a:43:47:0a:94:f2:b6:7a:
                    ed:ff:c4:31:44:cf:46:e5:2e:4f:39:13:d5:3b:2d:
                    10:60:cd:9c:e0:6e:bf:5b:d6:1e:84:5e:47:b4:e7:
                    41:48:ca:ff:a4:e1:41:06:8c:c9:68:41:6c:b6:82:
                    9c:7c:a1:94:b4:41:8e:14:96:ef:85:27:22:9d:3f:
                    e8:6c:eb:7e:c6:5d:39:38:22:26:78:af:1c:7b:b5:
                    aa:e5:ee:59:db:3d:fc:9b:f9:11:ce:93:70:c1:9d:
                    91:1b:02:f3:0c:ff:b8:1c:e4:bb:39:63:b7:f3:72:
                    ff:0b:d2:88:96:45:49:06:07:a9:85:53:a4:38:4b:
                    c8:b8:6e:87:4c:cf:ac:a4:f3:ef:a2:26:ec:d2:d4:
                    92:08:bf:7a:12:fd:39:be:0a:cb:2b:72:ec:fe:00:
                    82:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3A:C7:A3:2C:A0:56:8E:AA:50:31:06:B0:F5:51:48:90:E2:46:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89674b84-c4f2-3e05-b0cd-b790bbf45982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.171.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:dc:d6:e4:b5:53:88:26:97:3a:84:db:b0:e6:48:2d:73:0f:
         9a:9f:9c:90:58:73:38:e9:38:d4:55:94:f6:3f:d0:34:2c:69:
         da:3f:2a:4e:2d:a0:61:96:17:ce:7d:8e:0d:15:38:07:8a:66:
         78:19:82:6f:45:be:63:4b:08:4a:8d:b8:ca:9a:07:5f:53:b9:
         ec:6b:28:8f:6e:88:c6:62:61:b2:33:50:2a:31:20:37:19:d1:
         14:d1:d4:9f:53:1a:fb:7a:54:7e:b4:03:87:3e:1d:86:d8:67:
         32:c0:f9:06:27:73:62:17:e6:0a:1f:d2:76:99:eb:c1:bf:a5:
         dc:5e:b8:7e:a9:69:64:9e:0a:75:84:a4:c3:07:b8:62:fc:de:
         2b:10:66:14:b6:71:93:5d:e8:eb:a1:72:97:92:bd:dd:2b:60:
         88:c2:b7:6a:ac:66:c5:2e:3d:f1:b1:03:37:52:d2:3e:7f:ce:
         fb:a4:42:0c:e2:31:f0:d8:51:1a:3e:2a:94:67:a9:a6:dd:e8:
         32:9c:b1:fc:81:f1:17:77:d3:8f:eb:74:56:ab:47:07:0f:fb:
         05:8c:cb:39:b4:d1:f7:88:f3:59:4a:5b:56:7f:b3:4a:8b:f8:
         ae:6f:3f:ce:10:36:e4:9f:7a:c2:0f:44:b2:8e:b0:4a:74:ba:
         b1:14:7c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 03:14:51 2024 by rpki-client on console-fra.rpki-client.org