Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9202255e-df2d-35ba-8254-39cfbd0d0535.roa
File:                     9202255e-df2d-35ba-8254-39cfbd0d0535.roa (raw, json)
Hash identifier:          GZ2KD0GSMw0XBwyTBhzVwJPbs+A0JSRwpHfxAxW8Q2o=
Subject key identifier:   C6:30:13:B1:A1:69:AE:C1:C7:9A:BD:A3:5B:52:01:3A:E7:B6:35:65
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858474DE610725CB57F45770970C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9202255e-df2d-35ba-8254-39cfbd0d0535.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     33438
IP address blocks:        98.190.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e6:10:72:5c:b5:7f:45:77:09:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=c88c378e-8391-4c48-9183-48851a20bae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:30:84:c2:e1:2b:18:5f:62:cd:37:3f:33:f8:
                    34:0b:e8:3a:ef:dc:17:f3:13:dc:4b:3c:61:e4:b6:
                    a2:3a:b9:78:71:73:c8:8c:20:68:3f:0e:0b:84:af:
                    f1:7c:4a:51:b3:6e:2f:3f:35:0c:65:8e:39:82:38:
                    47:44:b0:22:43:1e:33:b0:56:63:2c:31:83:f3:4c:
                    e4:74:e4:24:27:99:7b:e8:ee:7d:71:25:1b:bb:1e:
                    94:72:3a:9f:db:82:d9:20:9f:e3:47:13:a8:b6:b7:
                    44:2c:38:ef:84:4c:6a:4b:44:84:18:7f:48:b7:8c:
                    97:be:c2:f6:02:26:2d:28:28:75:2d:17:2c:91:6b:
                    5b:79:9a:8f:52:bd:78:67:7a:b9:d3:d5:56:c5:c2:
                    e3:aa:3a:8c:c7:48:0a:7e:e0:3f:a5:37:0c:6c:d9:
                    5a:bd:1e:39:aa:c2:7e:9a:2f:9d:1e:1c:0e:3b:f5:
                    49:75:4a:c0:7b:56:73:56:ff:ba:c1:02:52:15:4a:
                    52:e8:7e:12:cf:46:ad:fd:32:38:54:6d:9f:d4:4f:
                    7e:92:3e:fb:80:30:85:13:38:fc:24:13:73:bc:34:
                    73:a0:1e:e2:85:82:fa:cf:07:c1:34:7b:7e:fd:55:
                    eb:64:3a:ff:ae:e5:14:26:32:0d:d9:c9:43:c6:0d:
                    4a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:30:13:B1:A1:69:AE:C1:C7:9A:BD:A3:5B:52:01:3A:E7:B6:35:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9202255e-df2d-35ba-8254-39cfbd0d0535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.190.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ed:6f:52:2d:45:81:be:6a:3d:5c:7a:db:a9:76:97:d2:db:
         03:0a:22:49:23:2a:ec:f3:81:f5:38:5d:c0:87:84:71:0c:42:
         12:d4:e2:be:08:f0:31:2d:8d:e4:cf:b0:50:19:fa:76:d9:85:
         5a:fc:d6:df:87:c7:5c:68:c7:c0:37:3f:26:12:e3:a2:ce:49:
         c0:4f:54:fe:ed:05:9f:eb:11:2c:e8:77:02:f2:23:6b:d7:2c:
         62:ed:94:c2:3b:b7:2a:e9:db:fa:a9:dd:6c:eb:15:a8:51:72:
         f0:3e:04:9b:a6:55:81:7a:0d:c7:cd:48:12:0c:68:c5:b6:1e:
         4c:37:ca:1f:d6:81:5e:4f:24:a8:e3:54:11:3d:b6:e2:a8:22:
         db:47:b5:b6:c6:0f:48:94:84:21:a8:6b:a8:60:9b:59:d5:6f:
         89:c7:0b:ed:24:50:f8:ae:72:d9:33:34:44:35:63:f2:30:88:
         e3:5c:4f:bb:5b:26:7b:61:f4:eb:57:53:61:79:77:bf:7b:f8:
         1c:8e:a1:ab:7e:b1:f1:70:09:10:0a:29:5d:83:68:b9:85:2f:
         a2:a3:ab:7b:2c:b2:60:cc:dc:6a:87:17:29:c7:f3:44:0c:02:
         06:13:54:3e:e5:fa:38:2c:b5:62:e8:05:0b:fd:50:7f:07:ff:
         ef:3e:d9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:38:35 2024 by rpki-client on console-ams.rpki-client.org