Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1862172-d8e7-30d4-819a-07efc5a4f0e3.roa
File:                     c1862172-d8e7-30d4-819a-07efc5a4f0e3.roa (raw, json)
Hash identifier:          /TbK5tuVbR5HEQ8qdG+hb1UFeHT2jfZjjzmvWf/e3e4=
Subject key identifier:   32:77:EE:8A:29:51:D7:6D:EA:9B:8B:CF:82:7C:84:DC:92:F6:45:2A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D76FA0C56539DC60671CAD860
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1862172-d8e7-30d4-819a-07efc5a4f0e3.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sun 04 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        98.166.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:76:fa:0c:56:53:9d:c6:06:71:ca:d8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2027 GMT
        Subject: CN=df50c311-6918-427b-8b4f-d4a6868ecd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:66:af:a4:ab:20:c7:b0:fb:37:25:d1:e3:68:
                    1f:12:2a:10:d9:8b:5b:51:65:63:aa:a3:2d:32:37:
                    e5:04:60:c5:ec:9e:78:1b:ad:2a:54:aa:af:e8:a2:
                    bf:99:2f:2c:f5:48:c5:c6:91:fc:55:f6:b0:ac:a5:
                    6b:25:8e:f1:61:43:fd:32:4f:81:07:1f:99:c9:ed:
                    a6:b4:ce:aa:a4:65:69:be:6a:22:c8:47:a3:a1:04:
                    f3:fd:fa:01:f5:78:80:aa:2a:5f:7e:77:80:cb:92:
                    47:17:4f:13:b7:dc:3d:2b:6e:64:37:30:53:ee:2e:
                    10:ab:58:5c:fb:18:14:e8:bf:4c:00:d5:57:64:7d:
                    dc:bf:75:19:52:5c:3f:cf:db:6d:2d:eb:ed:df:96:
                    e4:05:ec:91:c1:54:bb:88:f4:1a:fc:91:ec:25:99:
                    a9:bd:64:a6:00:d6:bd:87:64:eb:19:e2:f4:45:32:
                    30:e7:2f:17:c4:5c:dc:20:85:5b:2a:67:a8:e3:28:
                    4c:d2:2f:47:22:4e:f8:8c:0d:2c:d3:1e:1c:3c:ee:
                    94:12:00:57:20:9e:80:cd:15:50:5e:14:31:c5:e6:
                    9e:c7:78:e0:e3:64:0c:a9:a1:f5:d9:8f:0c:77:4d:
                    59:ef:6f:07:21:d3:5d:84:db:95:85:17:96:a7:fe:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:77:EE:8A:29:51:D7:6D:EA:9B:8B:CF:82:7C:84:DC:92:F6:45:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1862172-d8e7-30d4-819a-07efc5a4f0e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:79:e0:c7:96:39:ec:b8:96:7b:fc:df:7c:eb:11:c5:80:38:
         67:69:1b:06:a7:1a:53:38:b8:c7:76:37:69:f8:5a:6a:65:7d:
         56:21:bd:ef:c7:52:f4:db:a6:b5:19:af:03:e8:8e:3e:3c:f4:
         e4:33:2b:6a:2f:62:13:3a:69:d1:5b:4e:cf:04:53:59:a1:d0:
         ed:3f:86:85:8b:20:4a:ec:1c:01:35:89:6d:dd:45:6e:1a:6f:
         39:6b:a7:13:d0:8a:df:9e:0b:3b:10:5f:42:78:86:18:63:25:
         b6:93:bb:04:76:8d:60:e9:43:45:02:43:fb:9e:5c:4b:05:6f:
         5b:2d:d2:65:19:24:76:f1:7d:a7:a1:46:34:e4:dd:53:af:66:
         17:ba:89:1a:a6:c1:c4:90:58:9e:55:25:26:b5:52:64:14:3c:
         45:19:e9:1c:81:ee:b3:24:93:f0:2c:a4:52:c9:17:1f:62:6a:
         7b:12:45:df:7d:0b:4f:de:02:69:c1:92:7a:12:ab:d0:db:6f:
         ec:97:62:0d:1d:e7:1b:1d:dd:15:8b:2d:a0:18:65:51:81:d4:
         8a:94:ea:39:64:8e:7d:0b:e3:ca:a2:1b:d6:f0:15:69:6a:55:
         81:fd:ac:ba:d7:44:5a:cc:f6:a4:fe:3a:46:80:58:3a:42:ff:
         7d:61:37:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 03:23:11 2024 by rpki-client on console-ams.rpki-client.org