Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9a5f922-eddd-306d-a41e-0430f8764d26.roa
File:                     c9a5f922-eddd-306d-a41e-0430f8764d26.roa (raw, json)
Hash identifier:          B41x5XwHhX1bZnmi2rpcQ1Ms852nGpEtPekBXvda+kg=
Subject key identifier:   36:CB:BE:FB:07:5F:9B:E3:7E:B9:33:D8:72:48:0D:F0:E8:04:B2:67
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858474DE60FED038CB6C8CC7E4700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9a5f922-eddd-306d-a41e-0430f8764d26.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     22773
IP address blocks:        98.170.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e6:0f:ed:03:8c:b6:c8:cc:7e:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=56a731db-8c3a-4b98-b86a-a544e6da96f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:01:ae:11:9d:66:77:70:8c:d0:f1:26:f1:c7:
                    a3:b9:78:75:cd:04:1f:c5:3d:ce:f9:93:63:eb:2c:
                    e8:a2:bd:0f:66:3b:df:c4:f9:87:10:14:d2:97:49:
                    7f:9b:e0:2c:5c:c4:56:55:cc:2c:08:13:b2:0f:59:
                    12:c4:38:05:c3:9f:3b:0b:a6:08:3b:85:06:c4:4f:
                    4c:fe:8d:6a:7f:f0:5b:43:18:03:25:ef:b2:77:26:
                    11:a9:5e:4f:0e:66:ed:38:28:af:52:ae:8c:80:59:
                    b2:95:46:e1:34:2a:ba:cf:b9:3c:a1:67:83:21:ca:
                    12:6e:38:7f:b8:aa:db:47:3a:33:8f:92:98:9b:b3:
                    af:51:15:ba:3f:e7:28:a4:6c:f3:99:2f:a4:3b:45:
                    00:38:29:cb:c5:b5:7b:8a:33:82:5a:55:0e:b2:a7:
                    5c:9f:62:c0:4e:01:cf:99:4b:0d:dc:31:77:6e:0e:
                    b3:4a:e6:48:ae:13:f9:f6:0e:a7:06:72:7c:88:1d:
                    4e:6c:ed:17:35:18:1a:b4:9a:fe:b6:e4:55:b5:25:
                    f2:69:27:46:d0:de:99:2d:fd:ed:85:7d:68:82:be:
                    51:c1:24:5e:a7:3a:17:17:91:20:69:92:64:e0:42:
                    da:d0:b2:9e:da:ad:18:07:4b:3d:f1:a6:e3:2e:d4:
                    14:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CB:BE:FB:07:5F:9B:E3:7E:B9:33:D8:72:48:0D:F0:E8:04:B2:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9a5f922-eddd-306d-a41e-0430f8764d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.170.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:51:e2:2d:41:a0:12:f4:d4:fd:fd:c9:ed:01:6f:f2:57:4f:
         7a:61:09:e2:f7:f7:f0:57:f4:1b:f6:08:f7:c7:73:fd:ad:89:
         c0:78:7c:b9:d1:10:4e:31:16:26:4e:ff:6b:6d:6d:af:c3:28:
         aa:0b:8e:dc:17:19:75:17:0e:5f:8b:f4:52:c8:3d:3d:2e:58:
         d6:4c:9b:0c:73:82:ed:c0:4b:9d:79:cf:e3:85:70:80:94:32:
         3c:7f:40:0f:0f:08:49:5d:1a:59:1c:0e:9a:a2:2e:b8:27:b6:
         e3:43:8e:2f:41:22:08:a6:eb:d7:06:2b:28:63:a5:02:0c:9f:
         ac:83:98:04:4c:81:c0:f6:c4:d4:cc:86:c3:2c:db:c6:7c:2d:
         66:c9:99:b0:fe:c5:c8:c5:43:8f:13:82:6e:9a:dc:04:9e:b8:
         da:ee:8c:7f:d4:14:53:b6:40:a5:90:38:6a:de:d7:a2:7c:c4:
         5d:0b:4c:7e:80:4c:9d:83:04:40:e2:4b:8d:c6:9b:c8:3c:84:
         33:cd:00:38:ca:09:c1:cb:4f:65:29:fc:a1:f9:be:0c:48:2a:
         c7:27:67:d4:20:64:3c:17:18:d4:f7:c9:5e:a3:ed:86:18:d4:
         92:09:42:89:f4:03:76:a8:8e:80:ac:dc:74:0c:41:b1:23:54:
         10:70:d4:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdN5g/tA4y2yMx+RwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI0MDkyMzAxMDAzMVoXDTI0MTIyMjAyMDAzMVowLzEtMCsGA1UEAxMk
NTZhNzMxZGItOGMzYS00Yjk4LWI4NmEtYTU0NGU2ZGE5NmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwGuEZ1md3CM0PEm8cejuXh1zQQfxT3O+ZNj
6yzoor0PZjvfxPmHEBTSl0l/m+AsXMRWVcwsCBOyD1kSxDgFw587C6YIO4UGxE9M
/o1qf/BbQxgDJe+ydyYRqV5PDmbtOCivUq6MgFmylUbhNCq6z7k8oWeDIcoSbjh/
uKrbRzozj5KYm7OvURW6P+copGzzmS+kO0UAOCnLxbV7ijOCWlUOsqdcn2LATgHP
mUsN3DF3bg6zSuZIrhP59g6nBnJ8iB1ObO0XNRgatJr+tuRVtSXyaSdG0N6ZLf3t
hX1ogr5RwSRepzoXF5EgaZJk4ELa0LKe2q0YB0s98abjLtQUiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbLvvsHX5vjfrkz2HJIDfDoBLJnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzlhNWY5MjItZWRkZC0z
MDZkLWE0MWUtMDQzMGY4NzY0ZDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJZR4i1BoBL01P39ye0Bb/JXT3phCeL39/BX9Bv2CPfHc/2ticB4fLnR
EE4xFiZO/2ttba/DKKoLjtwXGXUXDl+L9FLIPT0uWNZMmwxzgu3AS515z+OFcICU
Mjx/QA8PCEldGlkcDpqiLrgntuNDji9BIgim69cGKyhjpQIMn6yDmARMgcD2xNTM
hsMs28Z8LWbJmbD+xcjFQ48Tgm6a3ASeuNrujH/UFFO2QKWQOGre16J8xF0LTH6A
TJ2DBEDiS43Gm8g8hDPNADjKCcHLT2Up/KH5vgxIKscnZ9QgZDwXGNT3yV6j7YYY
1JIJQon0A3aojoCs3HQMQbEjVBBw1DY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:55 2024 by rpki-client on console-fra.rpki-client.org