Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6955f69-2ae5-3872-b11a-e4bef6a9a595.roa
File:                     d6955f69-2ae5-3872-b11a-e4bef6a9a595.roa (raw, json)
Hash identifier:          INSCYOY0e9O1HdQ+Qikj65nY8+JY3IwbHpFqAFz0zxw=
Subject key identifier:   FA:99:25:48:87:63:56:C6:E2:9B:84:6D:B7:C3:AB:01:90:D0:79:5F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCBFCB302BFDCD521CD48C6B0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6955f69-2ae5-3872-b11a-e4bef6a9a595.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        98.170.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:fc:b3:02:bf:dc:d5:21:cd:48:c6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=cb5bdfb0-ea1c-43d0-852f-8f2792d7078e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:db:d7:9d:64:e5:90:c0:fa:e6:be:98:a7:3a:
                    9c:27:60:b8:b9:20:b9:6b:3e:d0:d1:cc:94:0d:a8:
                    3a:df:57:e0:92:99:d1:97:03:0c:4d:8e:36:ff:57:
                    96:96:6a:93:9e:ee:1a:7e:80:3a:de:23:95:ca:63:
                    97:ca:df:3a:41:ba:05:d7:72:eb:8e:40:0e:db:19:
                    f1:20:82:bb:ea:f6:30:c5:dc:1d:f3:c5:66:2e:16:
                    bf:c8:c8:40:dc:e8:52:5a:f5:6e:42:ee:39:74:d5:
                    f6:11:a7:c3:e1:71:fe:f2:91:bf:45:1a:c6:8c:a5:
                    1b:43:9a:95:51:43:cd:4c:31:84:df:61:13:3c:b9:
                    93:8d:55:04:49:21:83:85:9e:a4:fa:71:24:af:fb:
                    37:58:19:08:69:9f:72:91:82:36:b4:f8:b2:ca:58:
                    68:3f:6b:f3:b8:4b:97:80:ff:80:3d:04:d8:94:ae:
                    b9:5f:1e:62:86:61:e9:eb:1b:8a:77:67:3c:1d:59:
                    cd:14:1c:02:ea:02:58:ae:66:e5:08:e6:58:75:b6:
                    4f:44:88:4d:ec:a4:9e:a8:43:ab:68:49:bb:96:82:
                    63:63:82:ae:c8:74:83:d7:7b:4b:99:ae:43:3c:08:
                    28:ba:e9:a7:5b:14:de:f8:d0:98:73:2b:41:e1:ed:
                    be:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:99:25:48:87:63:56:C6:E2:9B:84:6D:B7:C3:AB:01:90:D0:79:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6955f69-2ae5-3872-b11a-e4bef6a9a595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.170.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:79:80:56:ce:5c:fa:ac:f0:c2:7d:14:66:45:f6:c9:31:05:
         c6:ec:66:8d:cd:ac:55:2c:b3:e5:b4:f3:44:42:bc:49:f6:e3:
         17:29:0d:e7:ba:0e:22:8b:82:19:30:25:32:de:60:93:57:d2:
         43:70:f2:b8:dc:1d:7e:cc:ed:df:64:04:50:1f:c1:2e:f8:af:
         6e:ba:4b:6e:c9:4d:7f:a2:4b:5e:be:34:c9:90:57:4a:e8:c1:
         7b:5c:ea:cc:0b:ba:ba:4b:a5:e1:1f:a5:d7:be:8f:2f:26:c5:
         85:f6:b0:80:06:f7:ce:f0:5a:18:45:04:a8:3f:a9:26:1b:87:
         61:25:c9:27:cf:59:05:0a:a5:97:15:f0:e9:35:64:2d:2a:09:
         41:43:67:cc:ed:e8:d5:6c:56:94:0e:6c:b1:a7:8a:cc:3d:39:
         ca:04:64:9d:50:f2:3a:51:c8:77:36:40:27:25:87:e5:32:94:
         82:e9:54:65:06:22:6a:21:45:76:60:40:02:2c:98:93:d7:fd:
         26:d5:69:b9:de:20:ed:e8:cb:dc:b0:aa:ac:54:fd:c0:cd:7e:
         8b:9b:eb:f1:7c:23:1c:8c:ea:b6:31:b8:7f:9c:c7:5e:1d:31:
         b3:2d:fb:03:c8:dc:0a:29:e4:34:32:43:04:39:09:44:1a:60:
         a1:49:79:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 03:14:57 2024 by rpki-client on console-fra.rpki-client.org