Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc49bae2-4b11-34ec-85b7-4cdcc68c75e7.roa
File:                     dc49bae2-4b11-34ec-85b7-4cdcc68c75e7.roa (raw, json)
Hash identifier:          CDnkESHdrV3doqa9F2KyNM9G2bi4ndmdhYxTh05skS8=
Subject key identifier:   BC:67:E8:0D:0E:6D:DD:6A:E7:E9:2F:A0:B9:64:67:B0:03:38:46:1E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858484515958B9D4197BD537ACA80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc49bae2-4b11-34ec-85b7-4cdcc68c75e7.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     22773
IP address blocks:        98.163.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:95:8b:9d:41:97:bd:53:7a:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=e96e0d75-dd7f-496c-bc1a-b5aadf8e0157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f8:46:87:2e:3c:d3:81:9f:59:49:1b:9b:04:
                    3b:b3:79:5a:17:18:55:6d:96:39:0f:20:aa:52:6e:
                    8e:32:4f:58:01:27:03:09:12:7f:5c:ba:9d:40:4a:
                    65:34:2b:57:b0:22:9f:90:8b:23:08:c2:01:4e:8f:
                    5d:29:fb:dd:62:5f:67:63:0c:50:39:34:a9:1e:95:
                    9a:be:ca:11:22:01:c6:56:bf:32:46:d7:83:42:80:
                    50:05:e3:fd:fe:3b:ad:86:af:0a:75:3c:74:bd:72:
                    19:b5:22:6a:bd:f1:c0:82:1a:d5:1c:7e:fd:b8:de:
                    54:3f:8e:f5:63:b8:f1:97:df:5a:dd:ab:f2:48:4a:
                    c2:90:06:a7:ca:6b:35:3c:b5:b2:52:fd:f4:89:4a:
                    8f:64:77:53:d0:6b:a5:a2:de:28:03:95:82:56:ef:
                    2c:9a:79:02:2e:62:ee:20:e7:3c:74:4a:99:b0:61:
                    d9:8a:10:82:79:85:51:d7:61:cf:3a:94:75:a4:5d:
                    05:6c:ed:36:08:d6:92:34:f4:76:22:32:91:c8:fd:
                    66:92:67:d1:e9:1e:78:6d:f2:c7:b9:23:0e:3e:fa:
                    3c:db:bf:31:75:50:c3:dc:7c:1a:ba:41:59:e1:56:
                    57:12:c9:85:11:93:9b:96:3f:cb:e9:2e:dd:41:cd:
                    c0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:67:E8:0D:0E:6D:DD:6A:E7:E9:2F:A0:B9:64:67:B0:03:38:46:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc49bae2-4b11-34ec-85b7-4cdcc68c75e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.163.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ed:9c:2b:08:f6:ea:ff:b8:66:2e:f7:ac:8a:a4:7e:3b:4e:
         d7:b2:b3:69:85:f4:a2:b8:6e:cb:ab:57:59:d1:f7:b5:1c:a7:
         74:fe:05:04:7d:bb:6c:d5:20:3f:b5:d3:8a:8d:33:8e:69:41:
         7b:6c:35:8a:1d:fa:19:67:8e:e0:24:0b:d1:32:be:19:cf:fb:
         dc:5e:d3:e5:14:29:7d:42:f4:02:9f:46:8e:9a:c2:01:35:23:
         5a:79:ee:49:c9:ff:60:9b:fb:63:e8:2c:de:1c:5d:3e:08:db:
         c5:69:30:3f:14:89:27:a2:c8:4d:ef:c5:1d:7e:d1:96:e4:fe:
         c6:1e:20:8a:12:d0:04:1d:10:f5:6f:22:78:80:e5:13:76:ee:
         38:30:75:91:f2:7f:6b:ab:03:73:f8:2e:77:d8:54:13:f8:ed:
         09:29:88:93:21:54:a9:43:2c:fc:27:2b:e5:5a:f3:b8:b2:e9:
         2d:00:f9:55:7e:89:c2:5a:3e:e7:6c:00:9c:d3:df:63:aa:ef:
         6d:7a:eb:8f:92:b1:be:d7:f2:c4:af:d4:e8:4f:fd:43:4c:72:
         41:aa:ec:b0:16:7b:c6:3e:bf:66:06:4c:bf:cd:b2:d2:cb:e9:
         09:71:9a:17:1f:56:f2:55:f9:80:03:45:2a:07:1e:2e:c9:95:
         86:d2:12:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:43 2025 by rpki-client