Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9292994-664d-3a6d-8342-2643328cd64b.roa
File:                     e9292994-664d-3a6d-8342-2643328cd64b.roa (raw, json)
Hash identifier:          Y6rVhvXU5nUpwZQOnyv3E5I7Xosa5kB0O0p+uJDZGmo=
Subject key identifier:   3D:28:64:49:15:23:C7:2B:DE:28:57:51:5A:75:72:32:4B:CE:F8:71
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285848E16BF162F3DEB43715C55100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9292994-664d-3a6d-8342-2643328cd64b.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     19905
IP address blocks:        98.173.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:f1:62:f3:de:b4:37:15:c5:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=5496717a-aa83-47ba-acf1-e74f4bfa07cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:ac:cd:6c:51:0f:47:de:11:07:f7:0a:a5:
                    bc:4e:75:a8:2a:8e:db:52:82:5f:3b:c0:5c:18:cf:
                    b5:17:20:d6:e0:af:00:80:08:a6:a9:d4:9b:9f:4e:
                    3b:88:82:21:ad:83:7d:7d:07:6c:48:1c:8b:ab:ee:
                    b5:62:41:64:ca:74:b7:6d:60:14:98:11:b8:56:ac:
                    57:e1:66:15:bb:31:bd:ea:86:07:56:70:c3:95:71:
                    5a:98:9c:80:cc:3c:60:4c:27:7e:d4:f1:6c:ff:3a:
                    31:ea:1c:b9:e9:b9:ea:6f:e7:1c:0d:92:f6:47:4e:
                    d2:67:f4:c0:4b:4a:53:53:6c:2b:43:cc:1d:5e:fc:
                    5d:8d:5b:54:11:da:74:b0:5e:d3:63:90:82:6d:33:
                    86:db:b6:1d:0a:4f:81:17:2a:27:8e:99:c2:e5:eb:
                    62:50:2e:f3:fb:c3:f5:6a:5e:15:4e:7f:26:20:70:
                    1c:a2:e1:e2:cd:a0:c2:95:e0:a5:29:ca:c5:40:10:
                    4c:0f:09:8e:a4:a9:28:80:d7:95:59:08:08:4d:98:
                    90:b9:4a:ea:e6:76:d1:d7:ea:4e:d1:0a:29:24:4a:
                    83:24:89:a6:66:b6:6a:be:75:ee:4f:6c:e4:d9:fa:
                    8f:6d:ea:b1:fd:6c:4a:10:2a:6c:c0:b9:46:84:5f:
                    4e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:28:64:49:15:23:C7:2B:DE:28:57:51:5A:75:72:32:4B:CE:F8:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9292994-664d-3a6d-8342-2643328cd64b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.173.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:0f:3a:89:c8:7b:ec:46:52:ec:f8:12:80:a1:35:a2:0d:ce:
         de:12:c4:3c:99:f3:09:3a:0c:1f:92:a6:e8:4f:02:52:9f:7c:
         1f:99:42:cb:02:0c:d0:e0:92:7b:4b:8e:0b:04:a7:d5:ea:78:
         05:47:d2:2e:cb:32:b8:c1:ee:35:c1:66:96:1f:2a:ba:07:b2:
         e2:7b:d4:ef:19:a3:b4:fd:8b:04:dc:6b:3e:12:49:1e:89:1b:
         17:7f:21:e8:47:4d:9f:fa:8d:d2:ec:5c:b8:2d:a0:54:2f:b2:
         84:ee:e4:59:24:49:76:b1:17:d2:e1:cd:36:d4:0c:49:5c:81:
         b4:72:3a:a4:c0:59:9a:48:26:d1:6a:16:a7:58:ee:b7:a6:45:
         b4:90:65:54:c7:44:61:6d:ed:74:6d:77:f2:11:72:3d:99:7a:
         22:f6:14:40:4d:17:19:2d:8d:4b:12:d1:64:b5:82:6e:2c:60:
         cb:6e:95:c4:5e:45:41:70:b8:a5:d1:95:73:0d:ec:78:b7:32:
         b6:1f:54:99:b2:20:f5:ab:93:fa:67:89:b3:e5:82:c9:6c:fe:
         0d:65:b1:c6:ac:1f:10:9e:f8:97:96:10:60:8e:1d:70:3d:3d:
         78:3d:e4:4b:af:1d:66:3f:52:4e:94:3b:bc:4d:3b:14:01:45:
         af:c8:6c:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha/Fi8960NxXFUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
NTQ5NjcxN2EtYWE4My00N2JhLWFjZjEtZTc0ZjRiZmEwN2NiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocSszWxRD0feEQf3CqW8TnWoKo7bUoJfO8Bc
GM+1FyDW4K8AgAimqdSbn047iIIhrYN9fQdsSByLq+61YkFkynS3bWAUmBG4VqxX
4WYVuzG96oYHVnDDlXFamJyAzDxgTCd+1PFs/zox6hy56bnqb+ccDZL2R07SZ/TA
S0pTU2wrQ8wdXvxdjVtUEdp0sF7TY5CCbTOG27YdCk+BFyonjpnC5etiUC7z+8P1
al4VTn8mIHAcouHizaDCleClKcrFQBBMDwmOpKkogNeVWQgITZiQuUrq5nbR1+pO
0QopJEqDJImmZrZqvnXuT2zk2fqPbeqx/WxKECpswLlGhF9O/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD0oZEkVI8cr3ihXUVp1cjJLzvhxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTkyOTI5OTQtNjY0ZC0z
YTZkLTgzNDItMjY0MzMyOGNkNjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYq1jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGMPOonIe+xGUuz4EoChNaINzt4SxDyZ8wk6DB+SpuhPAlKffB+ZQssC
DNDgkntLjgsEp9XqeAVH0i7LMrjB7jXBZpYfKroHsuJ71O8Zo7T9iwTcaz4SSR6J
Gxd/IehHTZ/6jdLsXLgtoFQvsoTu5FkkSXaxF9LhzTbUDElcgbRyOqTAWZpIJtFq
FqdY7remRbSQZVTHRGFt7XRtd/IRcj2ZeiL2FEBNFxktjUsS0WS1gm4sYMtulcRe
RUFwuKXRlXMN7Hi3MrYfVJmyIPWrk/pnibPlgsls/g1lscasHxCe+JeWEGCOHXA9
PXg95EuvHWY/Uk6UO7xNOxQBRa/IbD8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:46:55 2025 by rpki-client