Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ea5675c5-2106-3651-91de-9e181fd3f9ed.roa
File:                     ea5675c5-2106-3651-91de-9e181fd3f9ed.roa (raw, json)
Hash identifier:          jzPCq5pm1jB3B7Mgxlc4q2mGL20ZYMOTCGrXEoS9qz8=
Subject key identifier:   FE:E7:B5:03:3F:C5:36:57:57:CE:40:9E:39:84:FA:CC:CA:4C:2A:91
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D51FE56E168EC4E5DCB88E900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ea5675c5-2106-3651-91de-9e181fd3f9ed.roa
Signing time:             Tue 22 Mar 2022 04:00:00 +0000
ROA not before:           Tue 22 Mar 2022 04:00:00 +0000
ROA not after:            Mon 22 Mar 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        98.163.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:51:fe:56:e1:68:ec:4e:5d:cb:88:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 22 04:00:00 2022 GMT
            Not After : Mar 22 04:00:00 2027 GMT
        Subject: CN=5c04e893-6e8c-4ff6-aaa2-c8d4f85692b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:89:33:ae:83:53:c9:60:25:04:be:14:fd:
                    ce:de:42:16:4a:78:37:74:28:79:64:63:0e:8b:37:
                    20:0a:89:1a:97:43:5c:d5:2e:a1:b9:93:cb:33:72:
                    7b:b9:65:5e:ad:89:ea:e9:39:27:be:20:62:49:bf:
                    d1:b4:54:7b:69:b8:12:ce:57:d8:70:b6:c9:fa:b6:
                    dc:1c:d6:81:00:51:fc:d7:e6:a1:be:3a:81:92:2f:
                    09:88:60:4c:ca:3f:1c:dc:1c:e2:d0:52:6c:3b:5e:
                    11:f5:dc:94:d6:32:7a:e3:4e:0f:c7:1a:99:36:42:
                    c4:6a:25:c1:e4:35:39:ab:ce:dc:08:be:5f:9d:6c:
                    e2:cf:87:96:f3:c2:3a:d8:0a:c6:85:2b:68:28:8c:
                    75:66:1a:e5:d1:f7:f4:e1:07:21:85:b5:9d:b5:aa:
                    f9:b5:2d:48:4b:e5:ad:36:83:74:97:24:9b:e7:59:
                    23:d6:fa:1d:05:b5:67:99:01:24:b6:60:84:20:f1:
                    29:2e:fb:ec:e3:c5:70:84:c8:73:49:db:51:af:12:
                    36:68:05:09:86:92:19:29:f5:11:00:7c:e8:a0:c3:
                    9b:21:bf:4c:63:cd:b5:4b:74:de:f5:5b:18:23:0d:
                    f8:03:3e:f2:51:e0:14:b2:80:7b:f9:42:23:38:96:
                    3f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E7:B5:03:3F:C5:36:57:57:CE:40:9E:39:84:FA:CC:CA:4C:2A:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ea5675c5-2106-3651-91de-9e181fd3f9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.163.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:cb:1e:2a:92:4b:46:05:d1:15:2c:5b:03:61:18:2b:2d:9f:
         03:59:77:a1:84:85:19:52:20:42:b0:5c:1f:ef:dd:03:83:38:
         df:a6:b4:a6:70:64:66:8f:ee:fa:10:f7:5b:cc:15:75:47:d6:
         a4:19:76:28:ce:6e:f6:5b:90:0e:f0:36:89:2d:df:5a:2f:d1:
         ab:c7:d9:ff:69:aa:23:b2:24:1c:13:c9:c0:51:17:90:96:43:
         ef:b4:0d:85:98:e3:9a:24:14:c9:69:3f:32:45:04:83:60:8a:
         a7:f7:e0:86:10:27:2a:c7:74:e4:22:0d:e3:0d:29:89:5b:84:
         97:5e:fe:7f:2e:c0:13:a4:8a:37:87:c7:d4:5d:45:dd:da:79:
         c9:95:f9:9e:f4:08:a0:ea:bf:e8:c5:cc:f2:9a:41:2f:6e:40:
         3c:07:8e:fe:d9:54:06:37:d9:b4:ec:b0:47:d8:c4:92:3e:14:
         9c:94:b8:41:44:39:fa:93:f5:f7:41:bf:aa:c7:d9:da:90:4d:
         7e:b9:d3:c0:cf:aa:77:42:51:71:2a:cd:c6:0f:9d:0e:6c:68:
         8b:a9:65:a8:d8:57:68:21:d4:40:34:e8:0d:9f:bf:04:fe:35:
         1e:6a:26:a4:ca:15:27:84:71:82:c4:04:3c:cb:c8:ae:26:05:
         f0:32:bd:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1R/lbhaOxOXcuI6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTIyMDMyMjA0MDAwMFoXDTI3MDMyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NWMwNGU4OTMtNmU4Yy00ZmY2LWFhYTItYzhkNGY4NTY5MmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd+JM66DU8lgJQS+FP3O3kIWSng3dCh5ZGMO
izcgCokal0Nc1S6huZPLM3J7uWVerYnq6TknviBiSb/RtFR7abgSzlfYcLbJ+rbc
HNaBAFH81+ahvjqBki8JiGBMyj8c3Bzi0FJsO14R9dyU1jJ6404PxxqZNkLEaiXB
5DU5q87cCL5fnWziz4eW88I62ArGhStoKIx1Zhrl0ff04QchhbWdtar5tS1IS+Wt
NoN0lySb51kj1vodBbVnmQEktmCEIPEpLvvs48VwhMhzSdtRrxI2aAUJhpIZKfUR
AHzooMObIb9MY821S3Te9VsYIw34Az7yUeAUsoB7+UIjOJY/ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP7ntQM/xTZXV85AnjmE+szKTCqRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWE1Njc1YzUtMjEwNi0z
NjUxLTkxZGUtOWUxODFmZDNmOWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqOsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3LHiqSS0YF0RUsWwNhGCstnwNZd6GEhRlSIEKwXB/v3QODON+mtKZw
ZGaP7voQ91vMFXVH1qQZdijObvZbkA7wNokt31ov0avH2f9pqiOyJBwTycBRF5CW
Q++0DYWY45okFMlpPzJFBINgiqf34IYQJyrHdOQiDeMNKYlbhJde/n8uwBOkijeH
x9RdRd3aecmV+Z70CKDqv+jFzPKaQS9uQDwHjv7ZVAY32bTssEfYxJI+FJyUuEFE
OfqT9fdBv6rH2dqQTX6508DPqndCUXEqzcYPnQ5saIupZajYV2gh1EA06A2fvwT+
NR5qJqTKFSeEcYLEBDzLyK4mBfAyvZk=
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:42:52 2024 by rpki-client on console-fra.rpki-client.org