Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa281694-fb90-34e9-9226-be81c9701b67.roa
File:                     aa281694-fb90-34e9-9226-be81c9701b67.roa (raw, json)
Hash identifier:          zQff3ozSBRFK5kvHJw7WJyWHxYY2vPsZ7wQDKL0+BeI=
Subject key identifier:   E4:9F:08:19:C4:9D:76:F9:53:C5:C4:E8:24:5B:43:B3:3D:61:D2:8D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5FDC474002D5948728E55C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa281694-fb90-34e9-9226-be81c9701b67.roa
Signing time:             Thu 01 May 2025 17:26:27 +0000
ROA not before:           Thu 01 May 2025 17:26:27 +0000
ROA not after:            Wed 30 Jul 2025 17:26:27 +0000
asID:                     22773
IP address blocks:        98.176.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:fd:c4:74:00:2d:59:48:72:8e:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:26:27 2025 GMT
            Not After : Jul 30 17:26:27 2025 GMT
        Subject: CN=a2acf3dd-e3ad-439b-acff-bc30a22efec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a9:03:7e:36:36:60:df:98:48:f5:e0:4c:01:
                    9c:05:11:79:8c:19:28:4c:85:fd:01:ec:d4:ba:ca:
                    79:c3:39:3c:18:01:65:46:dd:22:e7:3d:16:a6:e0:
                    6b:9a:1a:03:a2:0e:8b:94:8c:fa:72:df:bc:a1:8e:
                    64:c9:0d:79:3e:bc:ea:38:d7:25:90:5d:8c:71:00:
                    1d:96:b2:cc:4d:42:ea:2a:5d:da:6f:2b:6d:1d:9c:
                    e0:93:bc:10:0f:f6:10:4e:86:46:ea:05:c1:52:a4:
                    4d:40:04:e7:1c:e6:47:e3:24:97:d1:53:3e:0c:ad:
                    5b:aa:05:cb:06:7c:fe:28:51:33:80:f7:79:32:ca:
                    38:1a:73:08:c5:a3:07:75:84:94:33:dd:f1:a1:92:
                    fa:d8:74:fe:3e:22:d2:f1:76:c4:e2:ba:db:f9:4e:
                    a8:05:51:88:11:70:0b:85:9d:6b:91:fe:3b:30:83:
                    4e:ad:ec:21:1d:62:18:78:9b:4c:7d:7f:b0:94:5f:
                    96:84:aa:67:60:a3:99:f5:67:d6:87:ad:43:da:5c:
                    36:a0:51:4d:0b:c8:21:f3:44:27:a2:4c:06:d2:b4:
                    20:d1:fd:94:45:f6:8e:40:24:29:51:c8:b4:f0:f5:
                    65:5a:87:e1:44:62:96:24:b2:24:57:58:5c:5c:e3:
                    1e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9F:08:19:C4:9D:76:F9:53:C5:C4:E8:24:5B:43:B3:3D:61:D2:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa281694-fb90-34e9-9226-be81c9701b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.176.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:34:48:08:ca:19:a0:ee:39:c5:fd:42:16:f1:c1:01:66:b1:
         a0:51:be:c3:59:fb:02:52:d0:de:5b:c6:32:a4:d4:d9:e7:49:
         82:7a:18:2f:a1:77:da:65:f4:72:4c:7e:40:a5:59:97:55:a1:
         f8:a0:44:74:40:30:c0:31:44:dd:38:81:d5:a5:b1:5c:1c:73:
         96:ed:fa:ce:20:c5:fd:19:61:6f:01:16:f2:03:d1:49:c9:c1:
         21:22:87:1a:43:0f:50:38:60:c7:9d:5a:5b:8b:f1:08:27:11:
         59:2e:05:3f:3a:80:0f:fa:c1:01:a2:15:a8:b5:71:71:b9:8c:
         95:0e:33:78:9f:88:19:72:e8:15:10:98:7b:48:9e:8c:f9:34:
         dd:4b:c6:74:20:87:f9:8b:f3:df:24:81:b6:16:6d:cf:27:d4:
         48:f4:15:3e:32:f4:47:86:18:89:aa:41:b7:0d:45:cd:9b:d2:
         64:a7:bc:a6:2f:ca:0e:73:27:98:c6:f0:8c:1a:e2:53:42:08:
         53:3c:02:9d:4a:9c:ad:bd:a6:e6:eb:6c:bd:63:01:48:77:56:
         30:e2:24:7e:c4:6a:f8:dc:7a:cf:a1:26:38:8e:39:0a:d7:87:
         15:2a:89:a1:97:9a:b4:7e:55:88:aa:4d:6a:05:87:17:ec:1c:
         76:e9:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:44:13 2025 by rpki-client