Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f890ff3-d3e2-3a29-9b0b-68594944e94b.roa
File:                     7f890ff3-d3e2-3a29-9b0b-68594944e94b.roa (raw, json)
Hash identifier:          154dYGxEBs96y16bj1boxYCwu3iuERpyVBnsuLtRoNM=
Subject key identifier:   94:C7:00:30:BB:32:3D:B0:79:D5:5F:AC:A5:33:A0:5B:F1:0C:9B:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049659D5FDAEF9B1E1AA900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f890ff3-d3e2-3a29-9b0b-68594944e94b.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        70.90.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:65:9d:5f:da:ef:9b:1e:1a:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=21fa506a-29a8-45fa-ba85-676b49c2ecb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:83:fe:f2:0e:44:70:e6:b4:3a:66:3b:93:
                    83:9a:6f:2c:53:bc:64:ee:1b:f7:5e:cd:c3:6c:38:
                    6f:a1:36:68:09:2d:1b:63:f9:24:d1:ba:bc:e7:f8:
                    3c:d2:79:72:f0:d8:2c:65:a0:74:f3:27:ce:6c:8b:
                    d2:65:d3:66:d8:15:0a:95:3d:2b:57:8b:ca:05:f9:
                    40:21:94:56:2e:ad:ab:5b:1c:0f:07:85:04:b2:0a:
                    70:d5:42:a0:15:ed:fc:a4:9e:f8:bd:7d:c7:af:e7:
                    0c:84:fb:40:24:1b:7a:f5:33:a3:79:bb:03:ee:48:
                    3d:bf:82:a6:56:f6:4e:d0:75:ab:b1:e3:70:48:b9:
                    9e:bf:52:f2:e0:7d:db:5f:51:f0:87:61:84:26:58:
                    40:be:ce:a7:5c:a5:ee:38:32:77:ce:91:00:59:a6:
                    51:40:36:ee:c4:6c:f4:2d:4a:09:d4:23:b2:15:df:
                    7a:92:4d:78:96:5d:35:92:2b:1c:20:14:15:9d:7c:
                    be:a7:07:9f:85:c5:51:a1:9c:c4:68:7e:12:c4:44:
                    6b:6d:45:ac:a6:06:41:52:65:80:c6:ac:47:be:9d:
                    a4:55:97:01:54:5c:ff:ee:f2:36:cb:a3:e4:5c:30:
                    cd:d4:4d:ac:cd:3a:16:72:ba:5b:93:01:5b:e2:df:
                    18:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C7:00:30:BB:32:3D:B0:79:D5:5F:AC:A5:33:A0:5B:F1:0C:9B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f890ff3-d3e2-3a29-9b0b-68594944e94b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.90.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:ac:fc:2d:02:4e:e8:a5:8d:97:00:b2:10:02:e1:3a:03:37:
         ef:c5:a8:19:7d:53:48:94:09:4f:4f:86:5b:d3:7d:b3:d7:c2:
         51:80:e8:e4:c7:ac:39:f7:db:18:7d:b8:d1:29:27:eb:0f:ef:
         1b:e8:71:a2:fb:7f:71:01:50:37:82:dd:62:dc:8a:d3:51:21:
         ac:31:ff:73:f9:cc:25:0b:da:fc:5d:1b:8f:f4:af:c0:cf:4b:
         fb:f5:ce:d1:d5:92:d6:b5:49:a7:06:e7:d1:4d:8d:ac:dc:d3:
         98:6c:df:b7:40:24:3a:ad:5f:7d:8d:a4:b4:56:ab:f5:b8:e6:
         31:ab:90:80:04:30:5f:04:b1:76:c4:a0:7a:15:6d:78:84:be:
         b7:48:1f:e2:7c:d8:09:67:79:ae:84:4f:14:e6:4b:e7:2d:99:
         eb:8f:4e:ff:e8:25:f7:5b:a1:43:c6:05:f5:7d:8a:80:ee:f0:
         60:9b:8a:53:85:fa:48:e8:33:1d:8b:a0:1b:4b:0c:43:ee:7d:
         55:ac:a2:77:d7:dd:65:90:8c:7e:35:6b:a3:37:d4:af:0a:67:
         38:ce:51:f2:e2:94:bb:03:61:8f:40:f9:87:4b:96:ac:28:05:
         6f:19:74:15:29:93:26:50:07:9a:b8:b1:03:3d:5b:7c:e7:b1:
         89:29:4c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:15:10 2024 by rpki-client on console-ams.rpki-client.org