Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9d96e92b-1924-33b3-8fa0-e59a44d16c38.roa
File:                     9d96e92b-1924-33b3-8fa0-e59a44d16c38.roa (raw, json)
Hash identifier:          N/36RnPXMPnJmeLNo6bxuWXFU+UcP5bDgy3sFaV/U/M=
Subject key identifier:   AA:90:18:0A:9D:52:44:D9:00:F4:AF:ED:30:76:1D:30:70:50:A7:C8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCBFF5A5B4A186C438E9624C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9d96e92b-1924-33b3-8fa0-e59a44d16c38.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        184.189.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:ff:5a:5b:4a:18:6c:43:8e:96:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=d9c8e3d2-d837-4ec9-8bc3-639376e2f9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3c:d4:c8:89:f4:cb:4c:97:89:19:43:7a:ac:
                    d4:fa:00:84:95:13:bf:52:93:6f:5d:21:dd:9b:52:
                    ce:aa:19:9c:40:7c:f3:59:03:ed:73:55:45:f2:e0:
                    ee:5f:fb:9f:bd:18:62:04:4f:f2:fc:23:25:4b:2c:
                    ec:cc:86:d9:58:d9:c4:81:11:d8:c3:b7:6f:63:23:
                    31:d3:3e:94:d7:57:98:51:4a:79:30:20:d1:2f:cb:
                    54:fd:a0:64:6a:9d:f1:23:f9:aa:83:4f:ec:ba:ea:
                    c0:06:70:4a:b4:95:1d:c4:24:83:5a:6a:6b:20:95:
                    97:80:1b:dd:63:b9:b7:45:4e:0c:3f:76:9d:0b:c4:
                    dd:19:37:8a:d2:6e:9c:14:10:19:85:82:97:ec:1d:
                    18:70:1f:75:4f:fd:4a:85:ec:15:9f:ec:e3:e4:40:
                    08:41:1e:ea:48:1e:a6:6d:ba:3a:f1:8b:6f:7f:c5:
                    8d:cf:8b:3a:0b:b0:5d:d8:97:f0:a6:3e:cc:ee:c9:
                    fb:e3:91:81:11:92:df:a3:c6:e4:fc:ef:40:fe:0b:
                    e2:83:73:00:8e:65:8b:12:b1:17:9f:59:f8:c9:91:
                    64:b6:0d:68:29:f3:9e:a0:f5:94:ad:86:49:6b:3e:
                    ee:9e:62:9a:62:3f:54:50:89:1c:5f:8c:b0:f2:ee:
                    60:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:90:18:0A:9D:52:44:D9:00:F4:AF:ED:30:76:1D:30:70:50:A7:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9d96e92b-1924-33b3-8fa0-e59a44d16c38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.189.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d9:5a:ae:4f:7d:99:33:1b:30:42:b3:15:d2:a7:17:db:3d:
         6c:06:d1:e6:06:2f:f8:ff:ed:55:3e:c8:3d:c0:d7:7f:ff:a0:
         43:38:44:a5:38:b3:b2:d6:25:22:75:dc:13:3b:53:0e:f3:0b:
         ff:16:7f:ff:78:0b:7e:79:3f:3a:c1:0d:8f:40:3b:49:68:22:
         49:8f:15:8b:a4:76:bc:32:89:b2:df:a7:1b:52:91:4b:ea:e1:
         67:76:e2:55:ab:78:04:5d:e0:89:f9:31:bf:c5:f1:43:41:5f:
         91:3b:06:58:23:61:8a:ff:01:28:85:d7:0d:83:86:e5:30:a4:
         fe:30:fc:f3:86:32:d9:54:85:ff:47:b3:f1:72:5a:ac:8a:7d:
         43:e3:eb:93:81:8f:03:34:db:2e:d7:e7:71:bc:dc:a6:aa:13:
         d7:f2:8a:99:eb:13:ce:47:76:b0:ad:85:6e:16:ff:13:7a:e4:
         c2:bd:df:e5:75:fd:4c:4e:d8:d7:fe:5e:ee:66:4b:55:60:2f:
         6d:ef:ee:8c:d9:fc:5f:fb:e9:74:85:04:c4:8f:a6:09:9f:98:
         0e:d4:cf:a6:05:7b:b3:9a:b7:71:27:63:94:c2:11:d6:b2:e1:
         25:1c:8a:52:f6:fc:af:8d:3d:1b:ca:04:9d:c9:6a:7d:c4:83:
         e3:0a:d5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 17:58:00 2024 by rpki-client on console-fra.rpki-client.org