Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/090b1403-746c-3184-ba2a-20199ab893c1.roa
File:                     090b1403-746c-3184-ba2a-20199ab893c1.roa (raw, json)
Hash identifier:          xAnR2f0eoxNc0fFlV6YKTu61qgNc4kqbV8okNCNLfd8=
Subject key identifier:   CB:1F:E7:88:2B:DE:F8:E7:AE:CD:C9:8A:B8:B7:EB:04:6F:0E:D6:1E
Certificate issuer:       /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial:       010D0C9F43285845840DBDE9B6F46351DCD52200
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/090b1403-746c-3184-ba2a-20199ab893c1.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     7922
IP address blocks:        67.220.72.0/23 maxlen: 24
                          67.220.74.0/24 maxlen: 24
                          67.220.80.0/24 maxlen: 24
                          67.220.88.0/23 maxlen: 24
                          67.220.82.0/24 maxlen: 24
                          67.220.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:bd:e9:b6:f4:63:51:dc:d5:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=7a9d3359-f4c7-40a1-b3c7-2c8ebb3a2a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d4:df:4d:09:84:a7:57:77:e2:d7:ff:f6:18:
                    2b:84:38:7f:3f:45:ce:3f:58:96:41:39:0b:a4:ca:
                    d8:52:09:52:31:8c:be:0a:c0:78:71:17:44:a1:43:
                    cd:22:36:d6:cc:f1:d7:fe:7e:ab:51:13:43:1b:35:
                    c6:f2:f5:97:1d:b5:26:8e:22:50:0d:02:d7:87:49:
                    6a:67:91:7f:c7:d8:b7:d3:3d:e7:bc:fa:29:d9:70:
                    14:a3:63:6e:41:4e:14:78:36:7d:13:7f:6a:e0:5b:
                    21:c8:ea:2d:78:ec:19:94:30:e9:e0:b4:f9:e0:0a:
                    9b:a1:8b:73:4b:b2:ed:98:f0:40:00:0a:ad:79:79:
                    41:8f:8d:a1:3a:2a:23:04:d1:d2:02:8b:49:46:64:
                    f2:e1:37:f1:81:9b:ac:92:35:04:83:64:81:c2:ea:
                    20:e8:f7:bd:01:78:d8:f4:70:cc:ca:0b:41:9c:14:
                    cc:d1:b8:f1:f2:ae:ad:1b:99:17:d3:9b:a4:d0:04:
                    c7:2d:4b:c6:d3:b3:fe:8c:1e:d3:55:59:da:00:f5:
                    d7:02:2c:1e:da:18:c7:56:a0:cd:1f:fb:d8:b1:e3:
                    29:00:7e:a1:7d:ac:4e:d5:c5:a1:cb:31:39:7a:bb:
                    e8:1d:4f:4e:31:4d:04:33:05:1e:25:f9:b8:1b:80:
                    c7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1F:E7:88:2B:DE:F8:E7:AE:CD:C9:8A:B8:B7:EB:04:6F:0E:D6:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/090b1403-746c-3184-ba2a-20199ab893c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl

            X509v3 Authority Key Identifier:
                keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.72.0-67.220.74.255
                  67.220.80.0/24
                  67.220.82.0/24
                  67.220.87.0-67.220.89.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c8:31:69:7e:ee:7b:b5:3e:d1:d4:a0:f9:8b:9d:e8:1f:4b:
         ba:0c:99:71:43:57:e4:7e:b9:90:2b:06:4e:69:a8:42:4e:dc:
         31:2f:5d:c1:3d:d2:ee:53:16:60:7b:ca:c6:b9:b5:04:8c:18:
         5c:cc:42:66:03:60:4f:1e:cc:29:bc:78:4d:ed:8c:f0:0e:04:
         99:3c:f4:dc:b3:60:8f:fb:f1:95:76:fd:30:ba:1a:a5:13:bc:
         1c:fe:b3:61:39:25:d0:70:e2:4f:ea:d2:99:00:08:c8:2e:ca:
         a4:a3:d2:d9:ab:92:a4:74:5a:d3:75:ee:b3:82:9e:d3:20:33:
         5f:7b:7d:6c:bf:40:76:62:ac:88:7c:64:3c:f8:80:a2:1a:3e:
         de:45:9b:a4:6f:cc:46:f5:4a:72:fc:31:81:c4:87:4e:07:5d:
         9b:31:4d:62:7f:af:07:a6:45:42:a0:02:84:19:bd:a5:2d:a2:
         b2:bc:1b:6f:2b:29:70:30:7c:56:5a:b5:ba:e5:c9:c3:86:fc:
         cb:4a:c0:28:3f:fd:81:31:20:be:8d:f9:55:49:21:97:af:74:
         ba:1e:d8:9e:86:f9:d4:44:0e:bc:b7:7d:2b:8d:a9:09:ad:30:
         e6:9b:68:d4:45:10:39:cd:ec:dc:3f:ad:81:ef:44:bc:12:f4:
         02:4c:60:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:53:45 2024 by rpki-client on console-fra.rpki-client.org