Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10ec24fa-937d-3d17-9494-3da1b5169414.roa
File:                     10ec24fa-937d-3d17-9494-3da1b5169414.roa (raw, json)
Hash identifier:          giDdv4jrWVTnTA6nyYM2FjHgf9VNB9rs1dUNC3YNPUw=
Subject key identifier:   28:C7:33:D1:D1:5F:AF:13:A3:FD:A4:ED:DA:CC:3A:05:71:4D:3F:75
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D163B174A4DCAA0400F4FE670
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10ec24fa-937d-3d17-9494-3da1b5169414.roa
Signing time:             Tue 01 Mar 2022 05:00:00 +0000
ROA not before:           Tue 01 Mar 2022 05:00:00 +0000
ROA not after:            Mon 01 Mar 2027 05:00:00 +0000
asID:                     22773
IP address blocks:        72.212.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:16:3b:17:4a:4d:ca:a0:40:0f:4f:e6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar  1 05:00:00 2022 GMT
            Not After : Mar  1 05:00:00 2027 GMT
        Subject: CN=27ece26f-13d9-46e1-975b-261f9068110b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:10:0c:d1:a9:ee:f5:b8:1c:da:1d:b6:8a:
                    a0:92:00:3a:c2:30:09:4f:1a:a2:aa:b3:70:4a:3f:
                    f8:dc:49:d7:86:7a:17:fe:21:7c:f8:01:39:fd:3e:
                    19:2f:3c:f3:01:a4:d3:65:c9:35:63:4a:8d:78:dd:
                    ea:3f:31:28:10:e0:2b:2a:15:90:8f:c3:2f:47:0c:
                    03:ff:4f:cb:c5:0e:28:30:fd:5f:b3:99:f1:41:78:
                    a8:2a:ca:96:15:a2:70:b8:2d:4a:15:43:88:40:5a:
                    72:05:df:6b:4b:c7:c9:52:76:0d:04:84:49:1a:ac:
                    7b:6f:2a:f3:bc:12:d5:1f:3b:c4:8d:02:75:c6:a3:
                    ab:e1:11:6a:6c:c5:6a:78:55:1a:5f:22:3b:7a:5b:
                    cd:b6:48:ac:71:ab:46:10:c2:70:1e:6e:c7:13:71:
                    71:5c:2f:56:62:7f:c7:db:66:3b:71:48:33:f1:db:
                    b6:80:69:be:3c:91:45:10:eb:4a:cb:94:fb:a0:86:
                    a6:93:7d:13:c2:4b:71:04:f2:3c:98:84:35:84:9d:
                    d7:48:07:ab:99:f3:43:49:f7:c7:a6:e5:af:bd:24:
                    0e:60:0e:fc:10:f9:a0:dc:2f:57:51:83:99:18:d2:
                    dd:15:e0:5f:7b:02:98:af:b0:8d:68:3e:32:d7:1e:
                    f8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C7:33:D1:D1:5F:AF:13:A3:FD:A4:ED:DA:CC:3A:05:71:4D:3F:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10ec24fa-937d-3d17-9494-3da1b5169414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.212.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a8:ad:88:05:b4:e3:a1:4c:c6:d0:61:e1:7f:dc:65:6e:2b:
         1f:cb:2c:06:e7:62:df:ba:58:6e:a9:ea:fc:6a:9c:30:ef:1a:
         c7:73:d8:8a:9c:59:d7:bf:ea:e9:08:80:ff:ac:84:6e:a1:f8:
         b1:28:33:aa:12:39:d4:fc:d7:ac:be:98:48:37:88:36:ee:ae:
         13:90:61:e2:91:e7:5d:78:fb:40:e0:b6:2e:87:32:c8:8d:39:
         d8:a1:11:35:d0:03:47:e9:63:77:5c:bd:ab:5e:3c:64:7b:0c:
         b8:64:58:53:d1:52:7b:14:c4:e4:6c:21:f2:6c:19:bd:2c:61:
         32:6d:72:ca:18:d8:7b:46:9d:d0:fb:48:c5:97:70:ec:5c:ca:
         8c:d3:d3:a4:dd:dd:a2:bb:5f:d1:d2:62:79:d2:b5:b5:18:10:
         55:6c:80:f7:e3:da:2a:97:cf:50:3c:fa:7d:70:84:fe:0b:a0:
         79:09:96:9e:b4:4a:9f:30:c8:00:ad:43:39:b3:3a:48:7b:30:
         d5:67:71:3b:a7:61:52:dd:c7:28:8d:d3:8a:fd:48:d3:42:70:
         7e:e9:9f:64:0d:06:f1:e7:8e:ee:30:45:8b:ab:ed:c1:43:aa:
         2d:f4:0f:86:0a:9b:5f:94:dc:65:54:ab:e8:d8:11:08:9a:c2:
         7e:cf:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:42:38 2024 by rpki-client on console-fra.rpki-client.org