Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20212c98-a490-342e-ae3b-31d7c222ee75.roa
File:                     20212c98-a490-342e-ae3b-31d7c222ee75.roa (raw, json)
Hash identifier:          DFlbwbG364oHhqt7bD13ovP3TqiX39rhSlo9G/UbAE4=
Subject key identifier:   43:3E:59:9C:63:B4:69:BD:F2:30:FF:6C:BE:4B:B0:E8:6F:07:6D:8C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCC14A81FD46E49DA95099AE0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20212c98-a490-342e-ae3b-31d7c222ee75.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        72.195.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:14:a8:1f:d4:6e:49:da:95:09:9a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=f391ee51-817b-4c57-95ee-42b8adfba17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:1f:38:f8:97:e9:bc:75:88:4b:f4:dd:2f:
                    1c:f2:47:79:2e:b1:c8:8b:e0:89:c7:80:6b:c7:3e:
                    60:f8:5f:53:1f:0f:4f:3e:f3:91:df:8e:af:fb:db:
                    9f:74:95:49:b9:04:31:ba:35:e0:0d:99:c9:bc:c8:
                    12:38:f1:c9:da:7d:b9:b8:db:1a:3d:11:27:fd:58:
                    f4:b5:5b:cc:a8:d5:64:64:ab:0e:90:67:fa:fb:c9:
                    d3:df:03:a7:f9:f6:f8:86:29:0c:4f:9a:87:ec:25:
                    e9:3d:9f:dd:c4:f9:e6:95:0b:7f:d2:50:e4:ab:04:
                    30:5c:df:87:8a:8c:1c:2f:77:a0:3a:35:0f:4a:2a:
                    4d:28:a1:10:52:f5:36:89:1d:a9:bc:46:d2:ff:67:
                    b3:0c:5b:a8:8a:10:a0:a1:8b:06:84:eb:d3:b8:31:
                    54:57:9a:03:44:38:14:ae:77:3e:fa:e4:0f:bb:60:
                    c3:ba:15:1f:65:78:44:68:68:40:cf:68:6e:75:58:
                    6f:0f:06:16:f6:9a:a6:9d:63:6f:de:81:02:33:d0:
                    5c:fb:96:9d:80:6b:2d:1f:79:3f:d5:72:aa:52:e7:
                    a9:99:fe:85:e0:1b:fd:b4:1e:d7:7f:2c:84:e0:02:
                    6f:b8:db:10:9a:5d:52:b4:fb:ba:41:4b:0f:07:2e:
                    38:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3E:59:9C:63:B4:69:BD:F2:30:FF:6C:BE:4B:B0:E8:6F:07:6D:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20212c98-a490-342e-ae3b-31d7c222ee75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.195.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:fd:18:eb:fd:61:ed:65:15:e7:bb:5e:7f:00:22:53:1c:ae:
         61:16:b6:0b:4e:43:03:4d:d7:a2:be:cd:50:f6:04:87:77:af:
         30:54:b2:43:04:7c:2e:b6:d0:bc:9c:a4:18:1c:27:e9:02:5c:
         1f:b8:0d:da:ea:25:94:1d:91:b4:35:75:08:1f:2f:31:47:70:
         7d:65:05:1f:e9:5a:59:a5:c5:7c:a0:42:52:85:b2:35:6f:83:
         7c:31:c1:d0:c8:4b:13:f1:ab:fa:65:d0:2e:02:45:86:b0:08:
         9a:1e:1f:71:b4:d3:fc:47:db:c4:f7:9e:0c:87:fa:ef:d5:28:
         4b:c8:dc:d3:5e:11:b9:d1:b4:b5:08:c4:0d:5f:7b:a4:8b:5b:
         b0:61:0b:e1:1c:18:75:59:66:d9:c4:13:38:bd:00:4c:51:f4:
         df:3d:3a:42:5a:a9:5f:d4:a7:38:40:12:a8:c0:08:04:6c:0c:
         2d:25:72:d6:00:49:40:d8:f5:ff:45:bb:c1:89:e5:8b:ea:b7:
         66:73:d7:f2:14:4d:31:aa:eb:00:29:b2:2b:dd:5f:27:6e:6a:
         bc:39:24:98:76:b2:28:66:f3:3b:3d:7f:fd:4c:85:85:d9:77:
         80:98:7e:7e:a9:e0:a2:b1:30:7f:d4:ca:77:17:d2:cc:7d:bd:
         c4:2f:3f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:29:35 2024 by rpki-client on console-fra.rpki-client.org