Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28153f04-f2de-3365-88f3-decd8cc54636.roa
File:                     28153f04-f2de-3365-88f3-decd8cc54636.roa (raw, json)
Hash identifier:          sfEg7XmVNRRqFYTkTbT8cSyozuYCDvPhg4DeI1sCevI=
Subject key identifier:   54:65:53:76:45:AD:ED:52:40:87:53:82:32:F3:5E:51:94:72:73:FA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCBFD81F9951C39F0AD1D7C00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28153f04-f2de-3365-88f3-decd8cc54636.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        68.99.72.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cb:fd:81:f9:95:1c:39:f0:ad:1d:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=6e0ca522-2b83-4b20-8ea4-81e1e6d32ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f9:64:dc:e5:09:78:06:4e:4d:5d:0d:32:08:
                    b0:69:59:ad:f4:df:c0:5e:05:0b:c3:20:ca:a4:01:
                    b6:4a:5b:6d:ab:7e:b3:8e:e4:06:6d:78:67:4c:0c:
                    d3:5e:a6:96:72:ac:ed:1b:4b:3f:43:2f:b4:57:93:
                    cc:b6:81:50:cc:68:53:7a:9f:d0:a0:16:0a:7a:63:
                    48:94:f3:56:fd:4d:f7:e5:a8:4d:fc:5f:01:6b:81:
                    12:80:0f:f9:ec:b8:11:90:a3:57:46:7d:37:8a:eb:
                    70:9a:78:62:2b:9b:8e:19:c9:df:5b:97:43:bc:37:
                    5f:4c:e0:c5:b8:74:78:e9:12:30:ed:3d:43:5d:f5:
                    86:e3:2b:a1:59:b9:c1:22:be:ed:e5:e0:74:1b:a1:
                    0a:cb:c3:69:49:b4:04:c1:f7:36:ac:eb:48:16:e9:
                    1c:82:01:37:3b:3e:ac:09:2c:a0:59:fe:e6:90:0b:
                    7d:cb:d8:63:19:1a:00:15:8a:a4:10:00:4e:5a:13:
                    6e:b1:a4:03:cf:97:cf:a5:b2:46:82:8a:49:50:44:
                    20:c4:04:94:51:82:66:5b:92:56:df:51:57:1f:47:
                    ca:7e:c4:11:8a:ca:c1:70:9d:75:d7:a8:e0:2a:4d:
                    59:67:ca:4d:00:13:a7:ac:0b:1c:31:9c:59:9a:f8:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:65:53:76:45:AD:ED:52:40:87:53:82:32:F3:5E:51:94:72:73:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28153f04-f2de-3365-88f3-decd8cc54636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.99.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:24:83:26:93:ff:4a:10:b1:f9:9e:48:6c:f2:3e:11:bb:db:
         db:1b:7d:ef:0a:9e:4f:e6:f7:2d:69:7c:fa:0c:2c:24:e3:fa:
         b4:1a:74:7a:b7:c5:41:49:be:00:a8:0d:4e:a0:55:9a:dd:89:
         fc:d7:c3:0f:9d:e3:f5:89:68:ac:91:ba:a6:71:46:8d:9d:65:
         e2:fc:39:4d:e0:b2:e9:73:e7:fe:9b:e2:40:20:96:00:74:c6:
         bc:c8:9b:ee:86:71:a1:26:3f:06:1b:5c:22:78:a5:5f:f8:d0:
         8f:7a:96:ef:ba:10:e3:9a:06:fe:37:2e:1c:7c:29:5c:55:90:
         0c:a5:c1:44:ec:48:24:ba:e3:05:f0:ce:2d:0e:b2:0c:dc:ec:
         db:d1:09:4b:42:fc:66:d8:22:8b:ca:90:52:dd:81:cf:71:2a:
         1a:6b:85:3f:35:c4:bf:4e:08:a1:70:44:96:93:63:73:31:52:
         8b:61:5e:69:7c:83:59:f5:60:21:33:93:55:09:d1:88:4a:f2:
         e4:0c:de:d4:47:76:97:c2:24:09:18:17:2c:41:1d:a6:01:26:
         49:f3:38:b0:20:a3:a5:d9:38:f9:b0:8f:5f:05:f9:87:ac:05:
         33:ee:68:df:fd:54:f4:bb:a2:f9:ac:77:83:3e:95:dc:52:6d:
         39:08:54:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 02:59:53 2024 by rpki-client on console-ams.rpki-client.org