Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2cb7055e-2e07-328a-9dec-995b3cb74e78.roa
File:                     2cb7055e-2e07-328a-9dec-995b3cb74e78.roa (raw, json)
Hash identifier:          lLFQggUXZu0s9+3NMmQTJWupKvIDBwFtMg7SmWDUOko=
Subject key identifier:   2E:8A:04:70:F5:3D:2A:23:ED:12:61:2D:4C:D5:0D:26:9E:66:84:E8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285847DF2F60A706F47E50B1F9DFF0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2cb7055e-2e07-328a-9dec-995b3cb74e78.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     22773
IP address blocks:        68.227.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:60:a7:06:f4:7e:50:b1:f9:df:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=8a7f0e9b-5d39-43de-b519-83241ae04d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:33:0d:d3:f8:48:43:1b:c6:bf:a8:37:c5:
                    b3:ef:34:72:99:29:d7:8b:e3:f8:4b:36:f6:30:74:
                    09:4c:7e:be:bb:9d:c6:ff:91:ad:3f:91:47:94:57:
                    20:67:e1:e5:e7:b5:a5:37:d1:4c:0a:a5:91:bc:8b:
                    17:c1:54:42:3f:d6:db:f0:dc:ba:e3:4e:a3:4b:08:
                    b7:7c:cf:10:05:ab:1e:30:4b:0a:a5:37:51:a4:bf:
                    b0:52:86:e2:bd:2f:c1:87:ca:98:3d:71:ee:2b:27:
                    14:89:56:e8:8d:cb:f9:04:3d:31:f4:f7:17:a5:28:
                    1b:f0:d0:9d:60:20:0e:06:0b:b9:36:14:3e:94:82:
                    f5:76:e2:0f:f0:27:f6:31:74:03:a2:43:f6:97:2b:
                    c3:2c:8f:77:97:3e:b8:ce:3f:3a:16:bb:e3:b1:52:
                    be:c6:29:02:ce:fb:75:b5:a3:4c:3e:eb:d1:51:94:
                    51:2e:1f:90:64:da:94:6e:75:e8:69:39:4c:c1:c2:
                    6d:39:dc:e9:b7:0e:af:13:7e:78:a5:79:b1:95:fd:
                    8d:09:5d:b3:f3:8d:6e:05:7b:70:fa:6a:db:31:a2:
                    f9:e1:a2:80:fd:5b:f6:4b:93:22:1c:24:e7:2d:56:
                    4a:28:d5:e5:11:94:8e:82:a1:7a:eb:7d:57:a9:b1:
                    7a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8A:04:70:F5:3D:2A:23:ED:12:61:2D:4C:D5:0D:26:9E:66:84:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2cb7055e-2e07-328a-9dec-995b3cb74e78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.227.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:54:33:c3:a9:1f:7d:23:98:bd:e4:1a:61:0e:ac:4e:f9:ca:
         fd:b5:33:fd:e0:81:ca:21:c2:58:07:74:65:84:a3:20:f7:fe:
         0f:63:c4:d7:87:26:6d:29:df:0c:ff:46:18:db:32:3d:a2:51:
         e7:7b:1d:8a:7d:28:e4:73:0e:5f:d5:b4:a3:c4:23:41:d1:61:
         6c:aa:a7:3b:c0:5d:2e:7b:8e:63:26:3c:56:c1:48:fd:a2:25:
         86:da:06:a5:38:58:58:7f:aa:c7:86:4a:e6:65:f2:2e:1f:d8:
         88:4f:81:db:c9:54:ad:f8:d1:3f:1e:4b:29:32:92:74:73:45:
         af:a3:73:4a:f0:b9:bc:87:70:15:fd:4d:f2:1e:fc:33:42:2d:
         b1:d7:ea:2d:01:ee:79:a5:c5:ae:11:4c:63:ad:5a:c1:fc:b8:
         4d:70:7a:79:73:c6:e7:e9:0a:1d:94:c2:c7:25:29:03:9b:1c:
         7e:27:24:05:c8:c3:af:4a:9f:69:3c:8c:5f:6d:31:bf:5e:bc:
         59:8a:0f:30:1c:70:8b:f1:dc:2e:90:97:a5:3b:d5:20:bd:db:
         08:c8:fb:ff:89:35:cd:c1:57:13:56:ec:cc:a4:e8:85:8d:49:
         0f:41:5c:7d:0c:ff:78:1a:42:cb:53:c8:5f:d5:09:c3:61:af:
         06:66:e3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:40 2024 by rpki-client on console-fra.rpki-client.org