Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31aea14e-5716-3f57-911e-966e16089a6d.roa
File:                     31aea14e-5716-3f57-911e-966e16089a6d.roa (raw, json)
Hash identifier:          rL3xZeeb/+BJElDkY3iM97xQKtOBa4uiZqXZ2iZFJ+0=
Subject key identifier:   6B:0E:98:9B:C0:90:BA:0D:F6:58:A2:44:57:A9:0F:E2:E0:85:6A:FF
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCC1601F6B60255E2F498AC00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31aea14e-5716-3f57-911e-966e16089a6d.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        174.67.168.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:16:01:f6:b6:02:55:e2:f4:98:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=8a8355ff-e3c3-4ab7-8c56-0b130f8b98d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:8e:69:c2:10:b3:cc:e3:cf:30:f5:42:b0:
                    d3:27:d4:0f:78:6d:c2:b3:ff:db:3d:05:87:f3:95:
                    73:34:a1:f6:f5:04:87:34:72:af:3f:05:cc:4d:5b:
                    90:39:32:2b:23:66:c4:ca:8d:68:b4:84:d9:40:9e:
                    73:e0:c3:14:42:56:a3:7a:21:92:ea:76:15:35:62:
                    cb:50:08:3d:c7:cf:9c:f2:b1:71:5d:d2:f5:92:0b:
                    33:b4:19:15:83:6f:d1:c6:21:f2:19:93:aa:0a:62:
                    bd:ec:5c:c2:12:49:a3:a3:9a:d2:aa:58:ab:89:6d:
                    84:68:7a:f9:93:9a:c1:4b:81:05:9f:5e:21:c1:1b:
                    d5:b4:b7:59:15:c0:48:32:8d:c9:4a:82:38:e9:e2:
                    90:88:ca:46:56:c4:11:46:de:29:8a:0d:ed:d2:89:
                    d0:c1:d0:f5:52:c4:fe:40:4d:ae:02:74:a9:7a:57:
                    25:16:62:19:7c:08:dd:69:e8:9c:bf:3d:70:b0:6c:
                    9e:0c:b3:23:4c:bd:79:4b:54:9a:69:a9:34:39:d9:
                    be:a1:3b:97:94:2a:43:90:87:c9:07:2e:4e:9a:d7:
                    66:ba:ff:45:82:52:61:cd:d5:60:6d:80:fb:48:30:
                    cc:4e:55:30:c9:d1:32:23:68:e8:c5:f1:4e:20:c3:
                    17:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0E:98:9B:C0:90:BA:0D:F6:58:A2:44:57:A9:0F:E2:E0:85:6A:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31aea14e-5716-3f57-911e-966e16089a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.67.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:c9:58:af:a8:9a:56:88:90:6d:c6:1f:9f:65:fc:d8:5e:0f:
         50:8e:d1:f9:5b:d3:8d:38:35:62:69:9d:66:6f:00:a5:4c:f7:
         cd:e0:7d:f2:82:4b:ea:45:1f:9e:72:fd:c7:04:36:02:57:50:
         e3:67:64:1c:cf:19:78:44:1f:ee:e1:c4:84:c1:24:b4:87:82:
         8b:19:91:7e:5e:8f:25:4d:71:c2:14:68:62:55:8e:fd:21:3b:
         d3:a8:2f:f1:3e:a9:bc:6e:45:6d:49:2e:33:a4:40:2b:c7:10:
         70:d5:c8:23:15:89:0c:51:88:4b:6d:e2:c7:96:31:c4:83:a9:
         b7:b5:c7:b0:09:9e:b1:61:0c:91:a9:24:6a:6f:d0:42:a8:02:
         7e:62:7a:d5:f8:f8:90:2e:27:1d:a1:7c:c7:34:f2:db:91:d2:
         e4:aa:f5:c5:9b:cc:57:93:3a:87:18:70:66:18:16:e8:08:a7:
         87:46:55:7e:52:35:89:63:82:ca:eb:a4:aa:e0:84:3b:81:71:
         13:b5:8e:98:9d:e2:7d:45:a7:33:9a:db:fd:2e:e5:85:ac:32:
         69:b7:db:2e:d7:7b:c0:c3:40:7d:4d:d7:42:26:43:b4:c3:d6:
         11:65:15:7a:12:f9:a4:cd:5a:84:c3:d4:62:4b:c0:f9:bd:89:
         5a:d6:71:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:49 2024 by rpki-client on console-ams.rpki-client.org