Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33a7cba4-0cec-3cd9-96e8-bde5bbab0d57.roa
File:                     33a7cba4-0cec-3cd9-96e8-bde5bbab0d57.roa (raw, json)
Hash identifier:          Xum9QedWgfGrPmGbwfHawRFKv7ovFf0wo3gKS1ENoXw=
Subject key identifier:   16:98:AB:0B:9A:FF:24:F4:61:15:3A:E8:03:3F:E6:A0:52:51:9A:8C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D771C6A8B7314DC3F8909C140
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33a7cba4-0cec-3cd9-96e8-bde5bbab0d57.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sun 04 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        174.77.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:77:1c:6a:8b:73:14:dc:3f:89:09:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2027 GMT
        Subject: CN=aaf9a056-de56-4bf4-ae4e-2a4945b03572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:65:2c:65:ed:e2:30:c6:13:36:13:c1:76:32:
                    8d:ff:7e:c0:45:98:11:0a:b8:56:ad:90:92:49:72:
                    c3:76:d0:67:bc:84:bb:78:9f:d0:61:2b:db:99:5b:
                    16:29:f2:fe:59:cb:74:ce:28:6d:99:a3:dd:1b:fe:
                    c2:7e:71:ba:83:32:37:94:0d:0e:c4:eb:75:95:b8:
                    15:23:2f:1d:83:85:2b:84:46:b9:a6:70:73:5b:7f:
                    ed:98:e8:a3:a8:7d:90:d3:e8:5c:3c:33:6a:97:54:
                    68:15:16:ee:0c:46:6d:9b:c4:51:a7:7c:e6:3c:22:
                    9a:cd:b8:81:29:7f:c3:95:85:d8:3a:af:5f:ee:75:
                    71:99:a5:ac:73:0c:00:f8:ce:c4:90:b6:a6:ab:05:
                    dd:e7:2c:2c:c1:97:3f:d7:0c:01:d5:2a:2b:52:d7:
                    6b:2d:fb:d8:8e:a7:99:85:7a:94:e7:76:f4:21:a8:
                    ce:c2:04:03:30:6e:04:7b:3a:fd:7c:79:be:f2:d4:
                    42:aa:55:d2:79:3a:0d:0d:ab:5e:88:6e:96:1d:93:
                    86:cd:48:4b:35:17:f4:bf:b7:63:b3:0a:c8:3a:12:
                    62:c0:10:f0:32:c5:eb:31:ea:5d:24:71:0a:a8:43:
                    fd:0d:68:dd:b5:0d:3e:53:33:8d:fc:28:02:54:e3:
                    9d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:98:AB:0B:9A:FF:24:F4:61:15:3A:E8:03:3F:E6:A0:52:51:9A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33a7cba4-0cec-3cd9-96e8-bde5bbab0d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.77.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:88:f0:59:62:a5:01:86:52:44:d6:1d:ea:60:4b:91:27:e6:
         f5:52:91:db:d2:63:37:81:7a:b0:4e:89:ca:e2:e0:16:c0:0b:
         64:2f:78:9f:cf:f4:58:3c:d6:3e:10:f9:6b:e3:63:0d:ee:e5:
         cb:ec:e0:e9:4c:44:8d:30:88:65:58:03:c9:c1:24:04:0f:a9:
         6f:9d:ba:0f:62:2e:d1:88:fc:02:52:6d:cf:8b:69:5d:48:98:
         0f:e3:b8:b6:e7:11:57:bf:2e:12:e3:f8:3b:a5:b6:bb:6a:eb:
         ed:9b:fe:5c:33:71:62:3d:62:ff:4d:aa:8b:65:e6:76:60:cd:
         83:c8:39:5f:75:50:47:30:93:c9:4a:58:a0:ff:bc:b9:bb:37:
         7f:97:0c:40:aa:f5:03:65:40:b8:a3:0d:aa:13:7d:b6:68:44:
         b2:28:4a:86:ed:c3:07:e9:b0:a8:f0:68:84:4e:e1:41:bc:7a:
         21:26:ec:9e:8b:da:d2:45:12:93:f3:6e:10:f9:08:a6:4c:a5:
         54:7e:c1:c0:bd:c4:84:7a:3f:fa:4e:06:d9:ca:03:ec:b4:7d:
         b3:e8:b0:37:c6:c0:bd:14:81:1e:e7:f8:ea:4d:c8:a5:37:1e:
         7a:fb:36:26:b1:78:55:4f:6a:df:0f:17:60:7a:7e:fe:0f:23:
         56:1b:d2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 02:54:09 2024 by rpki-client on console-fra.rpki-client.org