Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/536fbbe2-b9be-336e-a7e0-ed24edd349f7.roa
File:                     536fbbe2-b9be-336e-a7e0-ed24edd349f7.roa (raw, json)
Hash identifier:          SO1zjVFWj/+gvWh5T6BdlO54S6BgsUS+9Xx4lLUS9Hk=
Subject key identifier:   30:6D:CE:CD:69:9B:B9:C4:79:A5:9C:07:9D:2B:07:E5:81:0C:2D:B6
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DB5CECF0FABF3BE1DD2F55C00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/536fbbe2-b9be-336e-a7e0-ed24edd349f7.roa
Signing time:             Tue 26 Apr 2022 12:00:00 +0000
ROA not before:           Tue 26 Apr 2022 12:00:00 +0000
ROA not after:            Tue 27 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        209.242.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b5:ce:cf:0f:ab:f3:be:1d:d2:f5:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr 26 12:00:00 2022 GMT
            Not After : Apr 27 04:00:00 2027 GMT
        Subject: CN=594390ee-214f-4760-be50-6c5398a5e3a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:73:d5:56:8f:45:5d:88:69:74:5e:d2:d4:c2:
                    d3:1c:8f:ba:84:ae:3f:0d:d4:3b:0c:0b:13:cc:68:
                    fb:f8:3b:b9:64:cf:27:17:22:51:3a:01:98:8a:12:
                    41:67:73:1c:34:49:4d:de:a2:fb:bd:dd:c9:ee:48:
                    89:79:ea:1b:2b:24:2a:b0:9b:4d:30:fd:d2:96:19:
                    1c:77:2c:f0:6b:74:7a:f7:29:27:b5:b8:3d:4a:5f:
                    ef:00:61:40:cf:c9:b8:a3:56:71:70:49:09:90:84:
                    72:22:f4:2a:30:4c:c4:f7:f8:4e:21:3e:d9:3f:4e:
                    64:52:9e:32:69:cc:82:3f:45:bf:34:57:9a:1e:93:
                    e5:16:28:27:12:65:17:22:9b:72:88:0f:0a:5c:1d:
                    f7:de:3e:66:f4:f3:fb:ff:77:c4:b1:e1:e7:8a:5e:
                    2a:bb:1f:c5:0a:62:e8:60:1d:53:ff:08:af:d6:4c:
                    01:f9:96:8b:28:2c:7c:84:cc:a2:5d:6e:4e:23:5e:
                    c0:b5:f7:b5:fc:e1:36:34:fc:f5:d4:5c:3f:82:d2:
                    82:62:f5:c1:4e:f5:6f:d5:b7:50:a8:ee:16:d8:90:
                    a1:3e:5b:d4:95:49:33:87:0e:be:c1:c9:8f:2e:04:
                    dc:58:c8:1e:ae:ee:78:56:54:bc:8e:a7:4d:0a:86:
                    a6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6D:CE:CD:69:9B:B9:C4:79:A5:9C:07:9D:2B:07:E5:81:0C:2D:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/536fbbe2-b9be-336e-a7e0-ed24edd349f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.242.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:11:48:7b:12:0e:46:ba:c3:48:4d:fe:58:2f:6d:80:b7:a5:
         4a:5c:16:b5:c4:c2:e1:8f:93:fe:82:bf:32:9c:4b:d3:98:7b:
         f5:97:a2:f2:fe:f9:e1:b1:20:f2:ca:33:40:6e:c3:67:bc:56:
         d6:4e:8e:bf:5b:e9:52:1d:f7:92:23:6f:6c:01:62:77:c8:93:
         b7:dc:49:17:e9:a0:e7:74:22:6b:d1:67:3a:c7:e2:37:74:14:
         b5:5e:8c:56:1b:9b:d5:0f:60:ac:cb:5c:c8:53:03:2c:bd:15:
         e6:21:dc:25:10:22:a3:9e:b2:12:37:5e:77:bb:26:0e:38:b7:
         e7:4e:4a:ca:21:77:1a:a3:9b:65:f1:c9:0b:f9:04:12:f8:3b:
         b8:31:07:c7:ef:95:64:c3:1a:49:19:58:d5:9a:04:e1:f0:3e:
         15:07:6e:25:bb:91:fc:7b:6d:53:e2:9b:4d:f1:07:6d:55:c1:
         84:64:e8:03:68:36:22:11:4f:85:e1:e9:e5:c4:7a:44:ef:7a:
         87:20:6f:02:e2:3b:ab:32:97:56:28:fe:59:59:19:00:0d:42:
         69:a9:ad:30:bf:f3:6b:74:da:fa:61:77:f2:d0:62:52:9d:e4:
         18:60:be:b8:4a:fe:35:c1:69:34:df:05:6b:e8:2c:7f:e2:91:
         19:a2:74:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:01 2025 by rpki-client