Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e39a210-5acc-3748-95db-29bf2d518642.roa
File:                     5e39a210-5acc-3748-95db-29bf2d518642.roa (raw, json)
Hash identifier:          Qu7FUF1WPw/XkLWFcOiiflEmGhswgDskdTu0V/LZ03M=
Subject key identifier:   30:AE:05:70:B0:6E:02:D6:34:09:2A:4D:19:B2:07:9A:D7:7C:37:42
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584535E29F7369E7F3189038D980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e39a210-5acc-3748-95db-29bf2d518642.roa
Signing time:             Fri 15 Mar 2024 01:00:26 +0000
ROA not before:           Fri 15 Mar 2024 01:00:26 +0000
ROA not after:            Thu 13 Jun 2024 01:00:26 +0000
asID:                     22773
IP address blocks:        68.227.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:e2:9f:73:69:e7:f3:18:90:38:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 15 01:00:26 2024 GMT
            Not After : Jun 13 01:00:26 2024 GMT
        Subject: CN=ed2e35ed-e985-4d4f-a870-51db7b7ba583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f0:50:e5:38:95:f1:6b:36:20:89:d5:96:9d:
                    b5:1b:c4:4e:44:79:fe:b6:6f:93:0c:5c:17:e4:da:
                    1c:2e:91:ef:ea:af:3f:11:fa:4c:da:eb:80:8f:98:
                    d9:b8:5b:60:34:b5:ab:da:79:2b:d2:14:b1:2f:c3:
                    b7:03:a6:29:0e:de:14:19:32:66:d4:a5:4f:47:64:
                    99:48:e2:7d:5d:72:31:09:1c:a8:ee:12:fe:3d:fd:
                    d4:4f:86:9f:85:a0:f5:a6:e4:0c:27:09:88:74:56:
                    eb:28:86:e6:4e:b0:09:f8:33:d9:a1:c5:5f:3e:b5:
                    bb:d5:b1:7d:2e:12:4e:77:2a:c2:d6:ad:1d:79:e8:
                    07:55:9e:a5:9a:6a:29:c4:3e:79:be:46:5e:e7:88:
                    ca:0d:c5:37:eb:e9:53:f0:a1:39:ab:dd:3e:b1:c5:
                    19:78:cd:83:74:25:56:16:e1:9f:e5:6b:ef:31:54:
                    1c:88:40:69:92:69:c7:e5:30:e3:30:ab:a5:e2:fe:
                    38:10:a3:57:cb:8d:f9:d0:e8:5f:c9:dd:b8:96:2c:
                    9c:60:c5:2a:47:31:a8:ed:f9:c9:d1:04:09:76:e3:
                    c8:da:7d:df:32:4a:ca:a3:52:b1:63:b7:bd:45:61:
                    c5:a6:f3:ed:eb:cc:27:0f:61:92:cc:36:92:1c:85:
                    33:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AE:05:70:B0:6E:02:D6:34:09:2A:4D:19:B2:07:9A:D7:7C:37:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e39a210-5acc-3748-95db-29bf2d518642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.227.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:93:07:00:cd:c1:03:8f:0a:bf:14:1b:44:b7:db:a7:ed:f1:
         f0:58:4f:1d:ca:f7:3e:41:f5:3a:71:59:4c:45:91:07:cc:33:
         68:d5:3e:39:fa:ec:67:d5:52:9f:43:8b:80:d3:43:1b:3e:d2:
         2c:f9:56:70:e0:07:26:63:16:83:23:b5:09:ea:1f:58:b1:8b:
         f1:25:35:81:2c:f7:3e:10:36:f9:68:ba:92:3c:51:e8:dc:bd:
         1e:da:8f:2a:63:f8:41:7a:36:04:df:0d:8b:e0:43:71:1a:ee:
         99:e5:82:df:2c:e9:ad:84:d9:63:e1:a3:c7:b7:59:e7:b7:ad:
         15:22:ba:f5:05:7d:6f:16:79:e9:d9:14:72:34:99:29:36:15:
         93:1e:65:20:25:a2:4c:f9:d5:0e:ff:48:ad:39:4c:c1:5d:97:
         41:0c:52:f7:76:19:ae:23:f4:69:db:fd:c4:8a:ed:c5:93:48:
         e5:c6:92:f1:61:28:59:01:3b:b0:9e:62:92:be:88:25:ce:7f:
         81:f8:33:66:97:1e:60:d2:ad:56:ae:bc:4a:de:e3:2d:93:31:
         71:c0:ca:77:bf:08:87:9f:ab:e1:24:80:00:b8:eb:a9:72:93:
         11:4c:71:70:a3:05:f5:7b:f4:32:7d:ef:b4:ac:70:6e:c9:d1:
         9d:08:1a:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEU14p9zaefzGJA42YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI0MDMxNTAxMDAyNloXDTI0MDYxMzAxMDAyNlowLzEtMCsGA1UEAxMk
ZWQyZTM1ZWQtZTk4NS00ZDRmLWE4NzAtNTFkYjdiN2JhNTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPBQ5TiV8Ws2IInVlp21G8RORHn+tm+TDFwX
5NocLpHv6q8/EfpM2uuAj5jZuFtgNLWr2nkr0hSxL8O3A6YpDt4UGTJm1KVPR2SZ
SOJ9XXIxCRyo7hL+Pf3UT4afhaD1puQMJwmIdFbrKIbmTrAJ+DPZocVfPrW71bF9
LhJOdyrC1q0deegHVZ6lmmopxD55vkZe54jKDcU36+lT8KE5q90+scUZeM2DdCVW
FuGf5WvvMVQciEBpkmnH5TDjMKul4v44EKNXy4350Ohfyd24liycYMUqRzGo7fnJ
0QQJduPI2n3fMkrKo1KxY7e9RWHFpvPt68wnD2GSzDaSHIUzPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDCuBXCwbgLWNAkqTRmyB5rXfDdCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWUzOWEyMTAtNWFjYy0z
NzQ4LTk1ZGItMjliZjJkNTE4NjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROMoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAuTBwDNwQOPCr8UG0S326ft8fBYTx3K9z5B9TpxWUxFkQfMM2jVPjn6
7GfVUp9Di4DTQxs+0iz5VnDgByZjFoMjtQnqH1ixi/ElNYEs9z4QNvloupI8Uejc
vR7ajypj+EF6NgTfDYvgQ3Ea7pnlgt8s6a2E2WPho8e3Wee3rRUiuvUFfW8WeenZ
FHI0mSk2FZMeZSAlokz51Q7/SK05TMFdl0EMUvd2Ga4j9Gnb/cSK7cWTSOXGkvFh
KFkBO7CeYpK+iCXOf4H4M2aXHmDSrVauvEre4y2TMXHAyne/CIefq+EkgAC466ly
kxFMcXCjBfV79DJ977SscG7J0Z0IGkA=
-----END CERTIFICATE-----
Generated at Sun Apr 28 17:07:52 2024 by rpki-client on console-ams.rpki-client.org