Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6705c44c-3f93-3d48-8f21-721fbac89826.roa
File:                     6705c44c-3f93-3d48-8f21-721fbac89826.roa (raw, json)
Hash identifier:          YTrHMEKxPPm6LRDd3gnHLXcbEjsIPUlU8BGpnJzz3LA=
Subject key identifier:   BA:1F:4C:A3:96:FC:02:6A:56:F4:BF:E9:1B:26:36:90:15:76:43:FA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D771FE1262777D2E56CD7C400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6705c44c-3f93-3d48-8f21-721fbac89826.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sun 04 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        68.110.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:77:1f:e1:26:27:77:d2:e5:6c:d7:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2027 GMT
        Subject: CN=71e6b881-3c50-4d00-9e88-ac650fc9fdbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:07:99:cd:40:5d:91:aa:2e:8d:c4:1a:9a:
                    fb:64:75:3d:54:41:ee:33:a8:8d:dc:27:ba:12:07:
                    13:65:09:0d:11:f1:09:54:b7:81:4c:51:fe:d1:32:
                    49:d3:0a:63:dd:52:00:8e:16:97:2b:e8:43:43:32:
                    0a:3f:36:73:b5:89:c6:a6:f0:7c:7b:bc:d4:8a:c2:
                    3f:c4:e0:bd:c8:41:53:13:24:0e:39:4a:34:e4:4f:
                    d2:88:f1:95:76:17:23:76:28:3e:7b:79:fa:76:0f:
                    ac:37:d0:4c:32:97:87:ec:7b:bc:90:ad:a8:f8:e8:
                    61:b3:42:89:90:f5:1a:0a:c6:66:de:d6:ce:eb:c4:
                    51:2c:0f:2b:aa:04:0a:89:9d:fa:fc:10:a4:d7:a1:
                    71:7f:bc:21:54:6a:c4:a9:37:eb:31:94:99:25:02:
                    d0:4f:a4:9f:1b:7c:58:27:52:b7:52:38:90:3e:79:
                    75:77:4a:2c:c9:53:e0:4e:a9:0b:29:26:b9:ab:ab:
                    39:e9:9c:7c:16:c0:b7:e5:af:8f:a2:ef:a7:b6:75:
                    d9:06:9f:ff:b8:c7:61:87:71:b8:45:74:4f:8b:15:
                    a9:a1:8a:19:32:73:06:ea:05:da:31:55:24:4a:33:
                    f2:f3:e0:10:82:6e:c1:fd:dd:cb:42:a0:09:1b:15:
                    69:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1F:4C:A3:96:FC:02:6A:56:F4:BF:E9:1B:26:36:90:15:76:43:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6705c44c-3f93-3d48-8f21-721fbac89826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.110.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e3:ff:15:4c:a4:a6:1d:0d:a7:d6:90:8a:43:d0:1a:58:d7:
         2b:0d:11:09:ec:51:55:ed:6f:83:40:78:ad:bc:bd:a2:75:8f:
         63:b7:6f:1b:e7:77:be:7c:57:de:c4:f1:12:f7:57:2f:96:e3:
         8f:f0:19:26:4b:59:36:f1:f6:b4:86:75:c9:58:53:af:cd:4d:
         6c:f3:d7:c4:60:0b:1a:cf:02:f7:ee:09:c1:9c:ed:02:17:f2:
         bf:e5:21:9f:5e:63:47:4f:c1:66:90:77:09:6f:26:2c:5a:18:
         62:c2:e7:1c:13:0c:f2:a4:4e:ac:9a:89:86:0f:c2:f9:01:d5:
         86:ec:c3:d0:7f:2c:55:a9:49:ce:5f:a2:12:72:77:a3:6f:7d:
         da:a6:bd:13:60:f7:5a:fa:25:a2:0e:51:a5:b3:76:01:10:34:
         f6:7b:b4:e8:f5:cd:09:16:5e:eb:5e:d2:06:bc:a2:1c:12:e0:
         ca:48:03:45:9f:35:b8:65:88:d8:50:b1:b5:6d:f5:dd:0c:7f:
         52:bb:7e:49:02:b5:d1:51:f2:aa:64:aa:5b:cb:7f:ea:8a:f2:
         ed:46:47:cd:eb:4f:56:97:4b:18:f9:58:f4:81:ce:0a:f4:f3:
         71:f5:ec:f2:6d:20:33:44:9c:1e:c9:e3:5c:9d:cb:dd:ef:01:
         12:88:84:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:56 2024 by rpki-client on console-ams.rpki-client.org