Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/679458cf-dd50-3721-b9d4-43dc363a94c3.roa
File:                     679458cf-dd50-3721-b9d4-43dc363a94c3.roa (raw, json)
Hash identifier:          EWHC9n8bDZiJ6+L9Zj0z73A8o9Ub3AjPLNDlyU/4cX4=
Subject key identifier:   CE:41:93:3B:4D:02:7C:DA:FA:54:E6:B7:23:C8:2A:35:E6:7A:72:AB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D76F90D69818918485FCC7740
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/679458cf-dd50-3721-b9d4-43dc363a94c3.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sun 04 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        72.212.168.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:76:f9:0d:69:81:89:18:48:5f:cc:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2027 GMT
        Subject: CN=0777edd5-1b89-4d8e-a3d8-2b181de1d57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:53:1f:4d:45:4f:b7:a0:be:63:8e:92:bd:
                    14:bc:81:be:28:06:01:07:f5:3e:ba:b5:d3:f5:fe:
                    07:02:bb:1c:d5:ba:23:e6:e1:9c:4b:c9:ab:cd:19:
                    6a:da:95:42:7f:96:34:52:73:86:a5:94:0e:a1:bd:
                    19:46:d7:1c:e0:37:2e:2f:22:86:8b:b6:2a:dc:dd:
                    1e:1b:2c:62:36:0f:85:db:72:98:cf:95:01:db:4c:
                    74:01:b6:df:f7:2f:11:c4:0a:08:0b:eb:0a:6e:36:
                    dc:14:91:6b:72:b9:c0:91:b7:8c:95:c1:e5:d1:eb:
                    e2:a2:07:6a:f5:78:e4:cc:94:13:96:46:cc:9d:69:
                    ca:97:d6:39:58:4a:1d:95:18:23:f3:ea:21:eb:7c:
                    b0:e1:ca:f8:fa:16:bd:9f:45:5f:ab:74:4e:28:25:
                    cc:b2:9e:18:f0:5c:b7:5f:1b:7d:40:b4:af:53:70:
                    c4:96:4c:d1:a3:58:39:0f:d3:50:c4:f9:69:5b:88:
                    f0:16:46:a1:8f:37:df:35:53:1c:46:2f:f2:5c:53:
                    88:47:73:07:be:0f:33:34:23:04:1f:21:9a:c2:05:
                    ec:d8:8a:12:05:68:db:9b:8e:48:16:51:ce:88:5a:
                    1e:1e:9d:59:b3:e4:6f:31:10:b4:bd:29:40:a0:7a:
                    6b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:41:93:3B:4D:02:7C:DA:FA:54:E6:B7:23:C8:2A:35:E6:7A:72:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/679458cf-dd50-3721-b9d4-43dc363a94c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.212.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:de:b6:42:5c:f8:01:48:5c:8e:d5:46:11:53:fb:29:36:f8:
         b6:f1:e3:72:a9:ae:44:58:ae:ce:5c:fa:ae:52:e4:c0:f3:26:
         8f:84:59:a2:9e:d1:81:ee:51:e4:4b:64:fd:a5:61:87:46:42:
         28:d1:8c:5f:01:dc:0d:e8:1d:d8:a4:28:44:af:62:fd:8d:9a:
         ce:42:ff:b3:cb:38:5c:fe:3e:18:37:db:8b:ec:01:2d:ef:11:
         8d:36:af:64:75:8d:f5:aa:e1:b9:d7:02:91:1e:b3:fd:bf:29:
         b5:6d:d3:a0:c9:06:b8:7b:e9:40:2a:a0:21:6a:25:44:4b:1c:
         05:ce:4d:9d:5f:35:d8:1c:08:df:20:1c:85:cb:ac:da:29:ba:
         0e:2d:2e:36:bf:2c:37:ed:1d:fb:68:78:43:a4:f9:2c:56:a4:
         34:2f:a6:53:08:48:9f:37:00:fc:b4:bc:0a:4b:33:63:f1:b7:
         f2:a4:94:70:2f:8d:db:13:4e:89:7a:82:0f:86:e6:20:a5:71:
         28:15:ca:dd:93:79:fa:24:7e:82:60:cb:a9:04:fb:49:12:30:
         c2:49:da:fe:2e:9e:77:f8:14:8d:00:42:88:38:e4:60:02:c6:
         da:8d:65:0c:1a:e4:47:44:32:db:40:69:af:25:a0:d9:8e:9e:
         35:6a:e3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:58:23 2024 by rpki-client on console-ams.rpki-client.org