Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/695fb0ae-3589-39b0-8c55-068665de4f95.roa
File:                     695fb0ae-3589-39b0-8c55-068665de4f95.roa (raw, json)
Hash identifier:          Hb+gatbwxC0w7LHUJLn4j52I5S6aPWYJevIpNwt0TB8=
Subject key identifier:   24:0A:85:3B:D7:23:5E:39:06:D1:F7:6D:68:4C:34:CA:AF:C2:E4:68
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DC93C90D2EEC7E47AE223D300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/695fb0ae-3589-39b0-8c55-068665de4f95.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Tue 04 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        70.182.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c9:3c:90:d2:ee:c7:e4:7a:e2:23:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : May  4 04:00:00 2027 GMT
        Subject: CN=d5fcf977-b304-4242-a3f2-02d0fddf12ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:e2:38:6f:27:73:8c:0d:f1:aa:1d:7d:40:
                    57:9b:45:d5:8c:16:14:10:53:ca:c7:a3:2b:c7:7f:
                    94:f6:38:1b:e9:aa:bc:3c:d4:c8:67:17:92:ee:31:
                    68:fd:24:8e:c2:49:e0:79:98:ce:fc:09:e7:1f:95:
                    32:6d:c4:ae:a0:6d:02:53:fb:fc:b6:25:8c:c2:b9:
                    c2:23:db:5c:ef:b2:9b:54:33:02:3f:2d:ad:33:57:
                    fb:52:e5:59:92:14:24:e0:21:f4:e4:f9:4f:6d:00:
                    97:b2:cf:de:ac:d7:6d:39:91:7f:7b:e2:55:1d:a7:
                    d1:49:33:af:8d:2b:df:84:1c:58:50:08:5a:c1:b9:
                    0f:a6:4b:83:3b:ce:29:d2:31:a3:8e:a3:db:39:96:
                    94:c4:5a:ca:b8:6e:d6:f7:5e:d6:3a:6d:ce:73:df:
                    92:f2:67:ce:5d:26:62:00:c0:33:99:27:ea:76:29:
                    7a:63:0f:42:f5:8f:77:c6:3c:f1:d6:be:36:c3:17:
                    a7:2c:ae:d8:d7:8f:87:d4:8d:de:85:7d:b4:e8:e2:
                    73:a9:c4:a3:c5:b2:c1:dc:11:a0:e7:b2:e8:38:ab:
                    d7:24:00:f6:7f:03:bf:bb:e9:eb:dd:a7:74:21:a1:
                    41:e2:c8:6d:b5:59:2f:64:71:6d:f7:86:16:a0:01:
                    0f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0A:85:3B:D7:23:5E:39:06:D1:F7:6D:68:4C:34:CA:AF:C2:E4:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/695fb0ae-3589-39b0-8c55-068665de4f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.182.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:37:ae:74:8f:d2:4b:08:2c:4e:1c:aa:b3:9b:e3:d1:80:55:
         15:0f:14:5f:18:a1:4d:36:bb:b8:53:de:2a:fc:ae:c9:a3:65:
         ca:98:41:53:84:4e:f6:36:a1:28:b6:81:4c:dd:2d:19:84:26:
         0e:74:9e:3f:3c:cd:a6:c3:f8:57:0e:c9:71:42:28:20:9a:a2:
         cf:c8:4d:b0:bd:2c:66:32:77:22:6a:79:48:2b:a7:d9:95:aa:
         ee:6b:bd:7d:5f:dc:f5:7f:4f:0d:f0:25:3a:48:3d:ad:c5:2f:
         57:f6:4f:3e:84:d2:62:ff:d7:47:80:91:8c:22:ca:05:f0:5e:
         f7:86:74:ff:28:55:1b:f4:5c:ad:9a:c6:2c:81:63:22:c8:14:
         60:05:ab:a1:b3:43:11:fd:77:f6:48:0c:b8:b5:47:80:ce:27:
         2c:11:ca:79:6e:8a:1d:a3:e1:d8:ee:25:a6:a7:bc:eb:69:2c:
         74:c0:b8:6b:58:84:d7:57:40:05:e0:fd:f7:b5:56:5e:9d:e0:
         33:1d:22:7e:53:a0:8a:b7:db:eb:2f:05:e9:99:1b:c4:1f:99:
         39:5f:a0:cc:2f:5b:9e:9a:96:42:78:d3:d8:62:9c:6b:7a:19:
         77:ab:42:3c:e2:aa:ce:9a:07:09:c6:2d:cb:88:d3:ed:d6:c0:
         4d:23:9a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:46 2024 by rpki-client on console-fra.rpki-client.org