Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b2ac5b5-8d16-3edd-9bbc-8d5f920bf161.roa
File:                     6b2ac5b5-8d16-3edd-9bbc-8d5f920bf161.roa (raw, json)
Hash identifier:          IvmYwU+I6FrvpkHAmgcy/I6112CqGRdLuaMFfVrKfeU=
Subject key identifier:   EA:65:DB:AB:86:B9:F8:0C:B5:27:B0:14:E3:39:F0:32:DB:25:8C:C1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858477D319D2F981120E1C0012AC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b2ac5b5-8d16-3edd-9bbc-8d5f920bf161.roa
Signing time:             Wed 09 Oct 2024 23:35:58 +0000
ROA not before:           Wed 09 Oct 2024 23:35:58 +0000
ROA not after:            Wed 08 Jan 2025 00:35:58 +0000
asID:                     22773
IP address blocks:        68.227.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:31:9d:2f:98:11:20:e1:c0:01:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 23:35:58 2024 GMT
            Not After : Jan  8 00:35:58 2025 GMT
        Subject: CN=936be980-16ab-4a46-acdf-5007ee547d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:ec:1c:7c:7a:34:04:8a:68:c5:a5:2b:8d:
                    34:07:20:53:6d:f2:d2:80:05:5e:10:f2:91:c9:49:
                    73:0a:6e:26:e4:aa:40:83:67:77:e5:53:dc:13:39:
                    56:6e:51:ff:82:93:ca:31:c0:12:85:a1:69:38:fd:
                    0e:c1:96:f6:b3:f1:82:0c:de:6e:69:25:93:81:a8:
                    31:80:62:b5:c6:a9:4d:46:70:4f:50:da:b2:55:d8:
                    91:ce:e1:9b:df:20:59:b3:ef:77:26:08:b8:2e:86:
                    00:2e:b7:d1:d8:b0:a9:fd:26:e8:43:f1:2b:e0:62:
                    5e:ff:69:a6:9a:a4:9f:95:7d:50:00:cc:f1:e7:08:
                    39:d6:d7:b1:c8:c6:7f:40:ae:c5:6b:23:d7:70:8d:
                    c6:09:36:fe:44:b4:81:2d:b5:a9:5d:42:cf:55:0f:
                    12:45:48:2c:40:31:8e:c9:9d:ca:2e:2e:d4:1e:dd:
                    3d:70:d4:fa:01:4a:9d:1f:b4:37:58:12:72:65:04:
                    4a:9d:e2:ba:7e:32:64:df:87:1a:36:04:80:8a:ba:
                    f0:a4:20:e9:96:2b:b8:d9:e3:77:cf:e7:73:12:51:
                    db:e6:00:59:40:c6:33:b2:7d:e3:25:d1:76:0a:1d:
                    a1:96:1e:43:7c:3b:1f:d9:f4:64:fc:94:e0:8e:15:
                    f3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:65:DB:AB:86:B9:F8:0C:B5:27:B0:14:E3:39:F0:32:DB:25:8C:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b2ac5b5-8d16-3edd-9bbc-8d5f920bf161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.227.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c1:0b:f7:86:45:ae:8b:e5:b9:33:c2:f1:3c:02:7e:8a:c7:
         9c:b9:35:de:35:e8:d3:2f:6b:53:00:89:eb:a9:a6:05:95:e5:
         88:d8:27:25:27:18:87:f4:d4:61:a0:f8:24:fb:7e:e7:f5:34:
         57:bb:b5:fd:f4:45:53:ae:d4:13:5d:bd:dd:d0:52:6e:04:07:
         3a:7e:c2:63:39:bb:18:89:1d:00:68:ab:9f:9f:07:87:eb:b6:
         4f:b0:17:2f:51:d1:e0:a1:b4:53:4d:e4:f9:70:00:6e:2e:46:
         cb:63:9e:c8:3e:71:36:82:9b:3f:5f:e6:fb:f9:c8:13:15:c2:
         2d:51:66:2b:b2:4d:c2:26:b6:a4:5c:de:9c:63:c2:b3:7b:49:
         21:d5:88:91:05:3a:87:43:8a:08:e4:70:36:96:5a:be:5b:7e:
         90:cf:26:5f:a0:b3:88:80:e0:1e:61:2f:f1:bc:4a:c9:d2:f0:
         ff:e5:77:4b:72:a5:ea:c1:0b:ee:3c:dd:07:fa:37:b4:45:12:
         4f:a6:da:44:c5:dc:b8:fb:f3:a4:78:ea:c1:a9:1c:55:be:5d:
         39:a5:78:ad:7c:e4:ae:4d:85:45:80:65:0a:fb:10:90:62:c2:
         eb:94:66:d9:b5:40:36:aa:8a:06:1e:0d:d0:88:04:55:a4:97:
         9c:15:37:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:46 2024 by rpki-client on console-fra.rpki-client.org