Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f4ce954-e548-39a5-85af-121a219694a7.roa
File:                     6f4ce954-e548-39a5-85af-121a219694a7.roa (raw, json)
Hash identifier:          IgO1qM9h1rCNM5w+Uhc+TyQ95UnjYOX7oQz3SRLXL70=
Subject key identifier:   3B:56:82:D7:CF:CF:5A:F4:F1:D5:6C:EF:32:AA:08:EE:51:27:8D:78
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D76F7E2273B1902FE9F589800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f4ce954-e548-39a5-85af-121a219694a7.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sun 04 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        68.96.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:76:f7:e2:27:3b:19:02:fe:9f:58:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2027 GMT
        Subject: CN=f78419d6-306c-4235-a847-62cbe130c080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cb:be:09:7f:10:c3:a9:f2:44:db:26:d5:9d:
                    c2:0e:c8:42:4e:6a:53:c4:0f:8c:d8:2f:de:95:96:
                    15:89:ab:f3:37:bc:38:c4:34:c2:45:47:0b:65:70:
                    c9:b6:31:81:e8:ac:14:ac:b8:e6:09:92:7c:34:e7:
                    00:9f:0b:0f:f1:b1:20:ce:8e:04:a6:44:5b:c8:48:
                    87:e3:5f:4d:ef:d1:6f:af:af:23:52:88:7b:39:aa:
                    0a:1d:9e:2d:9f:f0:cf:da:3a:de:d1:28:29:c6:fe:
                    7a:07:45:7f:94:63:84:0b:ba:f4:ec:d0:d4:0d:c3:
                    9f:71:0b:34:e1:ae:dc:eb:40:b4:d3:bd:80:5a:1f:
                    a7:4e:13:21:1f:15:34:7c:d7:bb:90:47:5c:cb:94:
                    b8:b8:61:73:98:83:14:4c:9d:c2:5a:a7:5b:15:87:
                    6e:9b:b3:a8:fe:21:3e:62:ae:0f:d1:94:21:28:ce:
                    1c:cd:b8:c0:1f:ee:5c:55:10:7c:8c:8b:72:e4:61:
                    fc:7c:1b:97:7c:03:c0:1a:11:8f:64:20:2f:b5:42:
                    03:0e:db:dd:cb:18:b3:bb:1f:23:1e:73:cd:e4:35:
                    29:26:c4:65:cb:4c:11:c4:fe:87:d2:4a:98:41:29:
                    ad:eb:ec:07:cb:00:79:9c:7c:ea:0f:d2:97:06:e3:
                    61:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:56:82:D7:CF:CF:5A:F4:F1:D5:6C:EF:32:AA:08:EE:51:27:8D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f4ce954-e548-39a5-85af-121a219694a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.96.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a7:fb:99:f9:d1:cb:fb:c7:fa:d5:f9:11:5f:43:74:4d:b4:
         98:0e:30:f5:3b:77:db:55:ba:b9:27:1c:0e:82:10:30:7b:56:
         55:1c:70:6e:4d:63:ab:02:c6:0b:13:a2:aa:a7:3c:1d:59:f1:
         cd:6c:73:ef:2e:53:98:3a:76:c8:ad:bd:7e:d7:4a:a9:26:6b:
         8f:17:af:20:1a:a9:23:c4:c8:09:23:60:66:e6:6c:24:6e:c3:
         84:58:cb:14:ee:dc:53:c8:dc:68:5c:f2:7d:e4:a1:b0:0e:d3:
         55:96:00:60:00:46:95:96:84:db:80:db:de:b7:5b:06:0e:37:
         f7:5e:4d:8f:97:34:04:5e:db:92:1b:e5:65:56:7d:80:96:c6:
         e1:41:19:17:30:37:e9:c6:56:8e:42:80:99:2d:1c:e3:69:17:
         25:d7:f8:8c:4e:1a:19:2e:72:12:c6:e2:c1:3e:b2:73:0b:13:
         3d:2e:91:f1:fa:a9:b9:0d:a9:02:26:79:32:d8:9a:94:ad:fc:
         47:15:99:58:5b:fa:11:96:8a:ee:bc:2e:0c:24:a5:0b:1d:f5:
         2c:89:9d:56:da:01:cf:f1:69:ba:ed:2b:1a:d0:1c:b5:89:b2:
         0d:9f:e1:9d:ff:71:43:ca:23:bb:4c:32:a5:95:77:d5:b8:e0:
         42:fb:00:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:46 2024 by rpki-client on console-fra.rpki-client.org