Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/703121f4-ad22-3e04-a105-6eeb36fb62e7.roa
File:                     703121f4-ad22-3e04-a105-6eeb36fb62e7.roa (raw, json)
Hash identifier:          tT8nClTUFmBWyMPPkGlNjrT7e3jg+u0wP5i3emXKk4A=
Subject key identifier:   FD:04:A6:D8:29:27:EA:B7:FE:5D:8E:9B:0A:2D:AC:98:EB:76:EB:03
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D76F69D55CC63A26716DE3580
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/703121f4-ad22-3e04-a105-6eeb36fb62e7.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sun 04 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        216.54.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:76:f6:9d:55:cc:63:a2:67:16:de:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2027 GMT
        Subject: CN=f8b5a3a4-ffaa-49ac-b49c-e3f8914ee69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9a:f8:f8:5f:e0:26:58:31:29:f7:2c:c3:a4:
                    6b:33:6d:d2:98:81:ab:56:e4:f2:50:0a:27:3c:fd:
                    04:43:5b:62:bd:7f:3f:0f:08:5e:f5:79:71:86:fb:
                    c2:04:fa:6b:c5:58:df:40:d8:3e:d3:15:4a:f4:22:
                    d8:7b:aa:90:4f:cb:55:8c:85:14:4b:1d:95:c1:da:
                    e6:37:a7:43:c4:54:63:52:fe:a5:58:d9:fd:84:4b:
                    bd:6a:6b:c5:3f:89:19:97:ae:41:e9:c8:e3:88:e3:
                    9b:e8:0c:b0:38:a9:2f:8a:de:ae:05:aa:b0:13:bb:
                    e1:ae:31:97:3d:e1:30:0f:2e:12:bf:68:1d:cd:46:
                    33:f0:28:3a:22:90:74:1e:5a:50:7c:bd:0e:3a:38:
                    04:e9:4c:b5:21:e1:31:10:0b:c2:b2:6f:5e:b6:59:
                    c1:63:a1:1e:19:0a:fa:f4:0e:86:6a:81:88:fa:49:
                    44:a2:f1:15:3b:fa:64:d5:ad:84:30:dd:47:de:0a:
                    58:78:f5:c2:7d:54:f4:e7:55:31:0b:de:c5:32:12:
                    e2:08:12:ca:bf:24:ea:ff:58:80:bb:39:20:7c:fc:
                    85:dd:8f:25:2a:a7:d1:cf:15:ad:46:df:fc:1c:f5:
                    e5:30:d6:d6:65:c4:92:e0:43:cf:e9:2a:6b:11:5b:
                    66:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:04:A6:D8:29:27:EA:B7:FE:5D:8E:9B:0A:2D:AC:98:EB:76:EB:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/703121f4-ad22-3e04-a105-6eeb36fb62e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.54.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:0d:5f:cc:75:00:5c:83:b9:25:67:c1:53:7a:c2:78:c0:5a:
         85:4f:a2:57:e5:69:47:b9:07:8b:26:fa:e2:7b:09:40:6f:47:
         be:22:8a:ef:2f:61:58:29:02:c9:6a:ce:d7:10:bc:7f:1b:03:
         c9:87:92:34:f0:43:4e:16:e6:c0:9f:7d:f3:bd:b8:ca:2d:d5:
         d7:22:de:e0:4b:74:a0:cd:f0:e9:4d:c1:c5:f9:cf:b2:e0:76:
         75:f8:9c:6e:1d:2d:6d:15:40:0c:db:59:24:4f:cb:c7:12:c5:
         f2:01:7c:31:ec:37:fa:52:2b:78:3d:f2:e2:b0:2f:ea:0c:4d:
         97:62:5f:be:6e:46:32:16:94:ec:fc:13:b5:23:bc:8f:d9:f1:
         c7:4b:aa:3c:e3:3b:80:79:4a:6b:17:75:d1:94:43:31:07:f8:
         b5:e8:d8:e4:8a:7c:ae:53:75:4d:fd:ca:2d:af:29:2b:11:cc:
         e3:3d:fc:22:03:6c:50:81:cf:ab:2e:0c:0a:04:dd:f1:19:d0:
         53:8f:c0:87:e6:26:d0:95:42:e8:b2:0d:01:a1:fa:7d:fd:02:
         20:32:d6:21:72:67:bf:fb:6f:d9:23:84:98:8e:ba:25:49:ed:
         49:e0:3d:d3:24:f5:ae:6e:fc:66:dd:cf:e5:1f:2b:cf:c8:84:
         ef:68:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 08:36:30 2024 by rpki-client on console-fra.rpki-client.org