Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7171d759-080c-3e64-98cd-8f62a85b4c25.roa
File:                     7171d759-080c-3e64-98cd-8f62a85b4c25.roa (raw, json)
Hash identifier:          NVWajD9gWOZocw16NkQGAEGjzxLBS7HEF4weGs2Cnys=
Subject key identifier:   C6:7F:97:4C:B0:E5:BB:26:53:9D:84:DA:E0:BC:97:BE:2A:AA:1D:4F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DC93CE9E88E83E9564A67C4E0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7171d759-080c-3e64-98cd-8f62a85b4c25.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Tue 04 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        70.166.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c9:3c:e9:e8:8e:83:e9:56:4a:67:c4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : May  4 04:00:00 2027 GMT
        Subject: CN=1538268a-0f40-4e65-ae0b-33a1afb23bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6b:58:eb:2d:e6:f7:39:89:29:e0:8f:55:63:
                    b6:fb:79:1a:58:4c:e5:aa:75:75:30:a4:4d:c3:4f:
                    c9:a9:a3:aa:68:3d:23:fc:28:31:d2:cf:4f:b1:99:
                    c9:e2:4f:da:25:52:2a:91:fa:c5:22:6f:aa:f5:2c:
                    30:84:5a:18:a5:ff:c4:08:7c:9b:6f:a2:02:1b:ae:
                    74:34:f7:77:18:1e:4b:bf:6a:a1:07:f7:00:2d:06:
                    d1:48:9c:c3:5e:80:28:09:9d:2d:5b:d7:96:2f:79:
                    55:44:8b:b5:ce:ac:9a:ff:e7:e7:78:81:3c:40:e3:
                    31:30:a2:cb:46:d3:03:24:79:50:fb:b7:96:7e:b4:
                    17:39:14:5e:6f:e8:37:5b:5b:34:93:10:1c:30:8e:
                    cc:8d:bb:d3:a4:29:f1:58:99:fb:c5:bd:a8:bf:ad:
                    8c:dc:c1:9e:d1:34:df:fb:27:52:f7:2d:f9:0e:28:
                    64:d5:c6:80:28:c9:39:8e:fc:66:f4:7b:d2:a5:ea:
                    40:2c:aa:9a:29:72:59:3b:6f:6c:cd:ec:d6:3e:12:
                    37:98:51:22:26:34:3b:d8:a3:1a:d8:a3:28:b2:7c:
                    97:9a:8b:b3:5f:21:73:de:6f:db:f8:91:26:0d:03:
                    de:88:f7:1a:d2:8f:7e:2e:2f:85:5b:00:a3:09:a8:
                    62:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7F:97:4C:B0:E5:BB:26:53:9D:84:DA:E0:BC:97:BE:2A:AA:1D:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7171d759-080c-3e64-98cd-8f62a85b4c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.166.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:9a:2f:2b:f6:3b:13:01:77:17:cf:6b:1b:99:27:e5:5b:fd:
         3d:b0:c7:59:57:d8:94:16:3e:76:c9:cb:1c:d2:36:1d:20:93:
         50:43:88:02:37:aa:84:d7:de:94:4e:c8:c3:30:05:15:22:5f:
         e7:04:12:30:d5:dc:f2:01:21:39:89:fa:eb:c9:13:0c:55:0a:
         7a:d8:46:ab:dd:95:17:f4:db:cd:61:83:2c:f7:07:8a:d7:fb:
         32:a4:ee:22:73:93:c8:29:8f:3c:49:9b:9c:d6:58:ef:81:36:
         b4:b5:b0:57:4e:8a:2c:9c:1e:41:de:57:ac:3e:6e:ef:c7:f6:
         9e:c1:46:4b:36:56:7a:63:92:17:86:ad:78:a9:b1:98:cf:16:
         0b:bb:da:5e:c8:65:a1:ef:af:d7:9f:f5:63:ac:f7:1f:7b:8a:
         cd:1d:6a:c6:46:13:67:c0:d5:d0:cc:9c:e9:48:62:41:5e:39:
         b9:a0:4d:ce:73:2d:74:c0:53:82:c4:d0:b3:08:1c:cb:61:64:
         70:30:e4:e4:2c:14:57:a6:09:f4:d8:e2:8b:75:e7:45:86:ae:
         a4:32:74:a4:f1:02:e4:06:6d:00:10:17:0e:07:5d:06:0e:b3:
         82:20:10:ef:42:ad:67:3d:06:1e:8c:59:e1:91:fb:aa:01:55:
         27:8f:70:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 02:55:41 2024 by rpki-client on console-fra.rpki-client.org