Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7231c9bc-e967-3e76-b3bc-ce1702b756c6.roa
File:                     7231c9bc-e967-3e76-b3bc-ce1702b756c6.roa (raw, json)
Hash identifier:          DNPsmVREYtejaZkm1aoqhZHwaASXtORP8Tllh0qyhm0=
Subject key identifier:   93:4B:FE:5B:91:F4:2F:F9:B2:5F:75:18:3B:B3:BB:C3:3E:B2:64:95
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DB5E3FA6E4AEA28722BA973C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7231c9bc-e967-3e76-b3bc-ce1702b756c6.roa
Signing time:             Tue 26 Apr 2022 12:00:00 +0000
ROA not before:           Tue 26 Apr 2022 12:00:00 +0000
ROA not after:            Tue 27 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        68.1.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b5:e3:fa:6e:4a:ea:28:72:2b:a9:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr 26 12:00:00 2022 GMT
            Not After : Apr 27 04:00:00 2027 GMT
        Subject: CN=95e42d23-b8c3-4bb2-940b-e0a8d51c85f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bc:c9:f6:a4:a7:20:b3:76:2a:80:07:4f:3b:
                    b0:c8:2a:8f:40:b2:7e:33:d9:8b:16:d7:f2:7d:90:
                    67:ff:a3:99:be:5b:b4:17:c2:36:aa:52:58:98:4b:
                    7a:09:db:52:57:cb:7e:27:2f:6d:44:80:52:9c:12:
                    77:bf:7b:f8:d3:ee:a9:04:1e:ea:bd:97:30:d5:0f:
                    34:f9:ad:fd:58:93:aa:2f:15:7d:29:49:3d:4b:e4:
                    2f:ed:bf:55:97:0c:df:59:3a:cf:19:6e:86:2f:42:
                    72:f3:73:64:e8:46:b0:73:92:3b:30:24:62:84:c4:
                    1b:28:32:63:91:d1:e1:51:39:56:45:5a:de:84:db:
                    0a:8b:b0:16:40:83:c4:b8:82:65:53:b1:2f:d8:e5:
                    4a:da:ac:c8:f6:93:7d:ee:77:41:6b:5d:14:21:a6:
                    50:f9:b0:01:9e:53:35:33:84:6e:a0:40:f9:3c:99:
                    5c:fc:47:42:8e:09:76:8e:51:cc:cf:32:fd:50:a3:
                    58:5f:1a:9a:8b:c5:ae:06:99:cd:02:ec:63:0d:80:
                    68:ea:d6:b3:d8:d3:de:ee:2f:92:ff:62:3d:42:17:
                    73:d4:90:dc:c7:b7:65:e2:c2:57:69:1d:cc:5a:7a:
                    c4:21:4e:94:a8:c6:f5:68:08:28:f6:5d:05:1b:91:
                    97:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4B:FE:5B:91:F4:2F:F9:B2:5F:75:18:3B:B3:BB:C3:3E:B2:64:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7231c9bc-e967-3e76-b3bc-ce1702b756c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.1.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:45:d0:13:fe:79:01:b4:e5:fc:d6:07:a4:f9:6f:17:ed:ff:
         0c:4c:cb:db:53:93:ff:ea:0b:17:f6:43:e1:e8:31:c8:85:2b:
         8f:a2:ad:dd:5a:d8:3e:d1:12:e6:87:e3:6f:ae:92:3d:ef:17:
         98:4c:7f:d7:a5:dd:89:5e:4c:59:e1:07:6f:ee:22:75:eb:ab:
         0e:8d:56:b1:06:44:99:a6:f7:79:71:10:84:33:fb:4f:e9:d5:
         a5:85:7a:73:22:f2:99:d3:38:7e:81:06:f3:8d:0e:58:ec:72:
         49:c0:08:07:1a:51:51:bd:1b:5f:30:0f:b4:fe:a9:f8:bf:11:
         43:0f:e5:10:c7:63:2b:90:2b:9c:69:6c:47:98:ff:6f:f5:54:
         2c:3a:83:db:02:27:63:e1:d4:82:12:f6:21:b9:f9:b9:9e:f1:
         30:fe:bd:ee:d1:c2:c0:2c:b8:81:a1:1c:46:16:4f:85:b0:99:
         38:df:74:32:3f:3a:f6:72:b1:f6:3c:11:0e:bb:5c:ab:0c:bd:
         91:c4:ad:9d:b2:46:09:ef:96:a7:7d:b0:e4:f5:1d:e2:ae:14:
         b1:13:d1:09:3c:77:30:cd:37:5e:7c:58:99:da:42:a3:2d:15:
         ac:a6:e4:b5:91:87:d8:5b:89:ea:bb:d4:07:e1:1b:e3:af:e9:
         24:9e:c7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:43:26 2024 by rpki-client on console-fra.rpki-client.org