Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7582e4e7-c129-3db8-85d6-ed402ac98568.roa
File:                     7582e4e7-c129-3db8-85d6-ed402ac98568.roa (raw, json)
Hash identifier:          QffKxtHH+o0r9MD2IkpWvjZNg36/jFxWtjKPRnR7Ohw=
Subject key identifier:   81:E4:DC:CD:83:88:12:95:9E:7E:A0:E2:A5:0D:B2:6C:A3:12:F7:EE
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DB5D82D0CA9E32DE698EA6D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7582e4e7-c129-3db8-85d6-ed402ac98568.roa
Signing time:             Tue 26 Apr 2022 12:00:00 +0000
ROA not before:           Tue 26 Apr 2022 12:00:00 +0000
ROA not after:            Tue 27 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        24.120.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b5:d8:2d:0c:a9:e3:2d:e6:98:ea:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr 26 12:00:00 2022 GMT
            Not After : Apr 27 04:00:00 2027 GMT
        Subject: CN=5a74bd87-d3fc-4317-b958-c43d88bcb831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:7f:be:54:5a:43:73:71:15:5c:2e:15:0a:
                    26:48:f6:70:a7:2f:e0:4e:ca:3e:86:b1:ec:90:db:
                    28:a3:11:d1:08:3e:a3:b6:cb:28:9f:95:c1:d5:e8:
                    cf:5c:21:89:f2:44:28:1e:c5:f6:4e:ab:d0:93:fa:
                    43:99:20:a2:70:77:22:3d:5f:43:e4:5d:a3:31:3b:
                    ad:b3:65:ed:cd:3e:05:0a:0b:47:f5:14:ef:9a:9b:
                    f3:ac:bd:79:93:6c:c4:60:b5:c6:be:63:ec:f7:d8:
                    bb:e2:9f:a3:d3:97:10:a7:98:2e:4b:db:87:5d:b6:
                    78:88:99:a0:7c:84:85:67:f8:04:c5:89:66:97:d7:
                    ea:96:ad:42:13:56:04:75:5a:59:f5:90:42:b5:d3:
                    c7:be:93:04:c8:08:82:4c:b0:bd:a9:f2:c7:18:ec:
                    aa:58:61:00:3d:ad:f1:f1:99:6f:27:a6:ce:f5:4e:
                    8c:2f:0d:d2:e2:5f:84:6e:06:c2:0a:93:22:f5:a3:
                    eb:6b:a8:07:04:61:3b:80:cd:ba:f0:30:12:88:51:
                    e5:a4:c1:e8:2b:7f:e6:08:68:c5:41:02:6e:06:58:
                    0a:03:49:d0:a9:1c:6c:12:3b:11:fe:a0:46:d1:99:
                    fa:18:95:e0:a5:d1:e8:a7:96:a1:c8:29:32:63:e3:
                    e8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E4:DC:CD:83:88:12:95:9E:7E:A0:E2:A5:0D:B2:6C:A3:12:F7:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7582e4e7-c129-3db8-85d6-ed402ac98568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.120.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d8:17:46:06:bd:6a:a7:ca:9b:6f:15:f2:22:1b:f7:85:63:
         ba:2f:21:65:9f:ea:de:b0:e0:16:e8:1c:d1:47:e7:f4:b9:4f:
         a8:b2:bc:b9:a0:64:8d:9c:27:cb:d0:ae:f6:0e:d5:35:14:93:
         c0:9a:78:32:d8:65:0f:be:2a:b6:3e:eb:cd:a3:ac:82:e3:64:
         14:27:d6:b8:31:35:7c:7d:fd:91:40:44:02:86:42:d4:db:fe:
         24:df:89:1e:3a:38:b0:22:b0:7c:5e:dc:7d:74:36:f0:53:ce:
         1c:d2:ab:66:3a:3a:d6:79:ac:ca:27:ec:5c:f4:e3:d0:b1:de:
         43:19:26:74:a5:cb:36:51:03:c2:c1:9b:82:42:38:d1:8e:ac:
         f1:66:a4:44:98:bc:21:32:3b:6e:1a:6f:52:51:8f:af:8c:11:
         d6:48:b4:c2:60:62:22:41:ac:79:5d:f1:6e:d0:8d:5d:7d:2f:
         54:da:b9:d0:0b:e4:8b:40:72:4c:26:07:4a:0f:39:eb:ef:42:
         e4:2e:1f:eb:9f:1e:49:3a:24:c6:76:bd:4b:a5:9c:4e:d7:2f:
         81:b5:d3:53:fe:69:a7:39:e8:3b:19:07:17:90:f6:98:75:c8:
         44:e6:78:bd:ab:99:84:a8:b4:03:e4:b7:bb:5a:8b:52:9d:b2:
         5e:2d:11:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:56:11 2024 by rpki-client on console-fra.rpki-client.org