Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a244e7f-2c5a-3594-b257-b9c595c1297e.roa
File:                     7a244e7f-2c5a-3594-b257-b9c595c1297e.roa (raw, json)
Hash identifier:          W9WpVMc7sPnnnvLgVN6EpbMApAIg9MJFWxcd2mG/Zvw=
Subject key identifier:   C0:8B:33:3D:C8:C9:47:61:80:E4:DD:FC:BD:63:A7:F2:FF:D3:F2:8B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DC93D0A2C0EAC8CE7CA475F80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a244e7f-2c5a-3594-b257-b9c595c1297e.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Tue 04 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        70.175.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c9:3d:0a:2c:0e:ac:8c:e7:ca:47:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : May  4 04:00:00 2027 GMT
        Subject: CN=1061e0fe-29b5-4965-873c-7b3ce662f9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:1a:f4:b9:6c:5d:ba:8b:16:22:a8:e2:19:
                    7d:72:cb:75:ce:a5:a3:64:ef:95:36:71:b8:a7:a3:
                    6c:db:97:1e:fd:b1:8e:5b:21:76:91:50:9a:5f:c4:
                    1b:77:c9:92:e7:c9:30:93:57:13:81:e5:a2:21:a4:
                    a0:cd:33:2a:d1:08:99:a1:f6:c8:52:e2:f2:43:66:
                    d8:f4:89:3b:fc:69:3a:5c:65:42:70:38:9e:af:ca:
                    68:f5:d2:6d:38:e7:ef:48:f9:fb:d9:4f:65:20:91:
                    e7:dd:8a:76:60:f8:c6:4f:20:e2:b3:78:73:59:ec:
                    08:bc:8b:c4:bd:c7:d6:67:0d:07:90:ca:b8:a5:4b:
                    8b:f6:7d:db:a7:fa:08:0a:29:95:72:c7:42:76:df:
                    26:14:93:3c:8f:35:60:4a:90:52:d2:7d:50:f1:17:
                    c5:83:63:96:fc:c8:53:52:c4:5b:70:52:37:c5:83:
                    71:c5:8e:20:28:02:0b:a1:fb:73:c6:fc:85:f7:c2:
                    9d:12:19:e1:65:64:63:8e:40:de:c9:da:8b:51:a3:
                    b7:41:07:c0:95:bc:7f:0e:5f:b3:2a:48:89:48:bd:
                    2d:c2:74:3b:d0:ae:57:5c:c3:37:78:cb:71:66:d2:
                    5a:fe:11:1a:0d:9d:cf:0a:b8:49:f5:6a:64:fc:83:
                    85:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8B:33:3D:C8:C9:47:61:80:E4:DD:FC:BD:63:A7:F2:FF:D3:F2:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a244e7f-2c5a-3594-b257-b9c595c1297e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.175.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:da:4e:b2:d7:de:6f:28:2e:89:91:15:9f:19:c5:1e:7f:2e:
         20:78:fd:77:9e:7f:74:81:91:51:e6:89:c6:81:4d:de:6e:52:
         bb:52:c5:2f:f8:4e:df:ab:81:c1:99:76:09:aa:04:88:4e:d4:
         4d:f4:c2:19:77:18:19:f3:58:a7:d3:1a:5c:62:4b:c2:9d:e0:
         e2:85:84:f4:a7:0c:6e:10:45:14:63:f6:fd:9c:59:7b:06:43:
         21:0e:9f:9b:83:12:5d:a9:b2:e5:ff:27:89:ee:03:4d:6d:fd:
         ac:d7:42:c2:fe:c8:d9:b7:05:76:f6:f3:13:d8:c3:17:60:6a:
         8e:f4:4b:3b:d2:19:b2:99:03:b9:73:78:d6:31:bf:79:75:9f:
         91:01:d9:e5:2d:6f:fb:ad:12:99:13:ae:55:f1:16:86:46:25:
         21:65:6a:74:0e:ed:4e:90:60:04:a1:37:56:5e:e2:b3:45:c9:
         b0:bd:32:e9:d5:55:7e:74:2e:65:05:ca:ad:37:fe:1a:22:50:
         4e:cd:34:3e:18:7f:26:27:d6:3e:99:6d:5f:14:5e:a1:08:84:
         00:44:10:9f:f3:50:4b:3c:13:19:07:ed:d6:05:6d:7b:79:0a:
         9c:9a:7d:2e:cc:58:5f:10:f1:51:ef:95:84:ba:66:6e:0a:57:
         7e:81:c4:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3JPQosDqyM58pHX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTIyMDUwMzEyMDAwMFoXDTI3MDUwNDA0MDAwMFowLzEtMCsGA1UEAxMk
MTA2MWUwZmUtMjliNS00OTY1LTg3M2MtN2IzY2U2NjJmOWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXYa9LlsXbqLFiKo4hl9cst1zqWjZO+VNnG4
p6Ns25ce/bGOWyF2kVCaX8Qbd8mS58kwk1cTgeWiIaSgzTMq0QiZofbIUuLyQ2bY
9Ik7/Gk6XGVCcDier8po9dJtOOfvSPn72U9lIJHn3Yp2YPjGTyDis3hzWewIvIvE
vcfWZw0HkMq4pUuL9n3bp/oICimVcsdCdt8mFJM8jzVgSpBS0n1Q8RfFg2OW/MhT
UsRbcFI3xYNxxY4gKAILoftzxvyF98KdEhnhZWRjjkDeydqLUaO3QQfAlbx/Dl+z
KkiJSL0twnQ70K5XXMM3eMtxZtJa/hEaDZ3PCrhJ9Wpk/IOFQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMCLMz3IyUdhgOTd/L1jp/L/0/KLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2EyNDRlN2YtMmM1YS0z
NTk0LWIyNTctYjljNTk1YzEyOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERq+gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbaTrLX3m8oLomRFZ8ZxR5/LiB4/Xeef3SBkVHmicaBTd5uUrtSxS/4
Tt+rgcGZdgmqBIhO1E30whl3GBnzWKfTGlxiS8Kd4OKFhPSnDG4QRRRj9v2cWXsG
QyEOn5uDEl2psuX/J4nuA01t/azXQsL+yNm3BXb28xPYwxdgao70SzvSGbKZA7lz
eNYxv3l1n5EB2eUtb/utEpkTrlXxFoZGJSFlanQO7U6QYAShN1Ze4rNFybC9MunV
VX50LmUFyq03/hoiUE7NND4YfyYn1j6ZbV8UXqEIhABEEJ/zUEs8ExkH7dYFbXt5
CpyafS7MWF8Q8VHvlYS6Zm4KV36BxMI=
-----END CERTIFICATE-----
Generated at Fri Apr 19 17:20:03 2024 by rpki-client on console-fra.rpki-client.org