Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/866bff78-9347-3855-88c6-a50bc307c31d.roa
File:                     866bff78-9347-3855-88c6-a50bc307c31d.roa (raw, json)
Hash identifier:          qQmk+CVfZcmP9ar07OzmGejYe5Rx86Ke/tnrlvv7VZg=
Subject key identifier:   8A:22:0E:D3:B3:20:AE:05:32:9B:14:98:BC:9B:55:60:4B:80:88:04
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DC93C49CDEB6F7E91A6D148E0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/866bff78-9347-3855-88c6-a50bc307c31d.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Tue 04 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        70.175.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c9:3c:49:cd:eb:6f:7e:91:a6:d1:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : May  4 04:00:00 2027 GMT
        Subject: CN=863ccab4-083d-4fa0-8bd9-baf37b4df006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e2:25:d8:52:f8:2c:4f:11:a1:82:ae:56:a7:
                    a1:00:b9:ce:c6:10:9a:4b:3f:03:12:b8:12:24:9f:
                    6a:fc:ff:0d:66:a9:b2:26:8b:df:56:38:e7:20:ce:
                    23:c6:d5:73:2a:4c:c4:d1:ac:73:cf:de:b8:27:ea:
                    be:68:ff:a6:43:f5:bd:18:e8:82:da:88:50:27:9b:
                    f6:8c:99:87:72:32:65:32:d9:9c:56:9d:56:c8:59:
                    01:bb:7b:0b:8c:8e:d8:df:c1:ed:3a:61:cb:0a:7e:
                    fc:c1:47:68:30:5b:c4:d2:92:00:1f:ad:67:b7:b3:
                    be:03:69:20:90:62:a8:d0:47:72:de:56:e1:a7:7c:
                    58:39:42:3c:73:fd:32:c9:af:e8:1f:61:3f:47:60:
                    34:85:d3:2a:b8:5f:db:27:70:49:bf:cd:22:78:cc:
                    c5:0c:3d:7a:52:e8:5c:41:86:2b:29:77:42:fd:6f:
                    aa:0b:7e:dc:36:2f:2a:75:f6:5d:74:69:c8:8c:38:
                    cd:ef:66:6a:13:96:08:ef:45:de:ea:08:fe:b9:b0:
                    33:8f:ec:ae:90:5d:58:92:6c:eb:ba:98:7d:5d:63:
                    af:07:bc:0a:2a:7a:07:4b:52:b4:fd:15:5e:ac:6a:
                    d5:28:9f:1b:02:e1:87:94:a0:bb:28:73:be:fc:1a:
                    93:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:22:0E:D3:B3:20:AE:05:32:9B:14:98:BC:9B:55:60:4B:80:88:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/866bff78-9347-3855-88c6-a50bc307c31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.175.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:f1:22:c7:3c:60:a5:6b:cc:62:7a:d7:41:8f:29:47:cc:2b:
         15:e6:04:8d:8a:ca:35:cc:45:7c:ee:fe:c5:1f:78:1f:93:cf:
         29:d4:23:b6:19:e5:96:ae:3d:18:07:56:c4:d6:d0:83:a4:f8:
         cd:b4:c7:43:0c:cc:92:19:47:01:27:df:ea:1c:a8:30:74:28:
         77:20:53:d3:6c:56:c7:39:23:7b:38:27:a5:8e:76:b1:f8:92:
         47:6f:84:76:42:3e:bb:58:ee:99:eb:04:6b:69:c9:41:23:b1:
         9d:9e:bf:60:56:83:85:28:7a:62:1f:59:e5:29:f1:93:49:20:
         d7:86:53:f2:cf:36:c3:50:89:f1:ef:0d:93:73:ba:03:f4:56:
         dd:25:6a:f5:6a:5e:b2:73:6c:ac:24:cb:69:f6:9a:c5:e8:ef:
         2b:96:cb:d6:2f:31:6b:27:64:fc:2b:6c:01:02:25:8e:30:e5:
         c3:a2:f8:4d:5d:ed:9f:03:b6:f7:d7:eb:39:ce:e3:d5:77:ec:
         22:7d:4a:f3:13:1c:dc:d5:11:77:3f:49:7b:f4:8e:cb:84:6d:
         25:18:09:63:42:60:80:0b:24:8f:7f:45:e7:cd:3b:ca:45:0e:
         c2:8a:93:49:50:a3:d9:1f:a7:9a:35:80:23:03:06:2d:18:72:
         42:a0:65:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:48:49 2024 by rpki-client on console-fra.rpki-client.org