Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8977bc1c-a133-39ea-b8fb-9c99e089d39b.roa
File:                     8977bc1c-a133-39ea-b8fb-9c99e089d39b.roa (raw, json)
Hash identifier:          eDav4aAq8SH8PUeZSNN8VmKqajcLev5ZCAzjGCfi8Iw=
Subject key identifier:   CC:A9:26:26:B7:4D:87:64:74:AD:D4:64:9C:08:EB:B7:ED:5E:40:25
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D7721E86DC7C495901E6B41C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8977bc1c-a133-39ea-b8fb-9c99e089d39b.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sun 04 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        68.99.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:77:21:e8:6d:c7:c4:95:90:1e:6b:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2027 GMT
        Subject: CN=6e904b8e-ff70-4f40-b8d3-02df10adf7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f8:d1:b2:4a:72:03:83:40:47:e1:2c:c4:b4:
                    21:e7:58:89:f5:f0:5a:f8:80:a1:7f:8e:a7:14:2d:
                    18:a9:ac:48:f6:38:75:5d:0e:33:1b:6c:62:1c:4a:
                    27:a8:7e:26:91:1f:d7:6c:69:7f:be:49:c7:86:7e:
                    3d:4c:93:db:7f:53:11:73:66:50:6b:a6:69:14:33:
                    f0:90:6f:4c:db:6e:5d:ef:6a:c5:23:bf:a0:32:ff:
                    c5:a9:f0:fa:fc:ca:b7:c5:b9:5c:59:81:29:0c:b0:
                    da:7b:6c:c9:9b:98:d1:49:57:b8:1f:8a:2e:85:10:
                    47:f2:5d:16:6e:c0:0e:c7:a4:55:32:01:93:42:10:
                    64:66:eb:23:0b:6f:b4:bd:66:06:0e:eb:7b:ae:09:
                    30:00:16:7a:a4:cd:dd:3f:32:50:e1:7e:bc:32:85:
                    45:34:3f:34:5c:15:1b:26:da:81:48:9a:2c:52:3f:
                    22:20:60:c4:2f:15:7d:8c:4e:a2:7d:0e:71:85:f5:
                    ad:af:43:5b:2e:02:5d:11:1e:2f:fd:b1:f4:c8:ca:
                    26:e5:aa:23:8f:cd:e0:d4:cf:f2:e7:69:24:5f:bd:
                    0b:2e:c0:a5:4d:63:8e:03:ad:5b:07:b0:fa:fe:d0:
                    8d:19:ea:0f:d2:ab:c0:14:98:ff:bd:cb:b9:3d:a9:
                    1e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A9:26:26:B7:4D:87:64:74:AD:D4:64:9C:08:EB:B7:ED:5E:40:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8977bc1c-a133-39ea-b8fb-9c99e089d39b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.99.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:06:c6:7a:a0:a4:4a:80:a5:ec:97:a7:f0:69:28:0b:98:e9:
         84:81:1c:63:7d:4f:90:29:e5:8b:f5:31:7d:7d:04:90:32:91:
         d4:b8:d8:4b:9c:34:01:b3:d7:9a:1d:d6:af:4c:6e:b4:84:de:
         ab:64:0c:a3:ed:30:95:73:b5:88:fe:ec:fe:00:a8:c2:f2:9a:
         e1:b1:e7:24:69:d7:fc:03:91:db:f9:e8:c5:95:e0:a4:e0:e2:
         11:95:0c:ba:ba:74:ea:e9:cb:45:c3:44:33:c3:92:83:a8:87:
         48:f0:00:7a:94:09:a5:25:ef:bb:08:f5:e6:ab:69:61:07:45:
         7c:7e:fd:d0:81:9d:38:42:14:50:1f:5a:08:83:fa:49:d4:76:
         b7:94:0b:4c:6a:42:24:86:23:3a:54:14:b7:ae:81:41:0e:8c:
         1e:f5:f2:90:17:1a:57:6f:03:be:dc:44:51:c6:69:1c:6b:d0:
         6c:6a:64:27:9a:c4:72:87:cb:09:be:9c:6f:b7:85:34:6b:6f:
         37:90:20:52:0d:b6:c6:a9:ac:02:c1:07:78:36:54:48:48:2e:
         44:97:07:c9:4b:72:7d:dd:13:ce:8d:6a:90:6e:7d:f5:c8:b7:
         20:0a:ed:22:52:a5:33:47:ba:4d:8b:ad:28:e0:b2:83:b6:f3:
         1d:e9:13:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:39:14 2024 by rpki-client on console-fra.rpki-client.org