Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90cadc07-9f81-35d4-9f6f-7ee6306d3a31.roa
File:                     90cadc07-9f81-35d4-9f6f-7ee6306d3a31.roa (raw, json)
Hash identifier:          N1TDOJeW2GK5VaNet40BLaLuN3t2brnohijfeNpxeZY=
Subject key identifier:   1A:0E:21:DE:33:5E:DC:5D:63:3C:B2:E7:39:76:95:FA:35:92:D8:01
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D76F64696A01A0812E9EEDE40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90cadc07-9f81-35d4-9f6f-7ee6306d3a31.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sun 04 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        184.188.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:76:f6:46:96:a0:1a:08:12:e9:ee:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2027 GMT
        Subject: CN=e3267af9-6c6a-4943-aafc-c7c5a33fb510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:6c:0b:55:43:b0:a5:90:eb:7f:de:f1:29:
                    e9:74:7c:46:55:f5:d6:1b:bc:85:16:fa:c0:53:af:
                    4a:f0:42:a3:6a:4d:a8:b2:6a:e0:89:7e:ba:e5:fc:
                    b2:6b:16:a6:43:c8:16:0b:fd:6c:6c:27:58:81:7f:
                    ce:52:f5:27:d7:2c:fa:7d:c8:b4:cf:90:9e:67:56:
                    55:e3:93:2b:4a:0f:e4:47:93:a4:5d:f5:d5:bf:39:
                    b6:58:15:2d:85:b7:a6:5e:9e:c7:aa:84:48:f3:31:
                    4f:69:f5:37:f1:a8:3b:1e:13:5c:21:40:da:5c:4b:
                    ff:63:17:ac:f1:ae:d2:8c:ef:ac:42:90:b6:e5:6b:
                    f4:bb:81:b3:17:8a:c9:31:dd:a2:40:94:ea:1b:44:
                    bc:f7:cf:8a:f5:b6:a7:7a:e2:91:95:47:98:a8:30:
                    3f:82:17:43:ce:68:b0:e9:36:c8:ba:76:14:ea:ab:
                    95:f3:38:a0:93:b9:58:1e:bc:dc:a6:b7:4a:2f:2e:
                    98:5c:97:96:80:23:0d:9f:b5:d4:d3:90:4e:97:74:
                    45:09:29:0d:23:c3:32:ec:b5:21:37:a5:ee:99:12:
                    68:36:9e:16:e4:f8:04:bf:f8:13:a9:9f:bf:f6:d7:
                    3d:64:0b:7a:9e:35:4a:38:02:c8:2b:71:fb:66:72:
                    13:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0E:21:DE:33:5E:DC:5D:63:3C:B2:E7:39:76:95:FA:35:92:D8:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90cadc07-9f81-35d4-9f6f-7ee6306d3a31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.188.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:cb:7b:dd:61:8d:2c:b7:f1:b2:54:f3:f1:ee:65:f3:4d:26:
         6d:6b:03:1d:9b:11:d9:fe:99:46:b8:32:f5:41:c1:c9:ed:82:
         53:02:83:78:8d:34:fd:d8:fe:b7:58:f1:44:56:4c:f1:80:ba:
         f7:0a:be:6b:c8:95:c1:4d:83:86:61:c7:48:3a:10:34:ff:b3:
         8b:83:e9:a4:c3:79:ea:38:f0:c8:67:b1:69:63:ff:27:db:0a:
         df:6b:b6:aa:40:c9:ea:58:31:00:49:4f:61:a1:0b:64:0b:6e:
         d5:2b:61:43:3e:3d:a0:5f:a9:e9:8d:20:3b:09:1f:b9:4a:5f:
         30:67:19:a3:02:37:e1:d9:58:a4:35:d3:47:2e:6a:9a:f7:4e:
         ab:89:55:e0:2c:f4:20:6f:0e:34:f3:cf:4c:35:97:1c:71:b4:
         47:ba:e1:1f:4b:df:10:7c:2d:8d:cb:37:0f:63:64:d0:3c:8e:
         de:8a:10:45:6a:14:39:05:7a:94:39:91:03:65:65:08:c8:5d:
         3c:bd:09:97:9c:1e:32:80:c3:01:c1:53:cd:e4:31:4f:b9:71:
         d2:aa:0b:c6:b1:2f:b3:1f:f9:43:57:24:3d:75:c6:b7:a1:f9:
         97:d5:e5:64:bb:0f:a4:9b:db:6b:41:cb:34:e1:c2:e7:da:c8:
         2c:31:7f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:43:28 2024 by rpki-client on console-fra.rpki-client.org