Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ddcf58e-389f-3e7d-97f3-08f684c90254.roa
File:                     9ddcf58e-389f-3e7d-97f3-08f684c90254.roa (raw, json)
Hash identifier:          VLTE3pe6RMCtK8IBOWFY56yc67O7Wx25FMFMiEjRb9A=
Subject key identifier:   C5:F0:C4:50:BB:AF:D1:4B:A2:79:12:F8:FB:1B:CB:9B:B7:BD:2F:DA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DC93D0C56111520E3E00F0600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ddcf58e-389f-3e7d-97f3-08f684c90254.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Tue 04 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        70.165.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c9:3d:0c:56:11:15:20:e3:e0:0f:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : May  4 04:00:00 2027 GMT
        Subject: CN=125ee309-2319-47ac-b6dd-7a3d1411be1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ef:af:3e:29:51:9c:e9:ed:6d:2d:5f:92:bf:
                    86:28:5b:0c:cf:41:9c:9d:9e:8d:b9:44:a8:1b:87:
                    3d:67:bc:64:91:8c:68:bd:a0:53:5b:83:5b:2b:d8:
                    d5:13:b7:fd:f2:93:64:f6:22:0e:7e:3e:05:42:52:
                    4a:96:a8:31:b6:9f:4b:47:17:8e:b5:b2:54:a9:4f:
                    c5:a3:6b:f4:ec:53:b3:21:e6:b5:b2:95:b1:5f:54:
                    61:31:02:c4:e7:b9:60:65:73:0c:6d:45:3d:df:63:
                    82:62:f5:2f:c5:e0:a1:8e:29:ad:8b:cb:be:93:ca:
                    1d:81:58:0c:05:88:02:97:02:d5:29:1d:40:e0:64:
                    ab:aa:ca:47:1e:ce:f9:fd:ce:ae:0b:a3:4b:87:1d:
                    a1:66:3a:73:38:03:82:1b:6d:b0:cb:0c:3a:73:b8:
                    b5:b2:cf:3c:81:38:1c:e1:b9:ad:73:b6:7e:45:a3:
                    56:8b:5b:f1:4b:f6:64:73:bc:ad:1f:a7:d4:fb:5e:
                    8c:a0:28:0c:47:0f:85:6a:22:92:af:3d:a5:a1:91:
                    b6:88:38:c7:c5:98:54:69:11:15:0a:01:72:b1:3c:
                    65:32:42:b6:b9:79:37:a1:07:aa:89:fc:4c:dc:1f:
                    73:cf:95:b0:65:6a:66:43:36:98:f0:dc:a5:68:6b:
                    d4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F0:C4:50:BB:AF:D1:4B:A2:79:12:F8:FB:1B:CB:9B:B7:BD:2F:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ddcf58e-389f-3e7d-97f3-08f684c90254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.165.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:31:01:41:9b:63:10:18:af:90:f2:19:1d:25:5a:5d:9c:cb:
         db:9c:72:18:b8:5b:e7:e7:8a:82:ca:78:ce:77:de:50:1f:f1:
         c2:ef:33:b4:02:bf:1f:c5:4b:22:c1:3d:d4:2d:54:54:eb:a6:
         e3:1e:17:2c:13:79:12:02:68:58:72:35:0a:95:d8:7a:31:24:
         f8:22:c2:5c:75:ec:7a:14:37:1d:c6:1b:61:0e:4d:70:aa:58:
         65:37:d9:dd:7b:34:7a:a8:03:35:bf:70:c7:ce:9f:5e:d1:4c:
         02:7b:d5:09:d7:3a:77:a5:55:f8:04:0f:ee:60:ab:05:b5:20:
         0f:e2:28:a2:fd:0f:1b:31:17:07:0d:e0:aa:56:0c:fa:c6:2f:
         89:55:26:f6:37:c2:76:28:ac:fe:e1:d1:0c:92:8e:f0:96:3a:
         d4:c6:b1:71:e6:06:11:46:e9:3d:22:a2:c4:fb:62:54:2f:fa:
         63:d4:77:8d:aa:9e:07:bf:28:52:34:84:2a:15:fc:fc:1b:8e:
         5a:7c:c8:b5:ef:10:c5:42:19:d4:58:2b:a4:5f:79:fc:72:7a:
         e8:f3:93:46:c7:74:1a:d2:55:e9:89:1d:18:d0:70:e5:59:09:
         92:88:27:74:01:e6:a7:be:d5:b4:c7:c8:41:cc:b8:4c:73:b0:
         b4:50:0e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:03 2024 by rpki-client on console-ams.rpki-client.org