Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ec696fa-968c-353a-91fe-ea0de2e3a645.roa
File:                     9ec696fa-968c-353a-91fe-ea0de2e3a645.roa (raw, json)
Hash identifier:          4ebNjQj2svYodOWpH/TDCwFsDBfgYLOsaFCWRnSAHME=
Subject key identifier:   46:16:8D:8B:94:CD:A3:6B:F5:DB:FA:6E:3F:B7:8B:D8:0D:94:F3:2A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DC93C46F44883132579D51E80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ec696fa-968c-353a-91fe-ea0de2e3a645.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Tue 04 May 2027 04:00:00 +0000
asID:                     62957
IP address blocks:        70.165.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c9:3c:46:f4:48:83:13:25:79:d5:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : May  4 04:00:00 2027 GMT
        Subject: CN=532df9be-c0de-4f5c-8ade-9a4a07de4a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:59:de:01:ab:05:b7:79:7e:9d:eb:25:55:0c:
                    b3:d2:a4:fe:0b:80:c7:12:f4:a5:92:4f:d0:19:fa:
                    16:77:51:1c:7d:ca:ad:36:67:f0:91:02:94:59:d4:
                    f5:cc:92:cd:bd:5c:bf:6c:9b:63:f1:f3:90:7b:ce:
                    84:27:9c:bb:77:9a:0c:dc:a4:bd:6f:1c:a7:e1:94:
                    14:89:84:71:cf:ad:76:9a:46:ff:82:9e:b7:47:d2:
                    79:ee:49:4d:b8:03:af:23:96:5c:5a:7c:a7:63:5d:
                    d4:b4:b9:db:52:46:c2:f3:8d:3a:cc:ae:b6:6f:11:
                    17:b4:74:75:43:6d:ce:65:08:9e:df:00:66:de:11:
                    9c:38:2e:de:64:55:07:7d:08:ff:69:55:e4:e9:4d:
                    56:d2:48:bb:49:0e:09:f0:d4:d9:44:4b:31:96:af:
                    a1:cd:d0:5a:34:c0:e6:69:cd:6c:ba:ba:87:55:05:
                    f8:fa:68:c7:78:ad:29:f6:c1:6e:6a:fd:e7:15:be:
                    1d:9d:ba:ae:19:35:b2:0a:fe:5c:2a:56:76:2c:05:
                    78:b5:a8:99:0b:41:df:c8:59:37:a0:37:ce:1f:bf:
                    8e:b8:73:86:20:34:70:b2:9c:0e:b3:10:1e:d1:07:
                    79:b9:5c:fc:cf:74:5f:59:fe:6a:36:1f:d8:a1:66:
                    16:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:16:8D:8B:94:CD:A3:6B:F5:DB:FA:6E:3F:B7:8B:D8:0D:94:F3:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ec696fa-968c-353a-91fe-ea0de2e3a645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.165.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:f6:b3:22:c3:89:54:2f:7e:65:15:c1:66:f0:1b:9c:fd:e9:
         68:58:f4:a6:18:f5:1e:fa:75:d9:0c:d0:26:dc:da:d2:78:53:
         b5:0a:6b:62:1d:aa:32:6b:cc:94:9f:20:76:1f:b0:44:a7:db:
         5a:80:fb:45:76:fc:7b:96:5b:23:98:3c:9c:d6:df:7d:98:b0:
         53:af:f8:ed:7b:de:77:48:c9:37:05:bf:12:38:19:37:69:31:
         46:98:a4:d1:b0:1b:fb:4f:19:99:ea:99:fb:6f:8d:b9:d8:b1:
         ec:9b:e4:5b:ce:d0:46:5d:de:94:e4:2d:61:42:0b:43:c1:d0:
         c0:1b:4b:ca:49:1f:01:72:74:c8:5d:a4:47:69:8f:28:5f:e3:
         e3:c4:ea:9b:1d:1f:74:72:36:9d:86:ab:89:c2:a7:66:b2:d2:
         21:f5:f3:e5:e6:7a:4d:3f:fe:73:12:f1:61:d2:c7:53:90:96:
         39:c8:4c:43:ad:8b:83:d3:51:30:5a:24:f5:4d:83:16:54:b6:
         ef:90:ca:f8:8e:94:02:fe:51:bf:d5:ba:c7:6c:24:09:d4:d0:
         d0:f9:49:42:15:6b:d4:de:b3:b0:a6:d9:10:90:29:93:65:db:
         0f:b3:34:2e:14:55:82:5d:8f:21:4b:fd:d9:02:ec:13:8b:f3:
         df:33:d0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:52 2024 by rpki-client on console-fra.rpki-client.org