Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a6678ccf-27f3-304d-a000-706909d7a51c.roa
File:                     a6678ccf-27f3-304d-a000-706909d7a51c.roa (raw, json)
Hash identifier:          0a0HG17gV3+3DAvfDT4NuFAahUflMHV1TtCK2NtM5Y8=
Subject key identifier:   EB:2B:0E:72:59:F1:B2:98:5D:76:15:C8:AF:C4:2B:4B:DF:3B:32:FA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DB5E2EDF1DAE3003823C3D700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a6678ccf-27f3-304d-a000-706909d7a51c.roa
Signing time:             Tue 26 Apr 2022 12:00:00 +0000
ROA not before:           Tue 26 Apr 2022 12:00:00 +0000
ROA not after:            Tue 27 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        68.3.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b5:e2:ed:f1:da:e3:00:38:23:c3:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr 26 12:00:00 2022 GMT
            Not After : Apr 27 04:00:00 2027 GMT
        Subject: CN=d86446e7-0299-440f-a068-10cc2fac8138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a5:25:cf:d1:fb:b5:0b:7c:fe:28:79:df:89:
                    b2:51:de:e3:29:51:5a:66:cd:8c:eb:95:25:51:44:
                    23:50:c6:57:b3:c9:fa:0e:59:a4:2d:a9:42:11:1b:
                    41:6c:75:8c:46:3e:4c:72:8c:06:4e:1a:c5:38:48:
                    94:02:ee:f2:a8:7a:c8:fa:e8:d2:b4:2f:93:50:8b:
                    8f:98:7c:6a:c7:86:14:2d:3f:e3:0e:50:0c:1a:51:
                    01:60:b8:02:2e:4c:b9:05:46:9a:d9:de:a5:41:2a:
                    e3:16:0f:c1:f8:d0:93:0f:8f:64:02:92:00:dc:bc:
                    d2:bd:a7:a4:59:53:24:d0:10:a3:56:74:ae:89:3d:
                    0d:e8:b2:0e:76:71:c3:29:2d:75:71:86:db:d5:32:
                    d9:b3:42:60:21:26:fa:18:42:e8:f6:d8:a2:81:2b:
                    17:68:97:8b:50:70:e1:f3:c5:a6:28:4e:59:11:7f:
                    b0:2b:dd:05:1c:e8:99:6f:f5:f2:bd:12:21:82:08:
                    93:c4:f7:86:6c:03:fa:eb:2c:d6:05:2a:bb:39:6e:
                    94:0e:f2:01:ae:96:77:77:65:36:85:28:57:1a:5a:
                    53:11:0e:fc:90:56:12:7d:4b:7a:4e:74:25:21:3f:
                    dc:f5:59:de:5b:47:65:b1:a9:46:46:e6:70:38:74:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2B:0E:72:59:F1:B2:98:5D:76:15:C8:AF:C4:2B:4B:DF:3B:32:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a6678ccf-27f3-304d-a000-706909d7a51c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.3.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:7e:07:41:53:b3:17:d9:36:01:b6:08:29:eb:16:03:87:d9:
         9c:39:ea:02:58:d2:14:99:12:35:27:b9:d7:d4:a5:1d:dc:55:
         87:68:40:18:59:8e:6d:16:d4:76:3c:c5:83:96:06:d8:4c:8f:
         be:d5:07:d6:a4:2d:3c:23:2c:cc:a4:74:e1:2f:19:8f:1b:00:
         db:b9:6c:c6:e4:ae:06:2a:23:53:34:7a:46:98:2a:8e:30:14:
         34:ed:94:79:c3:f5:bc:71:5b:be:02:f4:48:f0:e5:c5:c9:c9:
         f9:80:71:37:aa:1c:6b:aa:51:89:3e:55:fd:0c:cd:08:ea:7d:
         64:1e:3e:2f:17:3d:9e:e2:10:3f:42:05:c1:4c:b3:f4:b0:25:
         41:6a:39:75:fd:d5:3d:74:ea:c5:39:87:0c:c3:11:78:3b:46:
         e5:cb:7c:05:68:b6:9a:0d:ab:37:c1:7e:ed:cf:26:69:b8:62:
         93:58:8d:3f:f4:ef:0e:53:d5:c3:e0:02:8d:ea:46:bf:15:6c:
         8a:d6:45:97:aa:6a:c9:27:16:92:23:ad:8f:52:48:e4:2f:39:
         51:6a:77:45:91:01:46:a9:81:01:8d:cf:0b:cd:25:48:be:d6:
         48:20:14:79:9e:dc:b0:b3:da:1d:37:97:1e:23:7d:d7:5b:fd:
         08:8e:4d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 13:44:19 2024 by rpki-client on console-fra.rpki-client.org