Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae832c07-fb90-3698-9ca3-1e34e45a2bba.roa
File:                     ae832c07-fb90-3698-9ca3-1e34e45a2bba.roa (raw, json)
Hash identifier:          aeh5gLF5doVJRHHGhPW4DWfh//QAK09Lg+vkLqeUMHE=
Subject key identifier:   33:2C:5F:13:97:96:A7:5C:B5:49:F4:AD:35:06:90:34:ED:6C:C0:BA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D76F8FC06DA8951581BB4DD40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae832c07-fb90-3698-9ca3-1e34e45a2bba.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sun 04 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        72.205.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:76:f8:fc:06:da:89:51:58:1b:b4:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2027 GMT
        Subject: CN=df53ab4e-a66a-48f8-8486-59774efb3d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5e:69:a6:65:fd:8e:32:75:fd:af:58:50:a7:
                    c4:49:05:01:42:e4:c8:42:9c:44:fc:f9:8e:66:6d:
                    e7:7f:c1:3c:be:42:ce:20:00:c3:63:0d:bc:1c:56:
                    f7:9b:01:8b:8b:a6:00:f0:78:08:3d:a5:0a:32:7a:
                    dc:52:2d:65:e0:46:a7:a3:26:b5:03:ef:73:d5:6a:
                    a4:8d:b9:b4:3d:3d:ee:a9:ab:a8:20:4c:d1:07:a4:
                    0a:63:b7:41:dc:0b:7b:cb:e9:c1:df:44:07:7a:c5:
                    70:48:8a:af:77:71:79:d7:2f:e2:56:a9:ee:5f:f7:
                    96:38:75:9c:d2:c3:1d:47:95:5f:38:1b:b2:2f:4c:
                    e7:85:cd:c8:f4:17:47:30:4a:ad:08:1a:05:01:44:
                    70:90:ec:4e:78:9e:83:c2:7c:cd:db:b3:61:14:b7:
                    ac:94:0c:2c:ed:f6:d8:90:30:1d:b2:d6:93:fc:ae:
                    15:48:eb:7a:67:df:45:ab:71:51:6d:85:36:7e:a6:
                    ab:74:1d:28:f7:7c:bc:06:75:12:89:0f:7b:77:77:
                    08:73:c7:65:95:89:f0:71:3a:d1:9f:cb:90:ab:52:
                    07:b6:ec:76:1c:ef:9d:ef:d7:8e:a6:92:3b:1e:66:
                    98:b5:b4:2c:47:6b:df:03:e3:eb:94:99:3f:7f:9d:
                    85:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2C:5F:13:97:96:A7:5C:B5:49:F4:AD:35:06:90:34:ED:6C:C0:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae832c07-fb90-3698-9ca3-1e34e45a2bba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.205.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:4a:a8:4e:ea:97:30:cb:36:79:99:a0:d9:99:4b:d8:a4:f2:
         ce:78:99:2c:46:b8:49:01:43:5f:66:29:78:f6:57:a5:fb:36:
         8a:cb:e5:76:51:5b:54:9b:e4:cd:ba:20:d9:54:c2:69:96:82:
         5b:cd:6e:11:77:a7:92:e0:8c:93:70:19:21:f4:e8:d3:16:da:
         68:ce:82:f3:14:13:cf:0c:12:94:12:d9:11:28:f5:a5:fb:f9:
         ec:1a:91:56:4a:13:0a:78:ad:e6:99:c2:0b:76:ed:c7:f3:4f:
         5e:b3:85:75:26:4f:fa:7f:ca:fc:fe:5f:8d:85:e8:84:ec:5a:
         8d:b0:38:5a:05:52:93:17:ed:d3:e4:e4:25:00:8b:3f:a5:2b:
         f1:1f:03:5a:43:62:c1:85:38:09:e0:a3:12:69:d3:8d:d1:af:
         62:fd:03:17:36:66:94:ae:87:c3:fe:4a:d9:66:aa:2a:52:e8:
         c3:37:39:12:3a:08:29:22:4c:38:58:ba:dc:79:45:d6:b6:55:
         7b:69:f2:8e:bd:a3:cd:68:25:7d:0c:37:fe:7e:85:d1:34:d9:
         fc:c5:6e:56:f3:37:95:9a:a1:6a:67:7c:fa:01:08:d8:ac:54:
         e1:2e:2e:72:a1:d9:3c:97:11:68:19:95:6b:37:60:d9:6d:e0:
         24:3c:15:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD12+PwG2olRWBu03UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTIyMDQwNDA0MDAwMFoXDTI3MDQwNDA0MDAwMFowLzEtMCsGA1UEAxMk
ZGY1M2FiNGUtYTY2YS00OGY4LTg0ODYtNTk3NzRlZmIzZDFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF5ppmX9jjJ1/a9YUKfESQUBQuTIQpxE/PmO
Zm3nf8E8vkLOIADDYw28HFb3mwGLi6YA8HgIPaUKMnrcUi1l4Eanoya1A+9z1Wqk
jbm0PT3uqauoIEzRB6QKY7dB3At7y+nB30QHesVwSIqvd3F51y/iVqnuX/eWOHWc
0sMdR5VfOBuyL0znhc3I9BdHMEqtCBoFAURwkOxOeJ6DwnzN27NhFLeslAws7fbY
kDAdstaT/K4VSOt6Z99Fq3FRbYU2fqardB0o93y8BnUSiQ97d3cIc8dllYnwcTrR
n8uQq1IHtux2HO+d79eOppI7HmaYtbQsR2vfA+PrlJk/f52FEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMsXxOXlqdctUn0rTUGkDTtbMC6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWU4MzJjMDctZmI5MC0z
Njk4LTljYTMtMWUzNGU0NWEyYmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSM2gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJKqE7qlzDLNnmZoNmZS9ik8s54mSxGuEkBQ19mKXj2V6X7NorL5XZR
W1Sb5M26INlUwmmWglvNbhF3p5LgjJNwGSH06NMW2mjOgvMUE88MEpQS2REo9aX7
+ewakVZKEwp4reaZwgt27cfzT16zhXUmT/p/yvz+X42F6ITsWo2wOFoFUpMX7dPk
5CUAiz+lK/EfA1pDYsGFOAngoxJp043Rr2L9Axc2ZpSuh8P+StlmqipS6MM3ORI6
CCkiTDhYutx5Rda2VXtp8o69o81oJX0MN/5+hdE02fzFblbzN5WaoWpnfPoBCNis
VOEuLnKh2TyXEWgZlWs3YNlt4CQ8FbI=
-----END CERTIFICATE-----
Generated at Fri Apr 19 02:43:31 2024 by rpki-client on console-fra.rpki-client.org