Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b421e377-4ff5-3457-9c41-94e2f3fc96ef.roa
File:                     b421e377-4ff5-3457-9c41-94e2f3fc96ef.roa (raw, json)
Hash identifier:          b/TtgryIvUohB+4FFnBjEIMhrJoYV53rtC7i/IceaQg=
Subject key identifier:   93:FB:FE:77:E8:35:02:15:F0:1E:38:21:03:36:C1:74:02:33:A7:29
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DC93CE611C1F3EA484250CF80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b421e377-4ff5-3457-9c41-94e2f3fc96ef.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Tue 04 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        70.165.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c9:3c:e6:11:c1:f3:ea:48:42:50:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : May  4 04:00:00 2027 GMT
        Subject: CN=8c3ce931-f186-419a-bee0-45aae0eaca0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e0:66:01:bf:69:5d:6b:c8:4b:b3:e4:2f:cc:
                    b3:cc:a1:48:ca:2a:27:14:92:c2:40:51:42:18:ef:
                    04:8d:91:fe:d0:79:5c:bd:ba:5a:8b:14:c2:13:25:
                    17:2d:72:3d:14:b3:bb:f6:47:01:a2:5f:78:75:df:
                    a1:9a:8b:3a:6b:c7:07:50:63:3b:e5:1a:7e:9f:fb:
                    4b:de:fc:f7:b9:c1:42:81:8c:6a:e1:23:d2:e5:ed:
                    8a:ce:45:c0:64:af:86:c5:e7:45:55:a0:92:58:8a:
                    11:45:69:ee:0c:66:ee:f7:95:6e:0a:98:85:fb:60:
                    0b:08:38:5e:d5:5c:34:e3:30:1b:74:d3:9f:0a:d2:
                    ce:2a:a9:0c:ca:c3:7f:66:d6:4a:f9:48:5e:d4:5a:
                    8c:ef:7d:88:87:15:ae:c5:b1:5e:33:ce:ee:2e:5e:
                    91:df:4d:c7:30:91:67:b7:02:16:4e:56:bf:bb:32:
                    92:49:8a:d8:a7:55:10:86:36:b6:cd:e3:39:3c:2a:
                    a3:d7:f1:d7:1e:92:1e:91:81:44:69:80:0e:26:de:
                    e6:2e:d8:0d:a0:b6:46:a6:a3:dd:d1:dd:af:c7:bc:
                    11:b3:95:e7:1a:cc:f5:fc:d0:f6:e3:13:ab:84:75:
                    bf:e3:14:77:f4:da:13:94:77:58:84:56:16:ec:a8:
                    a8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FB:FE:77:E8:35:02:15:F0:1E:38:21:03:36:C1:74:02:33:A7:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b421e377-4ff5-3457-9c41-94e2f3fc96ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.165.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:91:e7:ef:a4:39:2c:ed:66:6d:23:4c:61:8c:f8:bc:c1:4f:
         3a:47:b1:7d:52:5f:d6:70:db:91:36:48:73:ba:ad:71:56:f7:
         98:c9:aa:ac:47:94:23:bb:08:7b:36:31:ee:9a:5f:da:f9:59:
         67:28:7c:5a:4d:c3:ac:40:6d:d2:b9:88:44:ad:61:cf:02:9a:
         e4:31:fb:34:19:47:dc:43:99:3e:37:c4:aa:39:83:db:44:a1:
         a9:68:8d:e4:a9:bf:30:64:35:f4:bf:c6:7f:0a:b0:2c:07:76:
         b3:c1:57:79:d0:c4:be:77:23:05:0c:44:a4:26:16:68:cc:1b:
         c5:73:1a:0a:ba:00:a8:65:dc:d6:49:c0:a0:eb:98:e0:b5:97:
         64:10:41:17:5a:a1:3f:d0:dd:2e:97:5f:47:86:d0:30:b2:12:
         5a:97:b3:fa:12:a0:bc:82:b7:4b:b9:25:d4:57:4d:29:47:e3:
         ce:df:36:bb:02:ed:4e:23:b1:4f:31:1f:4e:88:bd:19:0f:4c:
         83:01:a7:da:70:30:63:a5:eb:41:20:78:49:8e:10:2c:b8:98:
         70:d9:4a:6c:6b:38:8d:05:5e:3e:07:37:39:e9:d3:38:90:fe:
         bc:61:9e:d9:49:6e:20:27:6f:48:b1:5a:c7:2b:38:67:64:c3:
         44:37:7c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:11 2024 by rpki-client on console-fra.rpki-client.org