Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb82bf8f-9108-3e66-8260-ffe750846431.roa
File:                     bb82bf8f-9108-3e66-8260-ffe750846431.roa (raw, json)
Hash identifier:          0XcLx/qIhd6WYNsizRVqWrb0DjcD2sPRKEd+qO20jLY=
Subject key identifier:   76:BF:FA:AD:7F:BB:5C:FF:38:AE:11:9D:8C:18:0B:1A:B8:20:89:F0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DC93DCA5F46D99C5747CD00C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb82bf8f-9108-3e66-8260-ffe750846431.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Tue 04 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        68.228.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c9:3d:ca:5f:46:d9:9c:57:47:cd:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : May  4 04:00:00 2027 GMT
        Subject: CN=feda8fb6-5096-406b-9fe2-8c872e603e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:2f:45:49:8d:7b:10:4b:fe:60:61:6e:4d:
                    5a:b6:50:be:33:6e:f7:c2:02:65:ea:bf:cd:3f:58:
                    ed:1f:56:12:22:f9:02:5e:84:23:55:11:3d:e4:d4:
                    21:23:76:10:4b:54:61:76:60:d4:df:44:36:68:93:
                    38:f7:ae:23:1d:c6:15:aa:64:e6:35:fa:84:cd:72:
                    df:ef:41:7f:01:f7:2d:71:1e:0e:85:3f:9a:71:a8:
                    1a:ce:e1:61:a7:8c:84:0a:2a:87:43:c6:29:ce:f3:
                    11:db:c6:e0:e5:5a:16:04:06:80:01:64:7a:40:d8:
                    f0:bb:a9:55:d3:39:43:2b:b9:44:a9:d6:46:be:83:
                    42:2c:e5:73:ad:48:c0:63:59:4c:7e:0e:36:3c:b7:
                    e1:00:c1:f2:93:a2:eb:2d:30:28:0e:ec:84:13:13:
                    7f:e5:0e:2d:00:d1:c8:fb:66:61:69:48:70:79:7c:
                    64:18:99:f8:12:54:4d:b8:46:7d:c0:25:85:c8:86:
                    b3:b0:aa:46:79:3e:25:33:ee:1c:d7:97:2f:b7:a9:
                    e0:56:db:9f:01:0a:58:39:e3:c2:00:38:50:cf:2e:
                    57:e3:e8:fc:80:dc:ec:f1:e9:ac:d7:78:a3:98:ed:
                    5d:58:dc:da:1c:e0:e4:d5:c7:e1:93:66:f2:63:ec:
                    63:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BF:FA:AD:7F:BB:5C:FF:38:AE:11:9D:8C:18:0B:1A:B8:20:89:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb82bf8f-9108-3e66-8260-ffe750846431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.228.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:1a:fa:01:58:dd:6e:4e:73:05:da:7b:07:a0:83:0b:14:1b:
         a4:9f:be:e4:06:68:e3:b8:60:cb:81:2f:00:f4:fc:d8:b0:b1:
         0e:19:1a:07:72:bd:e1:7f:13:29:23:4e:61:60:fa:6a:82:3b:
         8e:ab:62:16:43:5c:ff:1f:47:27:f5:b8:dc:31:76:e9:87:d5:
         84:9f:0e:fb:56:ec:7d:89:fe:fa:a4:85:c1:8e:0c:eb:a8:f7:
         28:16:37:64:55:87:05:c4:31:25:50:f1:da:f1:d4:41:d4:be:
         c2:7a:c6:63:0b:27:47:e2:be:11:f6:3f:e3:43:45:a7:b0:44:
         af:5f:e6:38:5d:b2:81:4f:10:59:bd:b9:e2:01:37:ec:48:e8:
         80:83:55:b0:e3:76:ff:7f:cc:9e:8b:74:45:4e:e0:69:60:4c:
         24:a4:fb:f5:14:91:16:e3:c2:54:b9:78:06:54:37:52:3a:13:
         8d:b5:c3:8b:fa:46:96:ac:ef:a8:8f:db:44:03:c3:bb:25:23:
         99:4b:9c:9c:d6:d5:fc:5c:f1:cc:f8:1c:66:a8:26:1c:bd:0b:
         e1:f1:05:46:9b:a5:ae:fa:3c:58:e1:36:2b:cd:78:53:1e:ec:
         65:a0:d0:8c:08:9b:4a:8e:a0:ba:9c:c9:94:77:62:b7:8e:ef:
         12:e2:af:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3JPcpfRtmcV0fNAMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTIyMDUwMzEyMDAwMFoXDTI3MDUwNDA0MDAwMFowLzEtMCsGA1UEAxMk
ZmVkYThmYjYtNTA5Ni00MDZiLTlmZTItOGM4NzJlNjAzZTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX8vRUmNexBL/mBhbk1atlC+M273wgJl6r/N
P1jtH1YSIvkCXoQjVRE95NQhI3YQS1RhdmDU30Q2aJM4964jHcYVqmTmNfqEzXLf
70F/AfctcR4OhT+acagazuFhp4yECiqHQ8YpzvMR28bg5VoWBAaAAWR6QNjwu6lV
0zlDK7lEqdZGvoNCLOVzrUjAY1lMfg42PLfhAMHyk6LrLTAoDuyEExN/5Q4tANHI
+2ZhaUhweXxkGJn4ElRNuEZ9wCWFyIazsKpGeT4lM+4c15cvt6ngVtufAQpYOePC
ADhQzy5X4+j8gNzs8ems13ijmO1dWNzaHODk1cfhk2byY+xjKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHa/+q1/u1z/OK4RnYwYCxq4IInwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmI4MmJmOGYtOTEwOC0z
ZTY2LTgyNjAtZmZlNzUwODQ2NDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROQIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0a+gFY3W5OcwXaeweggwsUG6SfvuQGaOO4YMuBLwD0/NiwsQ4ZGgdy
veF/EykjTmFg+mqCO46rYhZDXP8fRyf1uNwxdumH1YSfDvtW7H2J/vqkhcGODOuo
9ygWN2RVhwXEMSVQ8drx1EHUvsJ6xmMLJ0fivhH2P+NDRaewRK9f5jhdsoFPEFm9
ueIBN+xI6ICDVbDjdv9/zJ6LdEVO4GlgTCSk+/UUkRbjwlS5eAZUN1I6E421w4v6
Rpas76iP20QDw7slI5lLnJzW1fxc8cz4HGaoJhy9C+HxBUabpa76PFjhNivNeFMe
7GWg0IwIm0qOoLqcyZR3YreO7xLir08=
-----END CERTIFICATE-----
Generated at Wed Apr 24 08:36:36 2024 by rpki-client on console-fra.rpki-client.org