Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbd4681a-4ed8-3d98-aee9-67a79a172e03.roa
File:                     bbd4681a-4ed8-3d98-aee9-67a79a172e03.roa (raw, json)
Hash identifier:          U5BoL+YgkWId9nRI00YpwQVEjFdVq0NP8V5+SeIwrhQ=
Subject key identifier:   69:CB:A9:0C:11:74:A2:E4:23:FA:02:94:73:D3:BE:06:01:F8:E8:30
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D772BEB02B1EFE4A8878D00C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbd4681a-4ed8-3d98-aee9-67a79a172e03.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sun 04 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        68.15.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:77:2b:eb:02:b1:ef:e4:a8:87:8d:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2027 GMT
        Subject: CN=45f6309c-e846-46c4-a547-b1fab03d9d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bd:f6:e6:19:71:af:18:b3:c7:9b:49:2d:4f:
                    78:69:c9:f2:3e:55:78:34:eb:aa:14:8c:65:47:3c:
                    9e:a5:b4:85:9d:ef:3e:04:7d:cb:40:7f:29:bb:1a:
                    a8:35:75:61:00:d2:bb:1c:b5:0a:ea:80:84:31:d5:
                    f4:a9:f2:cf:9e:60:5d:c3:7e:f0:6e:a3:f8:09:22:
                    27:ad:92:db:c1:4b:9a:8f:8d:48:da:4c:86:37:bb:
                    0d:89:52:fe:04:ff:cf:1b:b1:dc:ba:62:e6:0d:de:
                    f8:1a:70:47:9b:5f:90:60:2c:91:8a:47:cb:58:c6:
                    81:e3:fb:e5:c5:93:84:a3:a3:b9:e4:d0:d0:ee:2b:
                    83:a7:67:53:97:e9:f4:d3:f3:73:96:8f:34:43:72:
                    6a:2d:4d:5d:b2:78:0a:08:a7:7a:ef:aa:17:90:8c:
                    65:c9:8a:85:56:9f:20:97:72:22:61:8c:2d:4f:71:
                    5e:86:07:01:9f:e0:a0:ed:c1:d5:c1:22:81:18:fa:
                    b7:d1:02:9b:4f:d6:20:8b:ee:8e:64:d4:ed:ff:6d:
                    0d:e3:2e:fb:79:f6:31:06:2f:d9:61:87:64:04:b0:
                    42:08:e3:f9:5e:1e:2b:2a:84:73:56:e6:01:35:45:
                    cc:d7:7d:01:45:ec:2f:a5:b8:ab:7c:a7:96:5f:06:
                    c6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CB:A9:0C:11:74:A2:E4:23:FA:02:94:73:D3:BE:06:01:F8:E8:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbd4681a-4ed8-3d98-aee9-67a79a172e03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.15.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ff:61:f0:5a:82:06:ac:05:44:af:8e:dc:9d:21:c8:f8:99:
         9a:69:51:98:9b:51:19:81:ea:8b:53:2b:fd:e8:0b:8d:4e:b7:
         20:2e:40:4a:a7:3a:fd:7e:8d:e8:eb:12:2e:29:5b:de:9e:37:
         6e:70:e2:20:fb:a4:41:3b:84:35:4a:04:ba:e2:8e:de:de:23:
         e8:73:cb:b3:c1:4b:e8:23:20:71:a6:69:1f:f2:55:15:b7:d2:
         9d:4c:ee:ea:67:78:6c:bf:76:83:7d:c0:86:27:4e:32:69:36:
         c7:62:2a:ac:f5:25:c8:a7:65:41:4e:04:98:85:54:b7:14:46:
         b3:e4:6b:dd:26:9b:ac:a6:3d:85:c6:7f:65:6b:88:8c:2f:cd:
         35:24:cb:f5:e1:90:26:54:fc:df:af:4b:62:b3:13:8a:4c:ea:
         07:76:7a:50:94:a3:fc:bc:79:f2:a0:4e:b4:94:44:72:9f:4e:
         fb:ef:73:2b:c0:eb:8d:65:a1:23:3d:64:0d:1d:f8:1d:e5:48:
         ab:04:3f:79:e7:e0:6d:00:49:30:af:7e:14:e5:b8:3d:5e:91:
         33:f0:96:38:0f:52:3b:56:48:88:cd:b2:08:75:d0:2b:5b:f6:
         47:1b:88:3d:39:95:a1:fd:ea:8e:5b:f3:07:e8:15:e6:67:0a:
         d8:37:d1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 15:38:23 2024 by rpki-client on console-fra.rpki-client.org