Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d626a9cb-15d9-3603-82f1-c7fa2f6dc99e.roa
File:                     d626a9cb-15d9-3603-82f1-c7fa2f6dc99e.roa (raw, json)
Hash identifier:          KA/nZFDtMmV2qvfRgWOHxx5TT2TYCp032dhq3t5izYs=
Subject key identifier:   13:89:38:03:5A:5F:80:E0:B5:A9:EE:A6:8E:8E:68:E3:A7:46:90:54
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DC93DD79B72943EBCB1BABF00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d626a9cb-15d9-3603-82f1-c7fa2f6dc99e.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Tue 04 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        68.228.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c9:3d:d7:9b:72:94:3e:bc:b1:ba:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : May  4 04:00:00 2027 GMT
        Subject: CN=248af110-f244-485e-987e-d705f37ab9e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0d:37:a6:e6:be:02:ee:60:8c:cf:ef:91:15:
                    8f:80:a3:7b:ab:62:bd:ff:a0:b9:c7:e4:75:29:24:
                    a9:d9:84:52:8a:0f:c9:29:ab:de:30:e6:b2:82:53:
                    32:cf:b2:30:03:a2:dc:8d:15:2a:a1:05:ae:7d:e1:
                    90:22:d5:75:28:e0:67:46:b4:6d:bf:6d:f3:49:2f:
                    4e:b5:b9:e1:c7:0d:53:0c:ac:cc:8d:34:41:b0:b2:
                    e0:d3:2d:36:1e:10:62:42:0d:3d:d4:42:6c:55:5d:
                    7e:02:33:9f:20:c2:91:48:49:5f:b6:23:9e:15:74:
                    b2:83:32:0f:07:dd:c6:ab:a3:1d:e7:7b:e8:e4:c9:
                    84:e0:50:a5:56:f8:24:14:58:1f:ca:e1:1d:81:21:
                    0a:3d:c4:e8:2b:6d:b4:a0:bd:f3:0a:da:95:f2:ff:
                    af:6a:a0:33:5f:69:c4:c6:71:30:ab:ba:14:d8:8f:
                    cc:8e:b5:eb:37:7e:7c:0c:2b:a3:b8:3e:96:fc:7b:
                    ca:e0:50:c1:7d:7c:40:da:cb:aa:66:49:58:76:57:
                    1b:d3:85:90:06:8d:cd:5e:ec:b4:59:44:e5:3d:f1:
                    b8:b0:1e:20:63:be:d8:05:41:36:c4:70:d9:6a:4a:
                    1d:df:1d:96:8d:c7:df:09:d0:55:e0:11:a2:a7:36:
                    58:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:89:38:03:5A:5F:80:E0:B5:A9:EE:A6:8E:8E:68:E3:A7:46:90:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d626a9cb-15d9-3603-82f1-c7fa2f6dc99e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.228.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:65:3c:43:6a:f9:71:cd:b7:83:cd:95:78:81:66:2c:73:c3:
         27:69:ae:c6:e4:4b:61:35:81:d0:e3:a8:fc:f8:d5:16:eb:cf:
         d1:3c:f6:35:9c:09:09:9b:bc:87:81:48:5c:f2:9b:8c:17:87:
         b4:94:e3:9c:76:07:53:8a:bf:00:44:fa:8d:18:96:10:db:4b:
         6c:66:6e:56:64:45:bc:8a:b0:be:66:9f:cf:8a:73:62:ce:cc:
         65:c9:12:43:ce:4d:f7:06:f2:81:1c:20:83:fb:3c:0e:f5:93:
         c4:06:60:ae:24:50:92:8c:15:1a:c4:bc:12:c8:43:a9:7e:c1:
         c8:32:a1:1e:13:c5:02:be:64:b1:b1:b1:0b:34:d5:54:0f:6d:
         59:f0:e7:78:71:15:6b:cb:82:84:1e:82:09:c0:14:eb:ab:2f:
         78:12:3f:5f:93:11:ab:55:95:3a:05:a8:9e:ea:50:31:5f:4a:
         21:68:0e:1f:2a:2b:55:d2:29:08:98:5b:02:87:0a:2e:75:f3:
         d8:62:58:50:a9:b0:b5:63:a9:c5:f4:0b:67:34:b7:7e:f8:04:
         a3:cb:63:90:3d:0a:c8:50:a6:4a:70:aa:89:0d:3c:e6:28:1d:
         e0:5e:8c:47:1f:7e:e4:71:a5:b0:37:c8:1c:47:39:4f:37:1a:
         e1:d2:f0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:10 2024 by rpki-client on console-ams.rpki-client.org