Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1166819-6295-3ea7-95bb-8fc4a6286fe8.roa
File:                     e1166819-6295-3ea7-95bb-8fc4a6286fe8.roa (raw, json)
Hash identifier:          XIdgqnqJ3ygl0ise/IHEgLG92k8MdEFyVc8KzvDwEsU=
Subject key identifier:   AE:BB:4F:53:ED:12:93:C2:31:94:4A:4F:BD:45:10:CF:57:A3:8C:93
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D76FE2D7D46B324593C007148
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1166819-6295-3ea7-95bb-8fc4a6286fe8.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sun 04 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        68.228.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:76:fe:2d:7d:46:b3:24:59:3c:00:71:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2027 GMT
        Subject: CN=b898ee04-faaf-4e2d-8652-733e7c703dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:09:43:ab:77:59:dd:27:84:ff:42:2a:15:eb:
                    bc:30:ac:18:fc:8d:f7:30:0f:99:70:c9:a0:54:c2:
                    45:af:01:63:ec:75:65:8d:6d:99:01:87:b8:7d:46:
                    56:3d:75:13:a1:15:a8:90:8a:68:8e:3a:2c:dd:f1:
                    6f:4e:56:35:4a:d8:df:8c:67:8b:97:27:5c:fd:c2:
                    9a:c7:d7:e9:b1:7e:b6:aa:36:bd:fa:c2:bf:03:10:
                    4d:c9:ce:d3:84:c6:9e:e8:f7:5f:f4:52:a1:2f:b1:
                    bb:d9:54:e4:1c:4b:70:8b:52:81:ec:22:cf:43:c9:
                    00:43:9c:50:c2:f4:e9:db:98:62:7d:7a:59:c9:81:
                    51:61:22:5e:7d:07:d4:6e:4f:54:ed:ac:9d:c8:97:
                    80:c4:36:1e:8d:4c:4e:75:d0:d2:b9:63:7b:74:96:
                    5e:ee:66:18:ff:54:0a:c9:df:a0:ce:96:d2:92:0b:
                    e6:cb:aa:3f:1e:0c:d2:36:ff:93:f0:41:d7:d1:ce:
                    a8:e1:7d:39:5e:74:3a:6d:eb:5f:ba:5d:2b:2c:14:
                    1a:25:aa:2f:cf:f3:fd:8a:a2:49:68:0c:d6:b5:77:
                    97:49:84:dc:ae:4e:b1:b1:86:60:c1:ae:75:a7:ef:
                    b6:71:13:76:e5:92:c4:03:88:c6:80:bc:88:58:ef:
                    bf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BB:4F:53:ED:12:93:C2:31:94:4A:4F:BD:45:10:CF:57:A3:8C:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1166819-6295-3ea7-95bb-8fc4a6286fe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.228.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:4b:05:db:fc:8c:ac:59:fd:99:39:84:38:99:37:1a:15:dc:
         c5:1e:f2:f0:69:5f:1c:05:6e:26:25:a3:4c:21:c1:33:14:52:
         d5:00:d7:7e:10:9f:3f:77:46:26:fb:a6:61:b4:31:ad:42:cf:
         90:00:40:46:a5:f5:97:0d:5a:1c:ac:95:89:82:75:a9:11:a7:
         c7:5c:e7:9d:ce:40:55:44:74:fe:d8:d1:a2:61:0f:7c:5c:0b:
         41:1e:87:a4:41:83:ef:c9:6b:42:a1:82:56:22:6c:fc:db:1a:
         07:82:7b:f1:da:85:44:19:5b:64:6c:cd:c7:07:9f:27:3c:d6:
         76:7f:37:03:c6:f6:00:0a:82:bf:82:ca:9d:40:83:a8:5c:2a:
         68:0b:bb:3b:f9:0a:45:21:ed:6e:c6:0c:8b:2c:83:52:71:56:
         6c:9f:d0:7f:78:a8:89:a6:56:16:94:c6:c8:be:d4:ea:bc:65:
         26:34:9c:90:6f:57:aa:c8:c6:97:6c:9a:13:99:37:29:1a:bf:
         53:ad:2b:cc:13:cf:15:17:5a:cb:91:99:b1:97:85:ae:cd:f3:
         84:99:bc:5e:2d:7b:eb:06:c6:35:bf:59:56:6b:5d:75:40:6c:
         09:bd:84:d2:02:39:17:ab:2a:19:c0:72:93:f5:8a:45:0d:c9:
         cd:d0:5b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 03:29:12 2024 by rpki-client on console-ams.rpki-client.org