Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f18e75c8-0af2-32d5-afd5-65330468953a.roa
File:                     f18e75c8-0af2-32d5-afd5-65330468953a.roa (raw, json)
Hash identifier:          iX4d3M/ozqH9AXGfOgAwKTGno6duIk6ho8aKi2OzLOQ=
Subject key identifier:   44:6D:FA:4F:66:5F:AA:86:D0:95:B6:0E:4D:9D:32:66:02:C7:4E:27
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DC93CEFD2A719C3510529AE40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f18e75c8-0af2-32d5-afd5-65330468953a.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Tue 04 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        70.182.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c9:3c:ef:d2:a7:19:c3:51:05:29:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : May  4 04:00:00 2027 GMT
        Subject: CN=5768a56e-00e0-4884-8f75-6ce7624467b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1a:8e:ea:33:d6:d2:1d:f5:71:79:96:7a:6f:
                    fd:b1:5b:40:40:39:dd:67:b0:50:2e:d8:f1:a5:42:
                    ec:b2:97:62:1c:6f:26:ec:27:b9:63:9f:ec:1e:4b:
                    7e:58:d2:12:fc:b7:35:81:fb:df:71:e9:7d:a4:a3:
                    a5:8c:1f:fe:72:6f:ff:a2:b9:0a:2a:6a:9f:1d:c6:
                    41:aa:b2:0f:c2:a0:26:84:12:11:02:38:7c:fc:47:
                    3d:09:e6:82:f8:95:7f:da:72:1c:85:3d:6f:e0:3a:
                    49:4e:62:1c:6d:a0:2f:ae:08:04:5b:eb:63:45:58:
                    85:8d:9f:c0:1f:c1:e4:27:94:c3:b3:6f:fc:78:df:
                    64:f8:a9:f6:11:4c:7e:47:15:ce:8f:e1:c8:cc:ee:
                    22:02:43:88:0f:71:39:00:bd:ab:2c:3b:12:c1:8f:
                    53:89:13:a7:91:f5:ed:78:38:8a:40:04:b2:76:52:
                    76:52:62:68:a1:9b:22:21:d7:8c:b5:a5:c9:b0:6d:
                    f3:e0:f3:c9:eb:a0:2e:9e:c6:51:57:3c:59:91:cf:
                    a2:5a:27:c4:e2:a6:58:98:ee:df:8f:dd:5b:a1:7c:
                    2a:ce:78:44:56:88:56:5f:0b:59:f6:7b:d6:36:d5:
                    3b:0e:73:6d:8c:76:a1:14:16:1c:81:cc:ad:d9:de:
                    4b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6D:FA:4F:66:5F:AA:86:D0:95:B6:0E:4D:9D:32:66:02:C7:4E:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f18e75c8-0af2-32d5-afd5-65330468953a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.182.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:c7:a6:8b:f0:43:d0:f3:e7:e7:93:ee:ed:36:44:05:ec:dd:
         ed:7d:81:bb:d2:e8:cf:93:9e:2a:59:4c:0e:64:4d:7f:4e:3e:
         fd:aa:f1:ef:84:a0:b2:82:1d:a8:89:7a:c2:62:e5:24:7d:05:
         ab:a3:1d:9a:03:b4:00:89:d9:18:f4:03:07:7a:17:b9:8c:6b:
         4e:aa:cc:c1:37:72:5d:fe:e6:6e:38:40:24:93:d5:26:34:61:
         3a:8d:0b:be:24:cf:2d:3c:23:aa:e9:08:64:e8:50:3f:9b:30:
         2e:09:f0:b7:5c:7d:de:5b:d7:e0:2c:65:0c:ba:bd:ee:1a:55:
         20:49:82:b4:ed:d5:42:15:4a:5e:79:76:04:5a:0d:af:bb:fc:
         61:c2:4a:6a:8e:e4:8f:19:19:cb:2a:35:55:02:ce:19:2f:e7:
         5a:d3:f9:13:61:10:df:ab:f3:c4:cd:fe:f4:19:22:1a:f6:2b:
         54:5a:4e:1c:32:73:b3:75:71:02:d7:2b:42:c3:bf:47:66:7e:
         33:e0:b0:0a:ce:eb:6d:a1:4c:c0:31:3c:2f:03:ce:a1:7b:6f:
         8f:50:38:54:8e:e4:c8:1e:3f:0b:25:96:b8:af:1b:82:2d:a6:
         4b:38:95:b4:5a:b9:19:cb:8a:fd:ff:b9:b9:d9:f9:0e:a4:ff:
         5e:08:c7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:59 2024 by rpki-client on console-fra.rpki-client.org