Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb6c9c47-85f7-32a3-a277-3847fade63ab.roa
File:                     fb6c9c47-85f7-32a3-a277-3847fade63ab.roa (raw, json)
Hash identifier:          iygqMfPgLzS5iTetE7/wSTZCyL9+weoGwRRXokHmEuA=
Subject key identifier:   4C:8A:40:84:AA:D9:72:2E:7A:56:05:A4:75:F7:F0:AE:7D:6C:0C:AA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D76F587B5A523557DBBC31500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb6c9c47-85f7-32a3-a277-3847fade63ab.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sun 04 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        174.76.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:76:f5:87:b5:a5:23:55:7d:bb:c3:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2027 GMT
        Subject: CN=7874caa9-3989-4e38-8c25-b5da1407b819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:9f:cc:ad:a0:f6:ed:99:83:fb:f8:6c:2c:
                    b0:d4:d9:9a:4c:d9:60:3b:63:c8:e8:1d:f5:d2:1c:
                    f1:7e:fd:46:be:dd:f0:4d:da:80:8c:a4:c5:c5:84:
                    93:e4:b3:fb:3f:02:b2:a7:c9:bc:d4:20:63:98:54:
                    6c:d1:50:7c:7b:69:17:b6:f0:c4:73:38:a3:38:58:
                    c6:33:78:4f:a1:67:5f:2c:a4:51:49:19:00:a8:d3:
                    76:73:71:65:f2:df:5e:5f:d0:b2:66:73:5d:07:bf:
                    f9:88:1f:4c:86:09:0b:51:f6:56:0a:98:f8:50:6b:
                    65:00:d3:f6:00:b6:8c:e2:7a:b4:56:2b:f8:c9:10:
                    32:a2:5d:bd:0a:62:99:0d:cd:e2:01:f0:c5:ee:2f:
                    8f:87:e3:34:36:6a:db:c6:20:27:da:e0:0b:e0:12:
                    e1:62:ed:fe:cb:af:d5:88:fc:d8:09:27:92:ec:3c:
                    82:22:ef:3f:78:8d:5e:0f:61:7b:2b:4a:11:a9:9c:
                    a8:67:80:a4:6a:e9:1f:12:04:ae:f5:ca:98:d2:98:
                    0e:53:f3:80:4a:eb:cf:65:e4:bd:2e:ef:43:0a:e1:
                    64:0b:db:c6:94:e1:94:2b:de:d0:81:c0:a3:55:ad:
                    5f:e8:ce:84:dc:f5:01:b0:d0:c7:8a:7a:f7:3e:08:
                    f5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8A:40:84:AA:D9:72:2E:7A:56:05:A4:75:F7:F0:AE:7D:6C:0C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb6c9c47-85f7-32a3-a277-3847fade63ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.76.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:18:3a:32:16:5b:0e:6e:34:32:d9:bb:f3:84:31:fb:95:fa:
         8d:33:a5:81:06:98:1c:df:98:87:be:72:84:cb:60:f2:a7:f6:
         70:03:8b:de:f6:ac:97:d4:4e:88:84:34:e4:7e:58:d4:36:c3:
         21:b7:9a:72:23:6a:45:7f:a9:16:5d:a4:59:63:33:bb:aa:54:
         db:cf:52:01:56:b2:ce:2e:84:b4:02:94:5c:54:16:2b:fe:7b:
         c5:e6:f4:e9:73:29:f1:aa:36:0c:69:91:eb:7c:42:3f:1a:e5:
         a3:00:cb:f2:be:de:de:ac:05:a5:81:5c:46:ce:fd:6b:2f:69:
         50:c4:5b:d5:97:ea:1d:d9:55:cc:eb:c2:47:b7:9e:c6:60:da:
         42:82:8b:33:41:71:69:9d:58:83:98:98:f6:be:3a:9a:00:23:
         89:2b:01:30:7f:23:55:27:66:84:87:d9:ae:4f:99:94:4a:f8:
         6d:a2:90:67:4c:7b:f4:2f:40:c7:8d:63:6a:37:a3:94:98:e3:
         34:4f:47:4f:cf:3c:46:d0:3c:e3:de:7c:ce:93:ac:78:90:ac:
         54:f2:2b:bb:2f:8d:08:18:27:29:14:3c:c2:69:35:95:12:03:
         cd:74:0c:02:79:b5:fb:66:39:ac:f8:28:0c:84:19:1f:5b:5e:
         a2:27:46:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:58:51 2024 by rpki-client on console-ams.rpki-client.org