Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5f254149-7e9c-3cc6-aaa8-a3a978da5ec0.roa
File:                     5f254149-7e9c-3cc6-aaa8-a3a978da5ec0.roa (raw, json)
Hash identifier:          iA1XYh5BpVRTzYEk6Fbj64mBsDn1DiDvDBhm3xgFLCs=
Subject key identifier:   85:48:9E:02:9F:C2:A4:FE:0A:D7:56:91:BD:1A:CD:79:04:24:05:CB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCC28F610A2087AC7AF16D100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5f254149-7e9c-3cc6-aaa8-a3a978da5ec0.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        2600:8807:aaee::/47 maxlen: 47

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:28:f6:10:a2:08:7a:c7:af:16:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=57e62fec-f0af-4b88-939b-6e85df9c9a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:b5:c2:6c:61:49:85:4f:c3:b1:b4:5d:30:
                    14:8c:d1:dc:78:c3:04:bd:80:53:4f:76:aa:a9:06:
                    c6:3a:88:91:54:3c:6b:5e:e9:f5:95:ad:ad:25:de:
                    82:ae:29:57:f3:c3:81:0c:a9:e3:cc:f2:87:9a:c3:
                    fb:1f:31:6a:a6:69:b0:53:34:26:8f:d7:df:7e:e5:
                    bb:96:24:3f:00:f3:81:92:e5:42:67:3e:b3:23:d8:
                    e2:29:1a:63:31:7b:90:f3:9a:e6:f2:69:0c:77:0c:
                    37:54:1d:23:23:31:b5:53:06:84:9e:f9:3f:bb:38:
                    55:3b:05:ba:9c:ae:64:07:6d:db:f8:f6:01:cb:b2:
                    8b:5f:32:83:59:ea:40:6c:47:c7:d9:b1:f4:41:1e:
                    3d:bf:5f:0a:1b:aa:52:db:69:e9:23:f6:51:e6:6c:
                    b3:d9:b7:50:68:f7:c7:bb:c0:9e:63:38:f0:70:ad:
                    e3:f8:fd:12:15:50:04:d8:a2:b4:36:4c:e5:79:58:
                    ed:e9:06:fc:6d:5f:62:a7:27:aa:a5:36:52:37:e8:
                    ec:87:b6:b7:2b:ac:ec:fb:1b:2b:89:28:e4:15:e7:
                    7c:3b:87:eb:7d:57:c0:09:65:f1:97:a2:1c:d8:f3:
                    6d:93:a9:12:47:b4:89:29:98:43:e3:39:8e:c4:91:
                    4d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:48:9E:02:9F:C2:A4:FE:0A:D7:56:91:BD:1A:CD:79:04:24:05:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5f254149-7e9c-3cc6-aaa8-a3a978da5ec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8807:aaee::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:3f:4e:ed:1b:8b:7d:f9:de:91:22:ea:4e:40:37:8a:ff:19:
         2e:ab:10:8c:ae:22:5d:91:7b:24:52:2a:da:80:f9:60:af:21:
         45:d6:48:2a:a1:37:e8:fa:fe:4a:78:47:37:04:8e:2b:91:7f:
         4e:af:0a:db:a8:7b:83:31:77:bb:f7:45:3c:38:42:a8:ce:92:
         15:f9:20:fa:54:c1:09:1d:ac:67:cc:a4:29:cf:20:5b:16:78:
         57:ae:dd:4a:e0:f7:5c:de:5c:48:5d:07:f1:86:8a:28:5e:ad:
         42:a1:b1:2b:84:bf:5b:2d:62:72:3d:2d:a3:54:ba:36:3a:5c:
         8f:dd:d7:32:e1:97:86:ba:1a:e9:b8:13:83:09:1e:18:ae:30:
         25:ae:d3:93:cb:07:36:4c:f4:18:58:3d:6c:7e:22:2c:95:41:
         de:a7:9c:b4:a9:46:58:30:c1:39:ee:43:4f:a1:4b:c9:8c:1b:
         4a:88:bb:38:cb:fc:1e:a7:a7:4e:ca:d6:c8:b1:93:0c:ae:5e:
         32:31:1f:be:2a:e1:b5:06:9b:ba:2c:70:fd:f4:b2:3d:5f:f5:
         6a:f0:9d:67:dc:57:51:60:19:09:b5:6b:50:21:59:91:96:6f:
         c3:70:5b:3c:46:45:34:4f:a1:50:e8:78:38:56:3f:ba:9d:d3:
         62:a6:0c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 17:57:57 2024 by rpki-client on console-fra.rpki-client.org