Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af5d9517-5ce4-3d16-9723-6ff399f394e5.roa
File:                     af5d9517-5ce4-3d16-9723-6ff399f394e5.roa (raw, json)
Hash identifier:          KXqLc6xsJQ9Qyj3MlvxxstwnCZoqevP5IHF5ypqN+BQ=
Subject key identifier:   B1:EF:11:16:54:EB:66:AE:05:B9:E3:0D:D4:69:D4:11:DC:A5:2E:B1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583D7728A8BE12805E8F30BB2300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af5d9517-5ce4-3d16-9723-6ff399f394e5.roa
Signing time:             Mon 04 Apr 2022 04:00:00 +0000
ROA not before:           Mon 04 Apr 2022 04:00:00 +0000
ROA not after:            Sun 04 Apr 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        2600:8808:2400::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:77:28:a8:be:12:80:5e:8f:30:bb:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  4 04:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2027 GMT
        Subject: CN=a9b1581e-4660-470f-a9e6-d234025d52a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:47:00:e8:aa:24:0a:6a:7b:a1:c0:01:01:ff:
                    4f:8b:4d:e8:60:78:22:6f:1a:e7:46:26:f0:5f:ca:
                    28:b9:64:28:23:c4:fb:ab:8e:b8:d4:d6:ee:d7:69:
                    7d:dc:56:de:ef:ab:6c:37:d9:38:e7:c3:8e:06:31:
                    8a:f1:52:ed:67:95:84:ec:ed:56:39:56:53:5c:d6:
                    72:cd:88:b4:d6:0f:06:c2:d9:2b:64:e5:15:7d:19:
                    62:f0:72:4a:5c:8b:cd:a0:ec:95:cf:1a:de:e5:48:
                    2f:10:d1:d8:a9:91:09:ce:53:c4:8d:ba:d7:7e:60:
                    4a:6e:7c:c8:d7:e1:49:1e:22:6a:d8:69:09:91:b5:
                    7d:87:a5:08:c1:51:99:df:31:38:c7:d6:5b:16:84:
                    44:55:dc:85:3c:41:9d:5b:ae:a6:ab:01:67:99:2d:
                    5a:3a:5d:9e:27:03:9e:0f:a3:4d:e3:3b:ee:d8:78:
                    79:43:55:d5:fa:6c:2f:ad:80:6c:4d:48:c1:2b:6d:
                    21:81:e4:be:59:ed:10:ff:6f:1c:2c:b6:c4:43:4c:
                    18:f6:61:2b:77:52:61:37:ba:6d:1d:a5:62:48:02:
                    ab:eb:83:1c:df:6c:6a:30:b9:c9:65:a3:12:0e:42:
                    a3:3b:42:25:bb:86:74:e1:d7:9f:93:dd:cc:3d:5a:
                    45:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EF:11:16:54:EB:66:AE:05:B9:E3:0D:D4:69:D4:11:DC:A5:2E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af5d9517-5ce4-3d16-9723-6ff399f394e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8808:2400::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ad:dd:38:3b:88:30:b9:b0:cf:ef:76:e1:c1:5a:fc:51:2b:
         bd:08:7f:aa:f5:07:32:57:d3:44:fc:67:88:d7:08:0c:dc:88:
         a3:07:e1:97:71:f6:f2:24:a9:e8:5f:fb:43:5e:4a:2e:9a:8b:
         d7:94:e1:46:30:10:59:9b:0d:d9:22:30:f5:c2:cc:57:cb:c2:
         08:53:57:65:f3:55:df:c2:a8:eb:f6:15:5e:f6:17:c2:80:52:
         63:16:af:81:37:8a:9a:45:4c:af:e9:1e:37:09:23:84:79:52:
         24:4b:f5:4e:02:22:88:cc:0a:5b:99:a9:df:7d:08:31:90:ae:
         0e:de:82:96:5c:91:10:e9:c9:50:e5:f7:46:a1:80:b5:01:b1:
         1a:11:2e:d4:33:97:2f:b9:b5:b1:74:fe:dc:40:50:3d:b3:a3:
         24:0e:71:c5:d6:9e:d3:4f:5a:60:1c:e1:c1:77:7f:eb:49:5f:
         07:1a:eb:1d:e0:55:81:d3:74:a3:42:58:62:a5:4c:52:16:0a:
         2f:d6:e4:51:66:ca:24:de:ea:4d:94:ee:ee:2f:ae:7b:51:c6:
         dc:ff:48:4e:9e:27:32:f1:16:dc:30:4f:46:1e:70:ec:7d:c4:
         e3:81:f7:d8:21:36:bb:64:9e:15:4e:69:ca:50:23:82:4a:b1:
         46:05:f4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 17:58:01 2024 by rpki-client on console-fra.rpki-client.org