Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b0ed3ae5-ad6a-3331-8836-31bf00c62024.roa
File:                     b0ed3ae5-ad6a-3331-8836-31bf00c62024.roa (raw, json)
Hash identifier:          VKCj0+skuFxfC6GbWFncwycZzgywI2fcaMiIuBzU//g=
Subject key identifier:   BF:C9:A9:59:CD:B8:F4:CA:46:2A:D9:0C:DE:65:B3:4E:2C:E7:36:80
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCC36C2C98C9CFA0F5A643B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b0ed3ae5-ad6a-3331-8836-31bf00c62024.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     33438
IP address blocks:        2001:57a:500::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:36:c2:c9:8c:9c:fa:0f:5a:64:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=de5ced31-7829-497f-8e5a-350c1990888e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:48:1c:29:cd:83:9d:7a:67:73:91:d2:77:67:
                    0d:17:a7:50:7b:6f:54:a1:7d:34:38:bd:ff:08:58:
                    5d:d9:ce:a7:5b:96:b2:6e:fb:af:a0:30:4a:bf:aa:
                    af:d1:3c:e4:b0:63:0f:df:dd:46:a9:4f:a5:b7:4f:
                    8f:ed:53:9f:36:c6:2c:2f:f6:f2:52:c8:c9:0b:72:
                    49:2c:b1:5a:db:d5:57:e6:0e:82:88:43:6f:ca:84:
                    f3:ae:5d:1f:ca:49:aa:5b:f7:27:4f:cd:55:e3:5f:
                    a5:d5:a4:9e:68:6b:8f:61:0d:b1:73:1a:04:5e:8d:
                    7b:22:39:e7:fc:f4:1f:5a:e4:d5:fb:66:96:5d:1b:
                    aa:8f:27:b5:90:3f:36:8b:27:f6:ff:93:e7:df:23:
                    2e:7a:04:8d:6f:10:29:c6:a6:52:40:af:fc:0f:85:
                    82:fa:2d:84:52:53:50:18:c2:4f:8a:ac:c8:3f:c0:
                    80:23:67:d0:6b:e1:f5:a5:3c:da:b8:88:1b:c5:39:
                    09:22:91:e4:ac:23:eb:e8:8c:b0:ae:92:dd:9c:3c:
                    7b:f0:a6:0f:fb:71:92:85:1c:3e:97:10:eb:55:e4:
                    f3:40:b8:66:d6:50:f3:bf:0b:25:d3:f2:75:7d:60:
                    8e:2a:d4:af:94:25:64:4b:f2:bb:9f:82:81:d5:22:
                    aa:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C9:A9:59:CD:B8:F4:CA:46:2A:D9:0C:DE:65:B3:4E:2C:E7:36:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b0ed3ae5-ad6a-3331-8836-31bf00c62024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:57a:500::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:65:d4:66:cf:9d:1f:e3:e1:24:e2:08:fb:49:8f:48:d6:4a:
         77:dd:77:76:ae:da:ee:f8:26:84:b8:85:36:89:30:67:86:a4:
         fe:9b:a5:a6:ab:1d:d9:d7:bf:ad:b0:35:9d:63:dd:37:92:29:
         24:f7:2b:db:01:8d:fc:48:1e:5e:e7:2d:c7:ea:71:75:c4:4f:
         fa:30:e6:87:7c:62:c1:4e:44:5d:8a:6a:19:50:5a:81:7e:c9:
         6e:33:aa:ef:62:b6:d8:cd:3b:b5:8f:60:b3:5b:a8:2c:1a:b1:
         70:2e:2b:19:97:7e:d1:b5:34:18:7a:b5:a6:e9:b9:2c:ad:1a:
         c7:3a:06:ec:07:23:20:f8:e3:20:ad:fa:4f:36:56:b3:28:a1:
         be:e3:b5:80:cb:81:3e:cc:c8:32:82:2a:b0:3b:3d:83:50:a9:
         30:8c:b4:bc:24:74:9d:78:11:ab:14:c2:9d:eb:bf:2f:02:33:
         7c:f2:77:16:3e:bb:55:c4:3d:87:b4:49:af:59:bd:c3:40:1a:
         c9:83:10:06:8b:15:89:07:d0:7b:c8:d5:cd:04:84:48:0c:5a:
         12:e1:1b:93:23:16:f6:15:bf:f8:a0:7a:20:8c:69:bf:0f:04:
         70:f0:db:93:ef:80:c9:cc:58:ee:8a:ac:a4:4c:de:29:33:9e:
         52:0c:2e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 13:45:24 2024 by rpki-client on console-fra.rpki-client.org