Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d707aba-45fc-3c7b-aa10-cb1c791a7e4b.roa
File:                     0d707aba-45fc-3c7b-aa10-cb1c791a7e4b.roa (raw, json)
Hash identifier:          NLHetfYUwrHhemGWy1MxAapKGC3m5UG4rY0EArxMO2U=
Subject key identifier:   05:DC:07:7C:BE:ED:1A:89:2C:3C:C1:A5:EB:93:48:5C:71:FD:F3:2F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858458DD33F49A7548B63648D0A30
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d707aba-45fc-3c7b-aa10-cb1c791a7e4b.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     22773
IP address blocks:        2001:579:d09c::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:3f:49:a7:54:8b:63:64:8d:0a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=05d61bca-2b8e-4397-be5b-38f693d3e15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:f8:28:81:35:7c:db:1e:2a:fc:3e:7a:02:
                    1e:cb:82:44:1e:7a:0b:02:a5:c7:60:a6:52:5d:69:
                    11:3c:5b:8d:66:e7:fa:f8:38:35:ca:44:c9:2f:45:
                    99:19:59:bd:8b:0a:8e:2f:97:90:78:14:b1:10:de:
                    7c:08:bc:82:4f:9f:9d:84:0d:37:32:65:58:24:2e:
                    4e:c2:f8:37:7f:41:c6:72:91:92:3c:1b:ec:1b:bf:
                    7a:35:fb:71:c3:9c:c9:98:2e:0a:f7:55:64:54:56:
                    b6:3b:9b:56:39:f9:f8:5e:21:08:2b:25:52:77:05:
                    3c:74:f5:47:66:5f:3c:3d:af:c4:cb:32:2e:c5:94:
                    2e:c3:e6:c6:3a:81:83:c8:1b:2f:00:76:95:f3:e4:
                    71:42:5e:1f:62:e3:59:ca:98:43:63:35:9c:53:7c:
                    8f:e4:65:f2:9f:28:cb:dc:93:87:f9:10:e2:c6:74:
                    61:ed:1a:ea:9b:39:33:3e:93:10:98:aa:b1:cc:61:
                    aa:03:07:7d:5e:ee:ad:39:04:47:a3:a1:fa:4e:33:
                    8a:ed:88:f1:56:4e:e1:0e:9b:e4:a2:df:78:3e:86:
                    b2:cc:20:72:eb:78:e8:b4:1d:54:4b:31:99:29:53:
                    97:09:53:0b:4f:fd:39:48:fe:f3:98:76:82:d5:e2:
                    02:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DC:07:7C:BE:ED:1A:89:2C:3C:C1:A5:EB:93:48:5C:71:FD:F3:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d707aba-45fc-3c7b-aa10-cb1c791a7e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:d09c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:2c:92:e3:33:74:e0:07:69:1f:31:07:a6:da:e9:1f:c7:ab:
         6d:1f:da:8b:da:d8:4c:d8:2e:b8:25:98:64:d1:45:0a:43:16:
         30:e7:1e:f2:1e:27:02:ec:26:1d:48:0c:67:57:68:65:8a:ef:
         55:25:d6:e7:e6:51:7f:b0:b4:17:68:60:fa:d6:79:cc:84:98:
         9d:6d:e0:ba:39:b4:ce:87:46:80:03:d9:c3:08:49:fe:54:90:
         dd:12:98:b8:be:39:fa:80:55:3a:20:80:e2:64:ea:a8:82:5b:
         0b:e7:d9:c2:f8:f6:b1:3a:a2:e7:66:2b:4a:09:fa:1a:3b:3e:
         a2:ff:64:2f:f6:1e:e3:aa:a5:9e:56:ff:ba:3d:bf:cc:3b:cf:
         24:eb:36:3b:b6:c9:c0:96:e5:aa:bd:24:c1:a5:7f:57:4e:1f:
         86:8c:a3:fe:07:3d:59:16:89:45:95:c6:c6:42:05:c2:62:c3:
         60:bf:0d:3e:96:90:03:b4:8e:38:4f:31:28:be:5a:12:1e:2c:
         ce:c1:3f:e8:02:29:d0:06:a6:35:30:4e:1d:29:9c:9d:61:83:
         13:84:27:c4:9b:f3:05:27:a9:d8:2a:95:ce:94:9b:5b:24:28:
         6e:a6:c2:da:84:f8:7a:d7:f2:4e:98:d1:f7:7e:89:c5:0d:a2:
         54:f0:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:24:06 2024 by rpki-client on console-ams.rpki-client.org