Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fbe8628-0ad1-3e7f-8319-8ea130dc3049.roa
File:                     0fbe8628-0ad1-3e7f-8319-8ea130dc3049.roa (raw, json)
Hash identifier:          Gf3bolkPTi+2Ql/mjD2LDfP1OxfsYtXb6WiZjnadw0k=
Subject key identifier:   E5:DA:CE:51:B3:08:F6:8A:EB:7E:68:27:0F:28:80:40:AF:0A:6D:13
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285846A2B92DAD98985C42BFE949C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fbe8628-0ad1-3e7f-8319-8ea130dc3049.roa
Signing time:             Tue 23 Jul 2024 17:27:05 +0000
ROA not before:           Tue 23 Jul 2024 17:27:05 +0000
ROA not after:            Mon 21 Oct 2024 17:27:05 +0000
asID:                     22773
IP address blocks:        2001:579:b091::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Sep 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a2:b9:2d:ad:98:98:5c:42:bf:e9:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 23 17:27:05 2024 GMT
            Not After : Oct 21 17:27:05 2024 GMT
        Subject: CN=4fe64ab9-c06f-4fae-8972-3961ad6a655a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e3:68:65:28:1a:76:b6:f4:e0:9c:f3:8b:7f:
                    92:a7:71:c9:f4:2e:2f:9c:ff:df:49:fd:6f:12:56:
                    3d:d8:5d:74:54:ec:1c:9e:ff:35:9d:b1:bf:fe:bd:
                    7b:87:96:5e:36:f5:9e:52:f5:d8:36:7f:0b:2c:7b:
                    85:e8:0a:e3:7f:11:f6:7f:46:74:49:4a:91:13:87:
                    93:46:1f:dd:7b:19:f9:49:95:db:37:33:eb:eb:4d:
                    a8:4b:a0:d9:f5:9e:b6:b6:1f:1a:c7:2a:cf:32:f3:
                    16:05:1c:9c:8b:de:b9:8f:8e:7e:e7:7b:6a:38:40:
                    67:9d:38:7d:8a:46:08:ad:18:cc:67:df:8c:84:6d:
                    2d:8d:aa:18:9e:ee:69:ae:fe:3a:61:4c:5d:24:44:
                    57:39:6f:90:55:84:ed:9d:37:33:49:c5:1b:e3:f0:
                    e6:f8:50:ac:e3:a8:9f:9a:69:c0:6f:15:ce:af:54:
                    34:91:b2:1c:2a:21:e6:b3:01:9d:ce:ef:da:ac:09:
                    09:e5:71:47:20:a6:ba:38:67:dd:23:83:b2:1d:77:
                    58:ef:76:91:0b:63:62:4e:93:48:7c:a1:51:51:10:
                    8e:cb:29:7c:4a:b7:8a:a0:0f:e7:3d:a7:79:bd:0f:
                    74:9b:50:4d:62:5b:6e:a8:e5:67:58:ed:95:64:72:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DA:CE:51:B3:08:F6:8A:EB:7E:68:27:0F:28:80:40:AF:0A:6D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fbe8628-0ad1-3e7f-8319-8ea130dc3049.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:b091::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:6e:4b:76:7a:2c:28:9e:e7:2c:40:f5:86:0f:e2:a3:e2:7b:
         f5:4e:aa:ed:54:44:31:f3:03:0a:2b:50:4e:96:07:ea:82:ab:
         a1:3a:0f:6a:b7:42:ea:ed:5e:cf:2e:6c:b7:4a:3d:e4:fd:3d:
         be:4f:ac:23:09:73:f3:b0:70:b6:ba:4d:11:97:4b:2d:87:d3:
         b6:ac:47:8f:7a:26:1f:c4:99:00:ce:a0:8e:e5:97:17:ed:ea:
         a5:b2:0b:3c:fe:6c:04:7b:02:bb:a0:b4:c4:a2:fa:86:22:17:
         f0:5b:f7:4a:51:b4:40:31:e2:89:fd:90:43:7d:7a:b5:ea:7a:
         3a:31:8b:42:8f:f1:62:47:fe:55:ee:69:3a:a6:1f:56:bf:88:
         65:47:9e:fb:1f:e7:30:62:c5:a5:ae:a4:10:ea:ce:60:e5:38:
         af:61:3a:59:de:70:46:90:34:c8:d0:42:b2:7f:56:41:d9:01:
         1f:89:cc:7b:2d:eb:90:99:a4:6f:ae:52:a4:e5:3c:65:8c:97:
         b5:5d:1c:65:7f:e1:8d:70:50:76:f8:35:ad:05:e1:93:e4:36:
         04:89:d5:5f:25:7a:b7:fc:59:2f:ff:3a:9a:8b:cf:b0:11:1c:
         ce:d8:71:6c:d4:1b:2b:be:c0:be:b3:97:f9:7f:8d:0f:a4:e8:
         e1:c9:d9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 15:26:27 2024 by rpki-client on console-fra.rpki-client.org