Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2084cc5f-1fef-32e9-8546-8a9aa1e77432.roa
File:                     2084cc5f-1fef-32e9-8546-8a9aa1e77432.roa (raw, json)
Hash identifier:          7lHJfsOTtneBoMd+gi6iTI/tdxc+6sekxKnRLjN0fUA=
Subject key identifier:   70:68:1B:61:E0:BE:77:DD:00:4C:64:E1:E7:C6:80:90:26:0D:04:1B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858474DE616BAC9A6B1754C40E500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2084cc5f-1fef-32e9-8546-8a9aa1e77432.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     22773
IP address blocks:        2001:57a:b800::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e6:16:ba:c9:a6:b1:75:4c:40:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=18bd5a16-58af-4c49-bf28-1b7746bf763f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f8:62:bc:24:9d:8a:ac:b4:0e:c2:c7:5f:15:
                    8d:4e:f8:03:a7:4f:7b:93:4e:2a:10:73:3b:6e:da:
                    c9:57:00:3d:5a:7c:6f:6a:2f:ce:c6:12:7e:28:55:
                    ae:a0:06:59:81:32:dd:e2:7b:ae:1c:28:0b:30:9d:
                    16:a2:69:cf:af:ac:6f:32:b8:c9:db:b5:ca:09:b9:
                    ee:3a:69:41:d4:32:14:d1:cb:ec:d7:e6:4c:ee:7b:
                    24:d7:9a:67:5b:35:be:50:37:71:63:e4:a9:ca:9b:
                    e4:6d:2b:8d:84:fd:18:d1:d7:50:b3:27:24:f8:52:
                    44:f3:b9:b0:89:f2:02:e4:86:ad:3f:88:18:a4:7b:
                    03:a2:15:a3:11:8e:28:b6:d5:33:bc:2a:38:fc:e7:
                    15:b3:08:19:da:86:a1:ba:0b:12:4e:c4:72:26:bf:
                    38:2f:3e:95:aa:96:47:77:00:62:6c:2a:ff:81:1d:
                    72:53:f9:b3:74:73:10:87:4b:0b:7a:cf:70:33:0a:
                    68:16:d8:40:c9:d8:eb:bc:65:2e:48:3d:c1:69:24:
                    2b:4e:0f:4e:ff:45:ad:d6:ff:61:dd:85:da:a9:d0:
                    2b:fa:e7:13:ec:77:77:7d:c7:df:55:3a:1c:cf:2e:
                    d3:35:76:b2:5a:06:66:05:f1:4c:f1:d0:b0:5c:e7:
                    f6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:68:1B:61:E0:BE:77:DD:00:4C:64:E1:E7:C6:80:90:26:0D:04:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2084cc5f-1fef-32e9-8546-8a9aa1e77432.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:57a:b800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f5:aa:ca:e5:b5:3b:f6:fa:a4:ff:4e:83:87:81:ab:ac:ac:
         09:bc:d8:19:7b:72:22:12:8c:83:8e:3f:08:92:e8:c6:db:82:
         36:91:99:0f:fb:1a:4a:a2:71:41:62:87:14:92:31:03:93:d8:
         d5:8d:11:52:58:fa:13:6f:3c:aa:2b:45:42:92:d7:e7:7a:51:
         99:f4:49:4a:9f:bb:48:82:bc:98:fb:6e:06:2d:5e:f4:02:d4:
         be:3f:c6:3a:dd:59:67:1d:bc:28:f0:ca:db:cf:91:53:7e:e7:
         78:ab:a8:cd:0f:f3:43:6a:3e:e4:d8:3e:73:61:ad:97:63:a7:
         ea:b1:e2:90:43:41:67:9f:e2:40:f8:0c:c4:96:4b:46:b2:1d:
         06:03:64:5a:0f:f8:f5:0c:16:20:aa:26:d8:36:45:47:75:d7:
         2e:f1:f9:33:18:b9:12:f9:e2:75:fb:12:4c:b6:87:b3:06:32:
         7f:41:b9:ad:d8:0a:ea:54:6e:f6:6a:91:b0:aa:29:47:cc:3a:
         ef:ad:fd:21:f9:cc:7f:75:c5:88:43:f7:3f:32:17:72:18:0b:
         5a:31:a5:2a:bc:16:9d:a3:da:c9:2d:e7:cc:c8:7b:00:63:c0:
         76:e0:9f:6a:8e:17:f6:76:25:d8:a2:89:78:bc:49:9a:2a:b8:
         53:d6:24:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:39 2024 by rpki-client on console-fra.rpki-client.org