Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20fa71ee-8b45-388b-9f58-a64afccff7cc.roa
File:                     20fa71ee-8b45-388b-9f58-a64afccff7cc.roa (raw, json)
Hash identifier:          ioaJI+e/vw0qmgOHA9ckGq4P623koP15LlKCgQsCN0M=
Subject key identifier:   67:68:41:3F:35:86:ED:13:E8:1C:C5:24:86:89:FE:39:BD:A0:C4:FC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285847E1FA0E1928B746A2C8F66CD0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20fa71ee-8b45-388b-9f58-a64afccff7cc.roa
Signing time:             Fri 15 Nov 2024 02:00:28 +0000
ROA not before:           Fri 15 Nov 2024 02:00:28 +0000
ROA not after:            Thu 13 Feb 2025 02:00:28 +0000
asID:                     22773
IP address blocks:        2001:579:1890::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:fa:0e:19:28:b7:46:a2:c8:f6:6c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Nov 15 02:00:28 2024 GMT
            Not After : Feb 13 02:00:28 2025 GMT
        Subject: CN=2710f337-0bdd-4f5f-86cd-24204410f9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c7:6b:a0:f3:ad:5d:0a:b2:40:44:13:b7:51:
                    6f:0d:9c:03:4c:a5:2e:57:c8:73:e5:cb:4b:36:1d:
                    4d:d3:3c:54:c8:e7:67:08:11:b6:02:f9:e8:c0:0b:
                    ca:ca:f5:17:2c:6f:bf:b0:98:00:7e:da:24:e3:d6:
                    f1:63:76:29:47:3c:65:74:7a:17:55:ec:2c:dc:86:
                    f1:b0:5a:1e:31:0d:b9:1c:a7:fe:fd:32:75:07:48:
                    76:c5:eb:b3:e8:3a:c4:c2:6f:45:51:1a:01:4c:af:
                    25:3c:45:42:4a:e5:74:79:f9:ab:c8:54:e5:ca:8a:
                    75:70:b6:f3:da:7a:43:f3:e8:18:f0:59:44:22:9f:
                    a6:9b:52:b8:57:a5:cb:d5:3c:ae:5f:91:a6:7c:8c:
                    d9:72:11:d2:f1:71:98:23:c8:3c:39:65:bf:1f:7f:
                    b4:0a:f5:86:83:d8:18:98:84:e4:6f:59:9b:36:b3:
                    2f:df:90:d7:94:87:34:2f:0a:80:46:ef:65:ce:aa:
                    7d:c1:ce:79:d7:f3:88:05:ff:5b:ea:32:ef:dd:a4:
                    26:b0:79:26:b0:6e:f6:a5:f2:3a:40:ed:48:72:4c:
                    a1:e1:44:db:1e:45:a4:f5:71:11:24:69:b0:aa:72:
                    27:d0:86:f6:e1:e5:69:2e:24:83:c6:3a:96:c4:b8:
                    81:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:68:41:3F:35:86:ED:13:E8:1C:C5:24:86:89:FE:39:BD:A0:C4:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20fa71ee-8b45-388b-9f58-a64afccff7cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:1890::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:d1:cd:b6:03:56:90:73:57:b1:b1:a0:26:55:71:88:cd:d0:
         2e:a7:4b:5d:2f:7a:1f:1f:37:bd:5f:19:5e:9c:1d:99:29:e4:
         60:77:f4:c7:f2:69:e2:91:7d:1a:e5:81:b5:fd:82:9c:29:93:
         76:e1:8e:35:46:aa:af:92:be:75:7c:2a:23:d6:b2:82:56:30:
         36:53:f1:d1:31:75:93:da:0d:a6:7f:c1:5a:01:39:bc:2e:44:
         2a:6a:8d:79:51:17:84:ba:ab:85:27:b8:d8:6f:1f:c0:75:21:
         e0:46:73:92:25:3d:96:10:24:ac:fc:a9:f2:52:41:85:e3:e6:
         b0:70:aa:80:d3:b4:8d:05:1c:3e:40:c8:fc:83:70:be:a5:0d:
         ea:3d:21:7e:19:2c:8b:29:39:0d:34:c5:4c:28:54:84:83:b7:
         1f:39:06:d6:1b:14:03:b0:22:8f:d7:6a:2e:65:01:a9:de:a4:
         74:65:d4:e1:cb:d8:75:17:d6:cb:c8:e6:f2:21:88:3c:bf:de:
         ce:81:4d:e2:59:7e:d7:be:b7:19:6c:77:21:dc:34:12:24:5f:
         cb:93:94:7a:8f:e0:7a:27:af:5d:f4:4f:f3:40:b0:92:25:58:
         ef:9c:3f:10:17:2f:47:b9:72:38:79:9c:91:9a:0f:b0:6e:b5:
         df:8f:78:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:47:31 2024 by rpki-client on console-ams.rpki-client.org