Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21f5826b-34e4-37c7-a462-bc578748a594.roa
File:                     21f5826b-34e4-37c7-a462-bc578748a594.roa (raw, json)
Hash identifier:          iB/BVcooYwzApdva5gRrykPUjpFK9nw8syMEx7c5af8=
Subject key identifier:   03:DD:FB:7B:CD:DA:70:66:F9:CD:48:17:81:B0:52:5D:87:78:FF:C7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCC36DA400541D5D64865C340
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21f5826b-34e4-37c7-a462-bc578748a594.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        2001:579:90::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:36:da:40:05:41:d5:d6:48:65:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=6c47a2b0-8fe4-4bad-ae93-23ca314ac4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:70:f1:51:10:88:78:17:a2:a7:76:43:33:8a:
                    dd:73:a5:8d:b3:1a:15:22:81:b7:fc:dc:d6:75:e5:
                    db:cc:8a:46:97:19:09:63:d1:9f:ae:b9:bf:e6:e6:
                    f1:c9:5c:9c:ff:ef:82:d4:13:de:0a:cd:27:ae:d6:
                    c9:b8:9d:61:90:74:ce:7b:dd:6e:87:4a:ad:b5:9a:
                    21:78:82:74:25:5b:6f:4b:1e:61:94:1c:ef:ff:b3:
                    cb:56:34:ea:b3:d4:6b:82:ef:5d:54:f4:9c:af:18:
                    eb:70:e1:74:49:3c:f3:6a:5a:13:84:c0:e0:8a:aa:
                    de:bc:3e:d6:d2:e6:2c:c6:68:c8:96:2e:dc:7d:94:
                    06:e5:1f:82:bf:c1:e8:69:4f:0d:d5:18:16:c6:11:
                    7c:82:cb:49:b0:6c:76:0b:f4:f1:83:68:38:fc:42:
                    08:85:bc:da:74:33:d4:38:70:0a:c7:55:61:ff:59:
                    a2:11:70:04:1f:93:f9:d7:11:6b:b9:62:62:d7:2d:
                    9a:96:45:91:20:97:f3:eb:62:77:52:15:7b:eb:df:
                    d0:65:fb:93:c1:96:29:81:b2:6d:d6:7f:bf:3c:f3:
                    33:b1:59:2f:f8:da:05:af:9b:8b:3c:ee:04:b7:e6:
                    d2:12:dc:ec:95:99:ec:6f:ff:6f:27:f9:b6:8f:1f:
                    32:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DD:FB:7B:CD:DA:70:66:F9:CD:48:17:81:B0:52:5D:87:78:FF:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21f5826b-34e4-37c7-a462-bc578748a594.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:90::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b7:77:8c:fb:5f:6f:5e:ce:94:ea:de:97:0d:b2:f0:88:20:
         b1:f1:e8:08:f1:c8:03:dc:f2:f2:0b:86:87:57:13:82:09:b1:
         7d:f2:4f:86:8b:21:97:b3:65:7e:5a:79:83:05:cd:db:39:3c:
         33:1b:2e:89:af:e3:16:56:6d:2d:83:46:8c:61:9b:68:d5:fa:
         3c:42:5e:af:e9:2d:4f:44:82:30:3f:5f:14:e5:63:96:75:e1:
         42:b8:59:c3:b5:d2:4d:ec:3e:02:a8:d6:38:f7:36:f0:06:ce:
         c5:d8:29:32:21:06:87:94:b4:bc:44:ee:99:d7:87:b1:e4:56:
         ec:0d:fb:82:d4:72:68:66:52:43:85:04:a0:43:3c:72:28:33:
         fb:34:5e:fe:41:38:1d:80:e2:45:a3:7e:49:52:46:5b:4e:fd:
         83:85:3e:b4:0f:5a:b1:f1:7e:fc:ca:f0:cf:bf:e2:97:5b:5a:
         df:ff:40:03:a9:44:0e:de:bb:12:4a:58:62:ef:84:49:c8:dc:
         ae:0c:0e:01:3c:89:0c:65:66:6b:bb:82:e8:73:98:e1:fd:0c:
         b7:4d:77:b7:75:61:28:f6:c4:5e:85:5d:23:1a:6f:72:92:64:
         45:42:d2:03:70:ad:ba:14:83:f2:19:6c:45:e4:98:78:25:83:
         15:3d:7a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:42:40 2024 by rpki-client on console-fra.rpki-client.org