Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/220e5bec-24ce-3e05-91ac-6efc8458c602.roa
File:                     220e5bec-24ce-3e05-91ac-6efc8458c602.roa (raw, json)
Hash identifier:          UfWk5zWGei8h5iW/NKpDyUNmDD7OXRZKhgK3t0p0yvM=
Subject key identifier:   CC:F9:8C:CB:E0:46:26:76:F3:20:98:37:03:F6:72:85:CF:57:E3:03
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858474DE6155AF1952557EDF054C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/220e5bec-24ce-3e05-91ac-6efc8458c602.roa
Signing time:             Mon 23 Sep 2024 01:00:31 +0000
ROA not before:           Mon 23 Sep 2024 01:00:31 +0000
ROA not after:            Sun 22 Dec 2024 02:00:31 +0000
asID:                     22773
IP address blocks:        2001:579:c0d0::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4d:e6:15:5a:f1:95:25:57:ed:f0:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 23 01:00:31 2024 GMT
            Not After : Dec 22 02:00:31 2024 GMT
        Subject: CN=acc26ed4-f726-4284-806e-2719a6cdece6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a1:1c:8a:28:2d:4a:84:91:f9:12:15:ab:7e:
                    51:0d:0f:7e:9c:68:48:b4:c2:78:81:17:4e:f5:06:
                    79:6f:c3:da:41:c2:16:5b:15:7f:3b:b8:9b:e5:52:
                    49:48:22:1c:42:98:61:6f:84:2b:92:38:aa:bc:81:
                    55:02:d5:c2:03:53:2e:e2:a9:64:a1:16:e8:4b:3c:
                    e9:a7:65:8c:b3:d8:f3:e3:71:20:e1:35:ad:1a:72:
                    75:c7:ba:ea:b7:cc:2c:8e:66:db:0e:91:19:95:04:
                    5f:94:9b:0e:14:d1:67:62:02:65:d7:fa:4f:cf:8b:
                    7d:01:52:39:99:13:89:36:14:7f:48:d7:2e:9a:c1:
                    f8:eb:64:3b:40:e8:f0:f0:f1:c3:a8:e2:c1:e4:6f:
                    3c:c5:fd:ac:41:7d:7a:dc:41:bf:c6:5f:c1:cc:6e:
                    3e:fd:b1:95:1c:15:70:9b:b8:8a:8c:ef:73:a9:49:
                    a6:58:49:b6:a9:d3:9f:ef:7a:09:65:69:e3:10:f4:
                    7f:02:6c:b2:d0:15:e2:0e:33:14:ab:97:72:50:e1:
                    2c:60:4f:36:9c:d2:53:d2:bd:32:c0:5d:60:be:d0:
                    4f:99:07:e8:b4:28:12:be:f0:5b:0f:93:93:82:48:
                    07:93:6d:33:cc:79:2e:42:42:b4:9e:91:fb:f1:39:
                    0d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F9:8C:CB:E0:46:26:76:F3:20:98:37:03:F6:72:85:CF:57:E3:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/220e5bec-24ce-3e05-91ac-6efc8458c602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:c0d0::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:7a:66:8c:58:31:55:5c:eb:56:66:30:52:86:35:5c:99:de:
         11:ee:be:b1:b3:31:d4:38:fb:5b:e2:f9:3a:4b:14:53:b5:32:
         2e:50:13:35:98:87:0d:85:29:bf:4f:3c:61:01:5c:4a:2d:66:
         31:ac:e3:fa:6f:74:0a:42:0d:51:87:81:74:f2:3c:0c:96:83:
         4b:e5:1a:44:c4:2d:4b:7e:2b:ff:45:ff:e8:1c:5f:b3:4e:f7:
         1c:13:15:e1:8c:94:4a:69:b5:28:ce:fa:71:78:fb:69:61:04:
         5e:49:50:80:ce:a4:2a:ee:6b:3a:2d:eb:a2:65:83:bd:85:49:
         91:ba:ae:ab:3c:47:80:14:ec:b1:1f:bb:0a:54:16:c0:af:0e:
         95:b6:30:d9:18:e5:bb:5a:46:1a:bb:1e:c0:bf:f4:39:f1:c8:
         7d:96:57:08:d5:ac:26:3d:26:e1:33:d0:46:70:3e:e0:a4:0a:
         8d:10:47:62:fd:02:67:7a:8b:5b:2c:08:1f:2a:cf:04:ec:a5:
         de:8d:45:2c:3f:6a:a9:c7:51:ef:98:38:dc:73:0f:91:ce:b1:
         22:cf:be:80:b1:91:f4:21:9f:59:2e:85:43:1a:16:b5:26:d9:
         bd:86:9a:87:73:ea:bf:5a:09:93:cb:68:cb:04:17:94:da:e8:
         75:6d:46:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:48 2024 by rpki-client on console-ams.rpki-client.org