Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3497fb70-babc-3dd5-8161-f825545c2ea1.roa
File:                     3497fb70-babc-3dd5-8161-f825545c2ea1.roa (raw, json)
Hash identifier:          z2Xf4iuqOsVp+8XSQEZYvqL00Yr/AJzP59qclw1gWTQ=
Subject key identifier:   2A:FD:B7:79:F2:6C:0C:0B:4A:97:68:66:54:E0:BA:3D:1C:FF:80:09
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCC371E0B6289A6B503B8EFC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3497fb70-babc-3dd5-8161-f825545c2ea1.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        2001:579:411c::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:37:1e:0b:62:89:a6:b5:03:b8:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=9c215818-674f-4d31-bcaa-c4ac9592310b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e8:d7:55:2c:d6:e5:42:b5:2c:ba:14:2b:63:
                    fa:0d:c8:c3:d2:82:04:bd:09:7c:09:2c:67:1d:aa:
                    d1:7b:57:0c:52:53:2d:11:5c:ae:de:dc:f1:64:ff:
                    7e:e0:4b:ec:e7:ef:79:8c:d4:fd:c7:0d:e8:78:45:
                    23:6b:b0:57:12:62:83:6d:6c:ca:e2:5a:18:28:63:
                    bd:36:38:04:9a:d3:33:ed:91:b0:3b:42:49:fb:bc:
                    89:2e:04:85:be:f5:77:5a:3f:ea:ca:ba:54:f6:f6:
                    b2:a2:09:62:16:fc:84:50:16:ed:e7:75:04:b4:44:
                    e2:0d:76:9a:84:7e:72:5c:1c:6c:89:ab:84:20:00:
                    3a:e4:f2:d6:4f:d3:05:03:d8:7d:b9:ae:77:52:92:
                    66:7e:d4:37:76:7c:55:72:3a:02:9d:27:78:c5:76:
                    1e:3b:dc:47:07:4f:14:25:1f:45:45:ce:67:b9:ef:
                    25:92:b1:b5:a7:93:14:70:c1:01:05:08:af:07:c2:
                    7e:da:20:a6:a2:d0:05:e7:54:55:f4:4e:0a:57:28:
                    75:af:e1:81:51:08:ba:d2:ae:fc:0a:b0:44:80:e8:
                    66:4b:39:3d:cf:71:f3:7d:cc:65:95:5e:23:06:da:
                    ee:09:35:15:8d:21:da:a3:b9:dc:0a:1c:1a:16:be:
                    a2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FD:B7:79:F2:6C:0C:0B:4A:97:68:66:54:E0:BA:3D:1C:FF:80:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3497fb70-babc-3dd5-8161-f825545c2ea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:411c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c4:5f:a6:9a:89:7d:0c:76:f7:bc:15:80:75:74:e4:71:eb:
         f2:66:52:4d:a6:7d:2e:08:6d:10:06:98:4d:0f:a5:94:0a:17:
         32:bb:92:ca:6a:a5:4a:91:14:e4:9e:84:4a:a6:fb:45:cd:6c:
         cb:bd:19:d0:40:37:79:20:46:67:57:07:06:5b:6b:e2:8d:e9:
         48:29:ad:60:64:72:be:ac:d3:9c:96:f0:0d:a9:a7:5f:16:ef:
         c4:11:48:28:ec:c5:84:ea:de:46:e0:62:5e:46:3f:f8:7b:16:
         5b:df:94:81:cb:3e:70:63:76:9c:3b:10:01:41:47:67:f5:1a:
         95:a6:76:a1:4c:ee:41:08:87:04:00:3d:bf:af:a8:22:7b:8a:
         d1:81:ac:b1:81:e7:93:6a:8f:0f:76:0e:33:69:8f:38:61:ce:
         a9:28:d3:45:f8:3a:73:2d:f1:b9:8a:80:1a:6f:ea:34:01:0f:
         22:a1:ec:d8:89:0d:10:e5:9b:42:7d:06:e8:d6:c2:1b:ea:7b:
         46:45:cf:0c:f5:80:9a:64:20:d1:fd:33:02:79:a5:5e:24:92:
         4f:d4:90:e8:3f:3a:08:79:ff:58:77:c9:3e:c1:46:61:54:1b:
         7b:11:11:f4:5f:ee:54:b4:2f:bd:77:7a:f7:a0:d4:b8:a6:25:
         e8:4b:af:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:33:59 2024 by rpki-client on console-fra.rpki-client.org