Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/528f3c00-e696-3048-a8a0-0493f68d0686.roa
File:                     528f3c00-e696-3048-a8a0-0493f68d0686.roa (raw, json)
Hash identifier:          RIDwmwnN2ikEio6zeQsMQautsHx1Q5j6sdmEDUy0j6w=
Subject key identifier:   95:E2:18:B0:18:ED:B1:90:39:62:E9:39:95:35:FE:A2:76:6B:B1:CB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCC38280B6C99A1F02059D940
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/528f3c00-e696-3048-a8a0-0493f68d0686.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        2001:579:b900::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:38:28:0b:6c:99:a1:f0:20:59:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=31c9128d-d8e8-4797-a87b-025ce23c91da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ce:90:ef:af:4d:43:5c:6e:c8:7a:bc:ba:88:
                    76:48:67:86:8c:79:6f:70:68:8a:d1:8d:55:0c:bc:
                    98:d4:cf:83:6d:7c:94:dc:26:3a:b3:c3:3d:04:79:
                    6a:33:a6:ee:31:f0:30:33:00:bd:03:ce:8a:96:1e:
                    28:d9:a9:a5:88:f8:cf:d2:4b:de:09:76:7f:00:07:
                    b4:87:09:e2:a8:48:0a:4f:bc:89:a7:fe:47:68:f3:
                    ae:1f:8f:3f:2a:41:c8:d7:2c:f7:0b:c7:76:38:a9:
                    02:8c:fb:e6:c0:ed:00:04:f0:1d:af:38:c1:32:59:
                    82:8c:49:39:be:d2:52:ea:d8:aa:6d:a3:15:ec:ef:
                    af:2d:01:34:b8:68:a0:47:99:fc:09:97:8c:da:48:
                    30:2e:51:ec:fe:0a:5f:31:1a:08:2f:cc:df:22:8d:
                    3f:f1:93:a3:53:c0:0c:f4:37:a2:32:9f:b9:da:78:
                    7c:ee:1e:a4:72:61:e9:14:91:5b:0d:4f:62:df:50:
                    93:28:35:05:d8:ce:7d:2f:ed:24:73:b0:0b:56:8b:
                    ea:10:65:38:27:77:2c:f9:5e:36:63:48:87:06:27:
                    c2:e8:c1:ba:28:0b:3e:ca:5e:fa:91:b6:b3:c2:53:
                    17:75:10:d5:69:fd:bc:06:42:1b:c2:4b:59:d9:f3:
                    6b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E2:18:B0:18:ED:B1:90:39:62:E9:39:95:35:FE:A2:76:6B:B1:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/528f3c00-e696-3048-a8a0-0493f68d0686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:b900::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:8f:a9:8f:e8:83:0c:cc:36:20:56:98:56:e8:bc:78:9f:7d:
         cf:7d:8f:b8:14:c5:6e:58:7a:42:7e:ed:15:0e:1f:21:1d:62:
         95:f9:ae:4b:c1:d7:8f:97:20:81:88:c4:92:4b:c4:83:09:ce:
         6e:01:2c:74:dd:77:0d:1e:6a:91:07:13:67:11:f8:29:82:ef:
         a5:92:ce:fc:7c:27:ca:fa:7e:92:8b:72:47:c4:62:70:62:70:
         c2:3e:c3:08:a5:86:c6:14:b3:c8:be:7c:4b:50:36:55:aa:97:
         94:8a:23:42:a2:fe:fe:58:57:76:4d:72:db:5a:9d:6e:a3:df:
         7b:41:74:dd:31:42:a2:a4:6b:f1:93:2b:66:5b:b7:a5:0c:da:
         c7:83:e4:0a:4d:75:7f:24:c6:ff:8b:c7:53:d6:c4:5e:4b:1f:
         6b:ee:43:67:8f:dd:b8:ca:dc:57:e0:1b:6f:f8:9a:40:fd:28:
         14:9d:a9:16:60:44:52:93:0b:b1:a8:50:45:6d:7c:a1:3b:d9:
         6c:b3:c0:cf:d5:c1:40:c9:32:53:13:90:9e:6d:0a:48:db:e9:
         b6:ec:04:78:04:e3:a5:15:0f:3c:66:e6:2d:d4:4a:88:67:99:
         e1:58:c2:fd:33:3b:d4:86:b5:68:bc:62:f9:57:58:11:71:1d:
         06:fa:64:8d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD3MOCgLbJmh8CBZ2UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTIyMDUwNDEyMDAwMFoXDTI3MDUwNTA0MDAwMFowLzEtMCsGA1UEAxMk
MzFjOTEyOGQtZDhlOC00Nzk3LWE4N2ItMDI1Y2UyM2M5MWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz86Q769NQ1xuyHq8uoh2SGeGjHlvcGiK0Y1V
DLyY1M+DbXyU3CY6s8M9BHlqM6buMfAwMwC9A86Klh4o2amliPjP0kveCXZ/AAe0
hwniqEgKT7yJp/5HaPOuH48/KkHI1yz3C8d2OKkCjPvmwO0ABPAdrzjBMlmCjEk5
vtJS6tiqbaMV7O+vLQE0uGigR5n8CZeM2kgwLlHs/gpfMRoIL8zfIo0/8ZOjU8AM
9DeiMp+52nh87h6kcmHpFJFbDU9i31CTKDUF2M59L+0kc7ALVovqEGU4J3cs+V42
Y0iHBifC6MG6KAs+yl76kbazwlMXdRDVaf28BkIbwktZ2fNrDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJXiGLAY7bGQOWLpOZU1/qJ2a7HLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTI4ZjNjMDAtZTY5Ni0z
MDQ4LWE4YTAtMDQ5M2Y2OGQwNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAEFebkA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKOPqY/ogwzMNiBWmFbovHiffc99j7gUxW5YekJ+7RUOHyEdYpX5
rkvB14+XIIGIxJJLxIMJzm4BLHTddw0eapEHE2cR+CmC76WSzvx8J8r6fpKLckfE
YnBicMI+wwilhsYUs8i+fEtQNlWql5SKI0Ki/v5YV3ZNcttanW6j33tBdN0xQqKk
a/GTK2Zbt6UM2seD5ApNdX8kxv+Lx1PWxF5LH2vuQ2eP3bjK3FfgG2/4mkD9KBSd
qRZgRFKTC7GoUEVtfKE72WyzwM/VwUDJMlMTkJ5tCkjb6bbsBHgE46UVDzxm5i3U
SohnmeFYwv0zO9SGtWi8YvlXWBFxHQb6ZI0=
-----END CERTIFICATE-----
Generated at Fri Apr 19 02:43:24 2024 by rpki-client on console-fra.rpki-client.org