Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/561c96b2-c8c5-35b1-873f-2ca126cb64cb.roa
File:                     561c96b2-c8c5-35b1-873f-2ca126cb64cb.roa (raw, json)
Hash identifier:          IBBcj4N6nLfHlWMtYJrwHkIZVmRvZ9UNgaDpFJJiyk0=
Subject key identifier:   9E:54:7C:51:14:D0:35:71:14:E5:46:0C:42:6B:A7:91:9C:00:57:78
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCC3667A7B251C2A6FA713B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/561c96b2-c8c5-35b1-873f-2ca126cb64cb.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        2001:579:5f05::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:36:67:a7:b2:51:c2:a6:fa:71:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=a2194b01-bb3e-4ec1-9094-6deac21933f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:a3:87:9f:9f:00:bb:0d:73:1f:42:85:86:
                    cb:b0:29:55:da:64:5a:0e:48:4b:00:e5:2d:95:4f:
                    ed:93:c8:99:b3:3e:b4:78:4e:dd:a5:ce:b1:2f:10:
                    cb:ac:68:c3:8b:93:fc:40:c5:78:f2:24:80:66:07:
                    fc:b5:a1:e1:b1:b0:81:33:d8:b6:c3:df:5d:37:1f:
                    e5:3f:76:77:ea:c4:35:d1:c8:c5:88:ce:31:e8:3b:
                    40:a3:ca:c3:c3:c5:7e:b2:61:0c:cd:f0:85:2d:22:
                    dd:30:11:52:06:8c:50:1f:5f:e8:4c:57:5a:c3:65:
                    14:07:eb:5e:fd:e5:f3:82:3f:82:75:ba:b8:a6:fd:
                    28:1b:75:f0:64:1c:e5:77:84:08:d9:67:dd:70:ea:
                    cf:d0:de:30:e6:d4:63:8f:97:da:f4:0f:71:1e:44:
                    ac:36:9c:57:73:c3:67:ab:8b:b9:43:15:8a:38:ff:
                    b0:93:0a:46:ef:e9:91:fd:fb:0b:27:42:b5:22:a5:
                    31:ac:fd:ba:67:29:96:87:7e:d5:79:ad:45:e0:82:
                    c3:a8:74:31:84:79:9d:63:fb:28:ec:a9:e5:80:3a:
                    d9:65:7c:82:5a:1a:5d:22:38:8d:e4:86:72:d9:09:
                    a2:d1:da:71:8b:65:58:ee:17:50:1e:5d:f3:92:fe:
                    2c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:54:7C:51:14:D0:35:71:14:E5:46:0C:42:6B:A7:91:9C:00:57:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/561c96b2-c8c5-35b1-873f-2ca126cb64cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:5f05::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:92:34:d1:e1:a1:0b:23:77:80:2a:c4:da:f2:97:30:a0:f5:
         36:10:f5:8d:9c:2f:7b:00:54:c4:74:19:b9:5b:34:0c:01:14:
         31:c5:89:3f:02:71:d6:74:32:94:0a:83:08:6e:5e:07:01:25:
         f8:ff:a9:1f:76:f4:b6:07:c7:16:91:60:28:9a:4f:0d:f6:29:
         6f:b4:95:82:e6:63:f1:a4:24:da:50:51:78:85:50:1c:de:4c:
         d1:88:f6:bf:7d:b5:39:b8:7f:a0:c1:ae:f9:d0:9f:de:64:0a:
         91:d7:cb:fc:09:b3:47:aa:2d:32:45:97:42:6c:2b:eb:c2:c0:
         df:de:fe:cf:f7:27:72:32:b9:99:2d:8a:b8:2f:5a:3c:e7:e9:
         2b:a7:e4:74:d2:64:8b:91:53:f9:17:75:72:44:75:d5:41:f6:
         e6:6d:d8:a8:b2:80:01:91:d8:92:d1:41:d0:e0:53:e0:3d:4b:
         01:97:6c:90:08:ca:8a:b8:49:17:50:31:5b:62:5d:dd:f4:2d:
         0f:e3:01:12:b6:d0:91:99:38:f9:92:b7:1e:43:4b:03:b7:89:
         79:21:37:d5:f1:81:49:ee:6f:1b:28:e5:12:b3:53:a6:8c:5c:
         de:62:1a:da:a3:64:10:1f:55:7a:9f:16:a4:35:85:d0:58:bc:
         7c:81:0d:a2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD3MNmenslHCpvpxOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTIyMDUwNDEyMDAwMFoXDTI3MDUwNTA0MDAwMFowLzEtMCsGA1UEAxMk
YTIxOTRiMDEtYmIzZS00ZWMxLTkwOTQtNmRlYWMyMTkzM2Y5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAWjh5+fALsNcx9ChYbLsClV2mRaDkhLAOUt
lU/tk8iZsz60eE7dpc6xLxDLrGjDi5P8QMV48iSAZgf8taHhsbCBM9i2w99dNx/l
P3Z36sQ10cjFiM4x6DtAo8rDw8V+smEMzfCFLSLdMBFSBoxQH1/oTFdaw2UUB+te
/eXzgj+Cdbq4pv0oG3XwZBzld4QI2WfdcOrP0N4w5tRjj5fa9A9xHkSsNpxXc8Nn
q4u5QxWKOP+wkwpG7+mR/fsLJ0K1IqUxrP26ZymWh37Vea1F4ILDqHQxhHmdY/so
7KnlgDrZZXyCWhpdIjiN5IZy2Qmi0dpxi2VY7hdQHl3zkv4sXwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ5UfFEU0DVxFOVGDEJrp5GcAFd4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTYxYzk2YjItYzhjNS0z
NWIxLTg3M2YtMmNhMTI2Y2I2NGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeV8F
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI2SNNHhoQsjd4AqxNrylzCg9TYQ9Y2cL3sAVMR0GblbNAwBFDHF
iT8CcdZ0MpQKgwhuXgcBJfj/qR929LYHxxaRYCiaTw32KW+0lYLmY/GkJNpQUXiF
UBzeTNGI9r99tTm4f6DBrvnQn95kCpHXy/wJs0eqLTJFl0JsK+vCwN/e/s/3J3Iy
uZktirgvWjzn6Sun5HTSZIuRU/kXdXJEddVB9uZt2KiygAGR2JLRQdDgU+A9SwGX
bJAIyoq4SRdQMVtiXd30LQ/jARK20JGZOPmStx5DSwO3iXkhN9XxgUnubxso5RKz
U6aMXN5iGtqjZBAfVXqfFqQ1hdBYvHyBDaI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:44 2024 by rpki-client on console-fra.rpki-client.org