Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/615f8362-c267-31e4-bb4e-4a4818b8d066.roa
File:                     615f8362-c267-31e4-bb4e-4a4818b8d066.roa (raw, json)
Hash identifier:          0lXrc4o08W5VCXsz5Y+wp9c2nSsvSlPzOwXpCdMuiIY=
Subject key identifier:   F0:DA:18:29:6C:63:26:BE:C5:63:E6:FB:6C:AB:21:BF:82:DB:00:AB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCC36604FB473F2BED2340E00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/615f8362-c267-31e4-bb4e-4a4818b8d066.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        2001:579:4138::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:36:60:4f:b4:73:f2:be:d2:34:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=b76aa897-00e7-4e96-9480-4b64b21cf4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ef:d1:88:00:c9:f3:91:65:de:72:d6:41:6d:
                    7e:ba:2c:a0:ed:3e:07:85:af:76:f3:b4:37:88:4f:
                    01:62:3e:e5:8c:13:e5:63:36:03:17:f6:31:d5:33:
                    a3:64:a2:9e:f8:55:37:18:9c:a2:31:b1:6c:02:54:
                    81:e4:3e:fb:43:0a:ce:4d:23:d0:49:84:17:62:9c:
                    54:fd:b7:44:15:1c:37:ae:be:51:73:91:2a:d9:aa:
                    73:f4:5c:92:07:af:3e:24:69:5f:47:90:4a:00:81:
                    88:15:9e:fc:ea:29:e3:cf:b2:da:27:38:43:6d:50:
                    00:e4:28:66:db:44:2b:36:e3:b6:c7:0a:de:b3:0d:
                    f8:5c:0a:4a:6b:af:5a:1c:50:0b:ef:b3:d5:8f:14:
                    09:dd:af:aa:7e:56:30:47:94:e7:9d:03:b0:35:26:
                    3f:c8:e9:0c:4f:bf:79:26:72:62:b2:17:6d:cc:f3:
                    4a:59:0b:85:c5:16:29:f1:61:d1:c8:27:76:16:6c:
                    41:ff:4f:eb:e8:f8:8e:d4:89:8e:1e:ad:1d:74:51:
                    10:e5:b8:d6:b2:de:77:87:63:86:ac:f0:2b:b0:bd:
                    21:84:e9:9f:54:54:82:6e:b6:ff:11:7d:bc:97:da:
                    b4:0d:fb:40:12:fb:54:08:51:57:09:0b:31:76:62:
                    21:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DA:18:29:6C:63:26:BE:C5:63:E6:FB:6C:AB:21:BF:82:DB:00:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/615f8362-c267-31e4-bb4e-4a4818b8d066.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:4138::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:eb:46:bc:17:05:e3:59:11:c2:08:2a:82:7a:a9:0a:e5:92:
         5f:a0:b2:b1:a0:e0:3b:e8:8c:58:6e:29:6d:5d:78:20:03:fa:
         80:72:55:c5:ca:84:c7:3a:4a:f0:6c:67:7e:a3:fd:43:00:de:
         80:0c:b1:f3:a6:68:d5:ec:fb:d3:9f:f6:16:8f:29:6f:c0:b1:
         70:ce:d4:8b:5b:96:97:a9:34:9a:ab:cc:9f:1e:e8:f1:b5:6b:
         f4:99:2e:de:d2:f9:96:cd:f8:a1:d7:c9:db:f1:67:73:3e:76:
         37:a0:8b:01:af:9d:1f:97:da:39:6b:34:02:c8:d3:08:03:25:
         70:74:d3:81:50:87:2b:8d:34:7e:a5:95:55:15:13:31:b4:c2:
         0e:4e:87:c7:8b:c5:12:2e:ac:76:db:52:84:e3:94:17:3e:e2:
         0d:c6:63:2c:2f:a3:56:af:44:e9:93:b4:e8:7c:1b:f3:09:e7:
         92:65:0a:e1:ef:c8:86:ca:bc:dd:1c:5b:0f:d8:bd:df:a9:04:
         d9:3d:0b:90:74:06:c2:81:91:6b:b4:d2:80:c5:8b:65:87:4d:
         06:57:35:b9:62:e4:64:8b:b4:96:07:c1:7a:67:6b:8b:66:59:
         45:da:99:bd:6d:42:ed:bb:29:e6:b6:4c:ab:13:67:a2:31:16:
         27:07:da:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 15:17:47 2024 by rpki-client on console-fra.rpki-client.org