Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/690c2fc7-2430-39e9-89b6-57f85ed612ab.roa
File:                     690c2fc7-2430-39e9-89b6-57f85ed612ab.roa (raw, json)
Hash identifier:          FSmkldZPExDwZFW3OJPCMBjhCNKbBLFYIMQ4kkDkjP8=
Subject key identifier:   6F:A3:C9:5C:3B:CE:D6:37:1C:61:E9:93:64:D8:0A:C9:89:36:03:93
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCC381655D0E771346249C408
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/690c2fc7-2430-39e9-89b6-57f85ed612ab.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     15218
IP address blocks:        2001:578:1c80::/43 maxlen: 43

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:38:16:55:d0:e7:71:34:62:49:c4:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=1572cda5-ded6-475e-9226-733956cb5ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8a:da:f4:7a:ed:44:c9:ce:95:1a:62:9d:93:
                    04:5f:dc:c6:36:e4:a1:64:55:e6:e3:a7:7d:63:7a:
                    bf:0d:4c:18:66:1b:39:7b:06:f4:e0:0b:f8:f5:6e:
                    6d:a8:c2:dd:f7:ed:b8:08:42:86:8f:c1:f2:75:ba:
                    5d:e8:db:de:b6:ec:aa:11:34:8b:f6:8e:ab:c8:63:
                    14:18:e9:07:58:e0:71:4e:1e:35:8c:9a:be:5c:ed:
                    ce:54:65:16:d2:97:b4:32:d7:f7:8b:02:64:1c:20:
                    f9:bd:e4:90:e6:16:76:e6:1c:af:99:36:68:c4:0a:
                    9f:5b:39:e5:bb:6f:fc:f9:46:11:0b:48:a8:66:e4:
                    56:6d:5c:5a:2a:f7:24:f5:d0:96:35:2b:4d:aa:5f:
                    5e:85:57:c0:d1:31:56:bc:ec:0e:f8:7e:41:ed:4e:
                    81:a1:b2:e8:a0:70:bf:09:10:19:e8:a9:e6:97:b3:
                    c8:e3:9c:8f:69:51:ee:e5:4b:bf:df:38:c9:bf:0e:
                    b2:c3:4b:7f:47:be:2e:b1:40:78:1e:6c:d2:c6:fe:
                    be:8f:39:8a:b4:a1:96:a3:05:e4:02:b2:58:bd:02:
                    14:f1:2f:96:5b:17:ad:8d:01:35:15:ea:29:72:ce:
                    e0:d8:c4:dd:a8:08:31:b1:50:83:e8:67:34:ff:50:
                    ef:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A3:C9:5C:3B:CE:D6:37:1C:61:E9:93:64:D8:0A:C9:89:36:03:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/690c2fc7-2430-39e9-89b6-57f85ed612ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:578:1c80::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:2f:84:a4:db:6f:4b:7c:c8:2d:cc:d8:71:76:e8:b0:19:04:
         af:70:89:f9:cb:55:73:cf:0d:55:16:66:4d:61:c2:7a:a1:b0:
         0e:81:cc:37:cd:78:55:d6:72:59:da:1f:95:65:b7:d2:60:69:
         db:63:01:86:8f:e2:31:9b:4d:8e:4b:7c:99:50:59:89:b9:94:
         38:b3:e8:f5:37:4d:69:26:6a:db:f5:60:e4:52:da:39:c7:51:
         8d:5a:0f:65:de:82:33:ed:28:07:c1:e7:ba:3d:ea:62:39:c0:
         c2:b3:63:da:a7:80:01:f5:35:70:13:7d:05:a4:3b:a3:5b:2d:
         4e:2c:51:c1:14:71:1b:26:2a:ff:c3:3b:34:b7:b1:19:a1:72:
         ea:a4:31:60:fd:67:1c:b6:4f:60:ae:ac:b7:39:f1:b7:29:a3:
         33:12:2c:e8:cb:cc:4c:e9:91:ed:a7:30:51:66:c7:6a:04:18:
         86:ca:ef:91:92:a2:c1:b0:be:9f:b5:93:04:a2:f7:bf:41:fe:
         1f:32:e5:58:43:cc:12:63:5e:4d:a8:d5:2c:ba:d8:89:8c:78:
         bf:ab:f6:db:be:f7:30:2a:c5:54:32:ae:d5:be:bc:23:c8:c5:
         29:38:eb:c1:28:4e:14:be:3d:a2:39:b3:0c:31:36:11:6c:3e:
         bc:03:06:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD3MOBZV0OdxNGJJxAgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTIyMDUwNDEyMDAwMFoXDTI3MDUwNTA0MDAwMFowLzEtMCsGA1UEAxMk
MTU3MmNkYTUtZGVkNi00NzVlLTkyMjYtNzMzOTU2Y2I1ZWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Yra9HrtRMnOlRpinZMEX9zGNuShZFXm46d9
Y3q/DUwYZhs5ewb04Av49W5tqMLd9+24CEKGj8Hydbpd6NvetuyqETSL9o6ryGMU
GOkHWOBxTh41jJq+XO3OVGUW0pe0Mtf3iwJkHCD5veSQ5hZ25hyvmTZoxAqfWznl
u2/8+UYRC0ioZuRWbVxaKvck9dCWNStNql9ehVfA0TFWvOwO+H5B7U6BobLooHC/
CRAZ6Knml7PI45yPaVHu5Uu/3zjJvw6yw0t/R74usUB4HmzSxv6+jzmKtKGWowXk
ArJYvQIU8S+WWxetjQE1Feopcs7g2MTdqAgxsVCD6Gc0/1DvNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG+jyVw7ztY3HGHpk2TYCsmJNgOTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjkwYzJmYzctMjQzMC0z
OWU5LTg5YjYtNTdmODVlZDYxMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFIAEFeByA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAovhKTbb0t8yC3M2HF26LAZBK9wifnLVXPPDVUWZk1hwnqhsA6B
zDfNeFXWclnaH5Vlt9JgadtjAYaP4jGbTY5LfJlQWYm5lDiz6PU3TWkmatv1YORS
2jnHUY1aD2XegjPtKAfB57o96mI5wMKzY9qngAH1NXATfQWkO6NbLU4sUcEUcRsm
Kv/DOzS3sRmhcuqkMWD9Zxy2T2CurLc58bcpozMSLOjLzEzpke2nMFFmx2oEGIbK
75GSosGwvp+1kwSi979B/h8y5VhDzBJjXk2o1Sy62ImMeL+r9tu+9zAqxVQyrtW+
vCPIxSk468EoThS+PaI5swwxNhFsPrwDBjM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:36 2024 by rpki-client on console-fra.rpki-client.org