Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8459d6b7-9921-377d-9ff3-77a8736c9a39.roa
File:                     8459d6b7-9921-377d-9ff3-77a8736c9a39.roa (raw, json)
Hash identifier:          A8Q1TqXZtN5wcy+SWNnfBFmnnVvm5NM4rH3Sq0LwDBM=
Subject key identifier:   C5:DE:2C:8C:BE:42:61:66:8B:B9:46:77:24:4A:8D:27:03:3A:99:6C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285845A6F3673883B4603F2EA31AC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8459d6b7-9921-377d-9ff3-77a8736c9a39.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     22773
IP address blocks:        2001:578:1f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:67:38:83:b4:60:3f:2e:a3:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=ad9dca54-96bc-463d-9f92-a52506fabd90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:11:d9:7c:31:08:58:d0:cf:e8:23:90:cd:8b:
                    90:31:3d:65:45:e4:3f:39:ee:21:17:82:87:c2:d1:
                    eb:eb:29:d4:41:35:ea:5a:91:71:94:6c:1b:12:d3:
                    07:c8:6a:9c:be:12:10:84:dd:d6:90:fe:56:c1:a6:
                    7f:98:ca:89:90:23:e6:72:4f:54:70:75:c1:6e:62:
                    2f:51:c7:71:78:7d:26:4a:ce:a7:30:7a:fd:03:0e:
                    c5:f8:05:7f:cd:b4:71:81:38:26:27:fa:fc:c3:a8:
                    24:9c:4e:21:69:a8:06:38:79:cd:d8:ee:c1:21:90:
                    f6:94:78:51:99:56:f7:cd:1b:7c:c4:4d:0c:d1:56:
                    43:ee:50:60:eb:ae:3a:d7:05:ec:59:b2:5c:50:b5:
                    d1:47:db:2a:f1:bc:af:5d:92:40:1e:c7:31:7a:87:
                    4d:cb:16:b1:c2:38:35:13:d5:9e:20:b9:61:37:92:
                    06:85:07:7f:01:8f:04:59:87:f6:aa:6f:f4:46:1f:
                    8c:22:6b:63:d1:d3:ea:dd:c4:33:d9:a5:dd:a0:9c:
                    f3:d0:81:a0:bf:a3:a1:4e:45:ec:de:97:c9:53:53:
                    09:55:99:41:82:9c:94:02:bf:0e:0c:e1:ae:39:b0:
                    03:80:ee:6a:36:5b:09:d0:6e:bb:fb:89:c7:f1:41:
                    49:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DE:2C:8C:BE:42:61:66:8B:B9:46:77:24:4A:8D:27:03:3A:99:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8459d6b7-9921-377d-9ff3-77a8736c9a39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:578:1f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:3e:f0:31:bd:8e:34:78:9b:c7:9c:e6:0a:7a:cd:29:fb:3d:
         61:74:6a:74:3d:55:5c:93:2f:bc:80:33:45:ce:c0:c3:20:fe:
         66:42:5c:e8:61:69:8d:21:fa:7c:93:22:3a:45:0a:2b:53:bd:
         29:2d:e1:9b:5d:df:6c:a0:d7:9a:ce:b4:7f:26:87:2b:de:4b:
         f9:b0:a4:b6:1e:0e:3d:55:78:91:2d:88:e3:c4:e0:36:3d:4a:
         7b:3f:ba:41:14:d1:8f:89:50:85:46:d6:6c:2a:a3:09:bd:01:
         cd:34:2b:f7:3b:38:48:a6:b7:3b:ec:d2:32:ce:ee:94:3f:32:
         97:27:43:62:ae:1d:8f:11:de:1e:82:94:09:5f:a1:9f:1c:6a:
         44:9f:0e:02:4e:9c:77:35:f4:8d:67:c6:cc:72:8b:a3:8e:66:
         15:15:f0:92:d8:fd:77:dd:ed:d1:64:16:2c:69:e9:bd:b8:48:
         8f:18:58:95:77:4a:34:f5:70:4c:12:06:47:5f:c8:87:7b:9c:
         5a:83:5c:61:d1:4e:6c:c7:df:e1:06:b8:4c:43:46:64:ba:dd:
         75:67:d8:de:20:3d:84:57:d7:cd:61:f7:5e:b8:00:cf:bb:b1:
         37:b7:72:ea:ba:5b:72:6a:bc:ce:95:86:13:5d:16:99:0f:d8:
         1f:75:1f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:24:14 2024 by rpki-client on console-ams.rpki-client.org