Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8fb276d4-9418-33a4-b181-88c59b6a1e3d.roa
File:                     8fb276d4-9418-33a4-b181-88c59b6a1e3d.roa (raw, json)
Hash identifier:          blXTHF/HePQk6ctOPgingWOEWJecR5iQ5PfdVtIefvI=
Subject key identifier:   D0:29:5E:7A:0E:31:90:12:99:9D:AB:D1:76:66:04:DC:C9:6E:B6:C9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCC362813A4D2D558AD0B0C00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8fb276d4-9418-33a4-b181-88c59b6a1e3d.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        2001:578:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:36:28:13:a4:d2:d5:58:ad:0b:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=1e74a627-54a4-4218-8eb7-67aeff2d34f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:cf:08:27:2e:a7:0f:33:29:18:85:6a:95:
                    5f:c1:c0:16:34:62:5b:ea:3e:e9:23:4b:ba:60:5b:
                    98:af:0b:cd:bd:b4:e2:4c:3f:17:62:ca:2d:f8:6e:
                    79:3b:cc:f1:16:d2:a0:3d:a8:c4:6b:af:a6:e4:03:
                    f0:68:2c:57:a1:d4:71:2f:b1:3d:07:e5:88:5e:28:
                    1b:ae:cf:bb:71:6b:89:19:cd:91:5f:f4:ab:3d:22:
                    c4:0b:87:d0:de:55:dc:a8:e2:75:60:d0:b5:aa:25:
                    64:fd:53:d3:22:57:d2:48:91:08:a8:62:40:69:92:
                    0e:b6:29:1c:8e:72:9a:07:f6:b3:ee:57:d8:26:5c:
                    0b:e5:80:a4:55:bf:dd:d2:29:f0:a9:3a:dd:77:19:
                    94:4e:b9:69:50:f4:06:af:e0:fd:38:a3:8f:c3:8c:
                    1d:a3:d2:88:09:b2:29:f7:6b:a3:20:5e:84:86:0e:
                    46:9a:a9:79:b3:6d:ab:cb:57:56:01:83:0b:86:c2:
                    9c:27:19:62:d6:e4:8d:97:3d:56:79:05:e3:70:47:
                    6a:f3:45:4f:f0:1d:03:f9:17:2b:04:d6:20:c0:ab:
                    09:70:c9:48:77:b7:21:2b:f2:f6:d3:96:7c:1b:36:
                    01:ef:2b:34:f1:e5:53:59:24:95:11:e2:77:14:e9:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:29:5E:7A:0E:31:90:12:99:9D:AB:D1:76:66:04:DC:C9:6E:B6:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8fb276d4-9418-33a4-b181-88c59b6a1e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:578:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ae:b3:d9:7a:db:26:3d:a7:96:60:76:70:b0:6f:ce:dd:b3:
         24:4c:a1:a0:8e:e2:b6:d8:9d:13:bc:cf:31:71:8d:f0:af:6a:
         da:51:c5:20:66:83:d6:9d:c3:75:00:3f:f2:d5:2e:7e:05:b9:
         fd:c4:de:7a:c3:84:cf:d4:8f:76:0d:ca:db:c8:eb:f8:ba:12:
         bb:6c:90:91:b7:a3:5a:a2:39:4e:d9:4e:9e:99:fe:34:b5:25:
         af:0b:ee:cb:16:03:65:b4:2d:42:c5:27:a9:88:3f:b8:ba:36:
         0d:7d:40:43:14:55:b6:ec:15:d8:95:7b:8c:57:9d:00:f5:4d:
         a0:83:2e:46:26:5c:72:9a:22:16:b6:b4:1f:ce:51:2c:06:88:
         3c:0e:4c:c0:65:82:3a:27:9b:bf:cb:6a:6a:59:b9:9e:89:2b:
         7f:ea:04:a3:ea:23:02:7c:50:45:cd:7e:1c:ed:24:7b:be:e5:
         4c:8a:7e:a4:50:b9:ad:33:10:a6:5a:d5:6f:30:b0:7b:40:f8:
         99:e3:e4:4c:46:3b:ad:ed:ee:cd:e9:51:f0:88:76:67:27:f0:
         c0:ef:30:ba:d2:21:fe:8b:12:35:ed:22:e9:46:b2:36:47:7d:
         db:f6:4e:bb:6e:cf:0a:b0:e1:3e:43:35:ac:48:0c:b6:13:f5:
         66:02:d6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:42:46 2024 by rpki-client on console-fra.rpki-client.org