Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a69bb44c-92d3-3335-b919-cdfd9311b4d0.roa
File:                     a69bb44c-92d3-3335-b919-cdfd9311b4d0.roa (raw, json)
Hash identifier:          uB9tQnNU6/TYWk7IcCi9+/BfXTnv8sNoOheqpxBs+54=
Subject key identifier:   8A:3D:CF:6E:C8:EF:1D:7C:CD:94:DD:7D:89:1F:ED:95:29:A1:9B:38
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCC3845B4A919966B2A939E00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a69bb44c-92d3-3335-b919-cdfd9311b4d0.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        2001:57a:e000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:38:45:b4:a9:19:96:6b:2a:93:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=e2b7b1a6-0bda-4b49-a6e2-e79f6288b46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f9:1f:73:94:5f:c5:f1:1c:25:79:b5:23:c2:
                    ca:c0:85:d3:28:73:66:ba:30:a3:c0:d1:50:de:f6:
                    1b:44:50:af:1a:8a:eb:1e:d1:5e:9c:31:09:ed:d0:
                    d5:37:ff:a5:2e:e5:b8:10:c9:1e:ba:de:33:4d:ea:
                    e3:b4:0e:0a:75:fb:18:b3:2c:28:5f:35:d8:ef:60:
                    b1:be:21:75:6f:2f:57:2f:cc:31:1e:19:7e:d6:98:
                    17:f0:f4:d9:0f:6b:ba:89:0c:48:76:7d:97:3d:5d:
                    76:f6:e9:3c:95:cb:e3:ff:1a:70:a7:37:98:87:ba:
                    0b:5a:f2:95:db:75:07:a5:0a:7f:b6:8f:81:73:59:
                    ce:d1:e3:7e:26:58:84:42:54:28:92:9b:7d:45:0e:
                    2d:30:d2:0b:d1:80:20:6c:8f:88:c0:da:d3:b5:f2:
                    d1:55:be:f3:6b:d1:7f:b2:cb:ab:b0:10:71:9b:cc:
                    de:51:4e:54:35:0f:5a:4f:03:01:2c:9f:da:04:a0:
                    33:79:0d:4b:4e:b3:73:56:73:d9:6c:39:a1:75:63:
                    72:38:a3:dd:e3:c7:9d:b9:56:e9:51:a0:cd:f6:cd:
                    4d:a9:a4:48:33:89:ad:9c:ed:56:c2:b1:58:10:cf:
                    8c:55:1a:76:b8:0e:fd:3a:69:cd:20:c4:c5:71:36:
                    6b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3D:CF:6E:C8:EF:1D:7C:CD:94:DD:7D:89:1F:ED:95:29:A1:9B:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a69bb44c-92d3-3335-b919-cdfd9311b4d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:57a:e000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d0:54:03:ed:c8:bb:01:57:46:83:d9:f4:7d:cd:20:22:da:
         ce:43:79:f2:f5:97:d5:1c:fd:95:d3:bd:ea:a9:e0:1c:76:fb:
         3f:3c:b8:df:ef:bf:0d:21:65:72:6a:d1:8e:af:37:cd:15:bc:
         0d:df:60:8c:d2:91:e1:ce:b0:ad:bd:e0:8e:04:4a:e3:90:f5:
         64:b2:20:13:7d:9a:7c:98:7a:9c:79:13:12:75:ba:03:9c:54:
         c7:7a:3c:e5:f8:45:b0:1e:2a:85:c1:c2:f4:59:1c:78:e0:c0:
         9d:c3:2e:ce:55:ff:e7:5a:b6:f6:96:fb:ce:6b:79:66:dd:0c:
         a9:43:82:3c:2c:dd:dc:b2:e8:e2:b6:e5:5f:26:02:2a:6e:0d:
         87:9e:22:c9:02:4d:f7:99:06:d1:b5:93:32:f7:81:88:af:18:
         17:58:94:41:2c:7a:41:8e:14:cb:f4:69:f5:07:43:30:39:a3:
         ef:69:e3:d5:b6:45:4c:9c:b1:d0:b7:e2:00:ab:83:2e:58:00:
         51:c8:3c:98:d2:fb:7b:b8:14:66:2b:85:97:ec:78:cb:49:2e:
         14:17:ac:de:4d:39:76:45:c6:fc:c3:71:21:a7:7a:b7:9c:70:
         79:88:a2:f1:c1:01:60:33:e4:2a:00:a3:f2:b2:26:64:ed:42:
         66:83:22:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:04 2024 by rpki-client on console-ams.rpki-client.org