Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a970fbfd-1b45-328c-9153-e7fd5189f0b8.roa
File:                     a970fbfd-1b45-328c-9153-e7fd5189f0b8.roa (raw, json)
Hash identifier:          ppzlNEZET1c1hnzKrg7t5gMu881qkP5LPtQAFP20f5w=
Subject key identifier:   51:4C:DB:1A:95:52:10:C8:D5:F4:E4:6B:BB:C5:9C:58:CF:23:09:DF
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCC367358A8427D0238807500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a970fbfd-1b45-328c-9153-e7fd5189f0b8.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        2001:579:61fe::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:36:73:58:a8:42:7d:02:38:80:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=3dd3cebb-45b4-455e-b365-3f54bba1acac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2e:cd:b5:16:7b:1a:1c:6b:65:d9:1d:06:7a:
                    4c:94:df:69:9c:bc:46:ba:ed:43:bc:8b:59:25:1d:
                    3e:13:9c:11:11:f9:13:56:62:20:17:17:c4:ab:33:
                    5e:27:1d:20:8e:b2:72:d2:74:54:60:9e:7e:d3:ad:
                    34:d1:48:ce:7c:ec:56:ba:4f:b3:93:12:c2:50:ab:
                    88:4b:e5:f8:2c:57:d9:1f:31:53:4b:5a:0d:28:e6:
                    11:80:52:aa:66:ff:85:65:a8:b2:12:de:31:04:33:
                    58:d8:c3:80:b1:08:85:e0:2d:e8:2c:f1:51:72:50:
                    32:3a:ef:ef:17:3b:33:1b:5e:89:a9:32:29:ea:b1:
                    63:60:de:eb:0c:75:6c:54:75:94:00:c7:a0:85:43:
                    58:34:e0:a7:23:2b:12:5d:36:57:4d:42:95:f4:5e:
                    af:df:b5:7f:d6:69:05:f5:1f:dc:a1:43:9e:6c:8e:
                    a8:8f:3c:9c:a1:b8:ad:7e:9a:f5:77:ea:bf:e1:40:
                    d4:bb:b4:5b:d5:49:7d:c5:13:df:0d:1e:7c:48:7f:
                    05:01:79:18:10:40:a2:84:68:ab:33:2f:af:60:87:
                    0e:7b:b6:4f:5b:2e:d5:96:92:63:bf:3e:5c:01:6c:
                    96:09:1c:20:28:f0:de:74:f3:5d:e2:5c:83:51:d7:
                    63:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4C:DB:1A:95:52:10:C8:D5:F4:E4:6B:BB:C5:9C:58:CF:23:09:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a970fbfd-1b45-328c-9153-e7fd5189f0b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:61fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:4d:86:a7:25:6b:c9:b4:d0:96:a3:2f:18:33:9b:5a:da:63:
         5d:3a:ac:fd:50:c1:3d:d1:ae:ca:42:ea:ab:fe:9b:c2:1f:44:
         fd:d6:32:e3:5d:9a:6e:c4:dd:55:24:d5:52:6e:b5:b4:ac:10:
         63:de:60:c0:ed:cf:38:17:b5:c1:d7:0b:7d:52:3d:c1:3b:3c:
         b8:f3:cc:49:53:fd:a1:02:e8:d1:4e:e0:12:7b:15:39:2d:17:
         a3:22:8a:28:e3:83:fb:fd:7f:92:3a:e9:ec:5f:ad:e7:de:20:
         ea:31:12:c6:82:9a:13:9e:d2:3d:79:44:77:0b:b6:22:ec:e4:
         0a:d5:a3:28:42:a7:1d:63:eb:fe:20:38:b9:14:65:ce:70:68:
         04:59:f3:52:ee:74:8d:99:36:41:10:69:4d:ab:1b:4d:73:4c:
         49:a4:80:17:82:79:5c:3a:b7:c3:b8:b6:11:0e:19:53:8b:eb:
         c3:6d:9f:3c:e8:a5:16:4c:5e:f4:6d:7e:f1:2f:e0:fc:84:e2:
         bf:53:00:6f:bd:a3:06:24:c1:43:1d:a4:66:a5:e3:b9:8d:b0:
         05:b5:d3:43:b9:0f:f1:d3:b1:ce:87:45:ae:5e:4f:6a:6d:a5:
         b9:a5:0f:68:67:38:0c:2c:c1:d2:f1:3f:59:21:c3:02:46:55:
         a9:f8:98:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:39:15 2024 by rpki-client on console-fra.rpki-client.org