Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bde5f1d6-a2fa-33a1-a92e-c06e0a93249f.roa
File:                     bde5f1d6-a2fa-33a1-a92e-c06e0a93249f.roa (raw, json)
Hash identifier:          0ts/o9O5OfRcW8mJG+96/NrdAlgQEs6ciih7f73azpQ=
Subject key identifier:   F1:84:4E:4F:75:CC:23:08:C8:E4:62:4F:2E:78:A2:3B:98:5A:60:2C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCC37D0B0AB307C7B989A6300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bde5f1d6-a2fa-33a1-a92e-c06e0a93249f.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        2001:579:d080::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:37:d0:b0:ab:30:7c:7b:98:9a:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=615ef176-9045-4886-8a80-731eb8d143b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:43:fd:ad:31:33:2b:ac:e2:54:ac:70:4f:
                    83:d2:cf:03:17:fa:d2:91:f4:09:76:f5:50:68:a4:
                    bb:54:6e:a2:5e:a1:df:5a:a8:c8:a3:fa:13:02:52:
                    d7:5f:60:9a:15:77:41:9c:ca:f6:48:a6:62:b2:90:
                    dc:44:0c:89:fd:95:bf:12:dd:05:ea:2f:4d:5a:93:
                    1d:9f:f1:14:a1:10:b6:09:ce:09:1a:35:cd:d6:72:
                    13:c1:42:b6:5b:58:55:00:83:21:ab:6a:77:dc:4e:
                    ab:54:c3:6c:17:ac:b7:3c:ed:60:5a:d5:21:74:fc:
                    6d:3a:68:29:a3:3f:36:4b:39:be:e4:a5:f5:2d:af:
                    f7:13:35:82:98:1b:54:45:3b:45:f8:2a:64:58:75:
                    ee:87:42:f8:6a:68:85:17:93:4d:48:b6:75:71:e6:
                    27:db:1d:a4:a7:c9:25:16:36:33:f5:e4:0c:71:b7:
                    52:c1:f5:37:e7:4c:76:8a:a8:ed:e3:39:fc:c0:60:
                    b4:e2:18:d9:38:b8:bd:03:1d:f7:f7:df:3f:01:2b:
                    2c:ee:dc:8b:1e:a3:e8:d2:78:42:cb:b2:ce:bf:e8:
                    bb:ce:0d:c5:32:d5:c4:d4:da:6b:88:ee:54:9a:28:
                    15:cb:37:8d:29:97:67:8f:3c:d9:4c:2a:c6:e4:61:
                    75:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:84:4E:4F:75:CC:23:08:C8:E4:62:4F:2E:78:A2:3B:98:5A:60:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bde5f1d6-a2fa-33a1-a92e-c06e0a93249f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:d080::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:70:14:54:f0:58:10:ca:17:c6:08:9b:52:5e:17:6c:ca:c3:
         5d:45:f7:a1:ae:94:00:9b:30:e0:38:89:02:67:36:a5:7e:33:
         1d:21:7f:93:f8:eb:ca:c5:3d:f4:a0:03:7e:fb:bf:f0:12:f3:
         b7:ea:1b:e6:0c:ed:c2:65:aa:87:10:4e:c1:03:ca:16:24:59:
         07:32:0f:e3:3d:d3:6f:c9:68:39:80:92:e6:be:57:97:2f:f5:
         23:11:19:47:99:e0:ee:15:4f:cb:0e:14:a0:c3:c8:cb:fa:37:
         fc:c9:96:a7:69:9e:f4:e7:1f:35:1c:0c:d6:7d:ac:a0:1c:5e:
         03:cf:d0:1a:a1:24:18:2c:d4:3d:01:88:e1:8b:11:9a:ef:74:
         26:12:ff:2a:5e:5e:28:f9:a8:e7:cc:cd:f0:3b:18:59:db:09:
         13:3f:37:17:38:a2:9d:0b:05:79:aa:00:68:c6:13:76:fe:2a:
         2d:a6:08:7b:9d:18:bc:8b:88:be:b6:4e:8d:b6:13:6d:8e:e5:
         af:ed:dc:50:4f:5d:45:d1:b1:66:6e:aa:5d:23:7d:8b:4c:11:
         5e:dd:ec:b3:50:cf:85:e8:ce:c2:3a:98:72:f8:b3:cf:13:11:
         9f:f5:34:26:6b:73:dc:4c:ba:0d:c7:8d:4a:c2:53:cc:1a:3d:
         5f:85:39:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:49:59 2024 by rpki-client on console-ams.rpki-client.org