Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c894d026-1f99-3c7a-8fb0-94797c9fdc58.roa
File:                     c894d026-1f99-3c7a-8fb0-94797c9fdc58.roa (raw, json)
Hash identifier:          8gjdZUNcNZpy6WOXIZLNZM+7FB6N1ScaD/U3Q3lFMpI=
Subject key identifier:   2E:B3:20:C4:18:A0:C7:C1:90:25:F7:AE:A9:65:BE:EF:6B:F4:2D:93
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DCC3680D76BD0CA7BC00B4D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c894d026-1f99-3c7a-8fb0-94797c9fdc58.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     22773
IP address blocks:        2001:579:804b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:36:80:d7:6b:d0:ca:7b:c0:0b:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=9caf3cd3-cd47-43ee-8c97-1aa801b34790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:8f:08:46:3c:10:b6:10:3f:e0:1d:45:43:
                    7b:dc:8b:a9:0f:0f:35:d4:25:17:a7:4a:be:76:dd:
                    ef:fd:e4:2e:1a:e8:6a:57:a1:78:3c:1c:1a:d0:6e:
                    ad:83:6d:d5:81:8e:ce:0b:98:bf:f6:f9:3c:c4:4b:
                    5e:ae:9f:28:42:63:f5:6a:93:32:a6:a5:3b:e0:fc:
                    b8:dd:b2:e6:45:55:48:fe:8b:4a:e3:99:bb:cb:56:
                    9c:e4:90:28:b1:f1:ac:f5:ac:4c:97:55:c6:43:e7:
                    57:a0:bd:0d:bd:51:a2:d6:71:f3:3c:7a:6f:a2:12:
                    99:d2:5f:a5:d1:a8:64:09:36:18:9d:01:d5:c9:5a:
                    8b:9a:14:89:1c:3d:4e:2a:a6:fd:b4:17:a0:31:f4:
                    03:20:33:93:8f:dd:cd:5f:ac:d1:3d:40:08:f1:19:
                    a8:17:7f:d8:34:b9:23:34:02:92:92:88:92:f4:a9:
                    ae:01:2a:94:ed:53:fd:5b:6d:7c:3f:ff:0a:bb:eb:
                    b9:ca:54:9e:b0:1b:7a:07:61:30:78:db:33:29:d9:
                    7d:2d:07:a5:e0:ac:6a:63:c2:3e:99:c5:63:e2:35:
                    4a:ab:57:54:43:ae:aa:ef:de:47:f5:60:cd:02:a0:
                    6d:72:42:c1:44:f4:4e:85:58:48:0e:f4:5a:7f:8a:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B3:20:C4:18:A0:C7:C1:90:25:F7:AE:A9:65:BE:EF:6B:F4:2D:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c894d026-1f99-3c7a-8fb0-94797c9fdc58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:804b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:10:be:62:eb:60:9a:a4:0c:6f:cd:c9:2b:20:02:ca:ff:9a:
         09:0a:98:02:3e:44:23:c0:ec:c4:d1:9e:6e:bc:be:d6:25:7e:
         1d:5a:17:82:b4:15:da:14:d9:80:d9:88:1d:0b:48:53:ac:94:
         db:33:5f:3e:61:40:bc:cf:1f:6b:f5:1e:d9:1d:c9:db:8c:0a:
         e4:35:96:59:bb:cc:15:0c:50:dc:0d:fc:48:23:35:c7:6d:48:
         d1:7a:ee:9f:50:33:ce:d2:00:9e:e9:c4:06:a9:16:c3:6c:76:
         e1:2b:41:6f:ff:66:e3:c8:65:d5:f7:97:94:df:25:87:81:56:
         3b:77:0b:d0:3b:f7:56:3b:43:11:46:06:ad:aa:96:53:70:f5:
         d2:66:84:57:99:86:2d:1b:bd:05:47:02:dd:60:f1:c2:dc:8e:
         ca:4f:bf:01:c2:a4:26:40:04:2d:a3:1d:91:7a:8d:53:ad:df:
         da:1a:2a:79:75:d7:d8:97:51:7b:db:95:81:a1:f4:2a:21:0e:
         7f:f8:11:b5:ca:20:64:84:2a:e5:4a:12:79:3b:6c:3c:b7:54:
         7c:32:e2:4b:74:db:40:cd:98:89:3d:dc:85:68:ac:55:26:76:
         10:2c:ae:98:41:1d:5e:62:3e:ae:6d:b6:f3:1f:fb:48:c5:44:
         4a:47:de:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:26:29 2024 by rpki-client on console-ams.rpki-client.org