Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1703b372-1fd5-39df-8507-70657905f958.roa
File:                     1703b372-1fd5-39df-8507-70657905f958.roa (raw, json)
Hash identifier:          W9sYjvtx0o5AxZX7baS3mDpiOa1c7pUOFt2xvWzt7gs=
Subject key identifier:   E4:8D:22:F3:BB:AF:B1:B5:70:91:C9:79:9D:6D:CC:F5:C8:52:D3:93
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849EBEA59E3E05930107BED2400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1703b372-1fd5-39df-8507-70657905f958.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     22773
IP address blocks:        2001:579:50f0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:59:e3:e0:59:30:10:7b:ed:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=0232739c-a3ce-4396-b9cb-df88272fb0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b2:57:8a:2e:85:eb:fe:01:10:d4:e6:f0:69:
                    9e:5a:bf:e6:6d:59:c1:6f:d2:9a:cf:d6:01:b5:c1:
                    22:75:c5:50:42:52:6d:8f:9e:17:84:93:d2:83:54:
                    aa:8d:5e:51:28:99:18:c8:89:c3:46:db:30:00:84:
                    17:2d:04:e4:ae:e4:52:a6:26:a9:a0:fc:6f:ae:9a:
                    ea:04:72:37:52:f0:25:d6:08:6a:ae:f7:7b:6e:df:
                    89:28:67:7a:5e:75:a9:36:f4:f4:55:92:00:02:0d:
                    f2:8b:a0:bb:5f:b6:31:ca:78:b7:3b:c9:ce:be:a8:
                    3c:22:f7:c8:a3:9a:c9:6f:a7:31:17:b8:ea:7b:24:
                    5e:6a:91:c3:08:84:ad:cb:f0:be:58:e7:d1:a8:fa:
                    5a:13:36:c2:50:1c:32:5d:3d:05:44:1c:d8:66:5c:
                    b8:24:2d:4a:39:b0:17:c4:b8:76:4e:1b:95:78:6a:
                    a0:cc:6d:98:42:0c:0d:2b:0e:cc:ce:ed:d8:e6:f3:
                    3c:da:ff:1a:7b:c1:1b:58:f7:6d:8d:95:12:e8:75:
                    50:d5:fb:9a:ed:fb:d1:84:d7:4f:53:9b:be:92:da:
                    57:e0:a4:25:76:ae:a9:16:00:64:90:f2:0a:63:b5:
                    63:f4:5c:17:16:f5:6d:44:2e:e3:86:7f:23:47:54:
                    49:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8D:22:F3:BB:AF:B1:B5:70:91:C9:79:9D:6D:CC:F5:C8:52:D3:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1703b372-1fd5-39df-8507-70657905f958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:50f0::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:e2:e2:7c:3f:ef:f2:07:e0:57:6a:4f:c8:c5:00:9d:cd:7b:
         40:06:29:33:6c:b2:99:e1:cc:b2:81:cb:39:ab:7f:0d:bb:fb:
         c4:ba:ca:dc:2b:58:bb:aa:bb:81:88:84:53:fb:5e:b1:a5:5e:
         11:3c:1a:f5:e4:42:ab:0c:3a:cd:92:cf:b1:3c:ef:3c:91:b4:
         79:f4:05:78:b2:d5:a2:4b:18:4f:93:4e:96:4a:81:28:0a:21:
         b4:b0:74:7f:2c:40:f4:ef:92:4f:74:5a:ee:83:94:98:3e:eb:
         c1:61:c5:11:f6:cd:55:3c:04:e0:bb:89:91:00:56:fe:83:36:
         15:b2:bc:3c:8d:fd:19:a4:8b:5b:cb:e5:d5:48:cd:80:a6:b3:
         6f:bf:8e:f1:d4:76:2a:a1:64:b0:d4:65:f4:28:79:37:cd:e7:
         50:eb:72:e1:c9:31:48:86:95:d3:2f:52:4a:19:75:cc:c9:2e:
         d3:06:f1:63:cc:0b:11:6a:f8:3d:65:4c:ce:3c:84:ce:4f:ee:
         ea:20:cd:26:49:e7:4a:c6:9f:d6:9e:6a:f4:89:e3:4b:3d:5c:
         77:41:0f:d1:af:2f:58:09:e5:20:41:48:1f:17:ba:94:14:22:
         04:2e:51:44:71:5a:79:27:86:25:30:f6:ed:fe:29:b4:38:84:
         76:6c:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:26:14 2025 by rpki-client