Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d7bf102-67fa-3b2b-a976-63932f1fac88.roa
File:                     2d7bf102-67fa-3b2b-a976-63932f1fac88.roa (raw, json)
Hash identifier:          +6LvMhtKFhUII8f4I4O+Q7lQ1P2/5hedQtfylKHZ5Es=
Subject key identifier:   06:42:A8:A9:62:34:A2:5F:84:EF:D5:9D:CE:88:71:CF:2F:CC:CF:C2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A03A5590D808E18E313561400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d7bf102-67fa-3b2b-a976-63932f1fac88.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     22773
IP address blocks:        2001:578:1a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:59:0d:80:8e:18:e3:13:56:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=f990a840-30c1-4060-8c9d-e85cedf9e879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c5:4f:84:96:b5:6f:1a:79:8e:bb:2c:22:f0:
                    12:89:56:75:05:4f:67:71:ae:91:b9:a4:a7:2a:33:
                    ac:d5:cf:ba:0f:d8:a5:da:1c:7a:ab:f3:7c:6e:5f:
                    0a:02:94:b5:01:c6:4a:91:d0:64:63:d7:a8:9f:d8:
                    83:ba:1b:e4:1a:9a:35:a1:a2:40:ab:2b:b6:3b:0f:
                    44:d6:99:23:44:6c:b4:b9:3f:09:2d:4d:c6:74:35:
                    62:8a:89:09:79:ab:23:5a:fa:ce:34:f9:51:c7:7d:
                    e7:26:ff:04:f2:0c:a1:79:0a:1d:8e:3a:5a:99:88:
                    08:dd:7e:0b:15:d6:d5:3d:6c:ff:c9:ed:20:b3:fa:
                    0d:ac:a3:77:54:52:ce:eb:de:81:53:89:09:a3:82:
                    94:1c:27:a4:26:26:6e:c4:df:18:d3:8e:eb:b5:82:
                    44:84:b3:98:db:79:01:cd:10:47:67:34:67:cd:e1:
                    af:cc:5c:0b:bb:37:02:90:12:5c:28:22:4f:2e:6f:
                    3c:85:d9:51:d7:f5:d9:65:66:9f:af:89:be:2d:35:
                    98:b6:ba:a7:f8:5d:29:a4:b4:4b:61:b3:02:06:2a:
                    c5:50:b0:38:ef:ce:ac:cf:cb:81:0d:79:fa:bb:14:
                    6c:b8:c2:d7:15:23:e7:1a:ac:d7:22:0f:18:5b:71:
                    9f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:42:A8:A9:62:34:A2:5F:84:EF:D5:9D:CE:88:71:CF:2F:CC:CF:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d7bf102-67fa-3b2b-a976-63932f1fac88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:578:1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:81:2c:c9:4d:63:69:05:35:a8:29:fe:cc:03:32:24:c9:55:
         7f:11:99:e6:e4:30:59:eb:30:76:86:c3:e5:94:88:00:3a:31:
         28:e2:92:7a:48:79:99:49:24:e7:de:03:1b:ba:39:46:dd:b8:
         99:ee:85:38:3b:89:eb:2d:83:ee:d6:04:8f:9c:0f:53:e1:2d:
         84:e3:60:ec:ce:2d:4a:c4:53:bc:f6:20:c7:6e:b5:10:83:8b:
         83:f5:ab:f4:c9:53:d5:cc:5a:e7:32:b9:32:4d:89:a1:69:9d:
         97:7d:48:23:5e:e5:29:91:be:08:5c:83:f9:b5:73:a6:ab:99:
         30:72:f8:67:ef:cc:dc:6c:e4:e9:a1:5c:24:72:b4:5a:7b:c5:
         4d:e8:1a:3a:83:c5:58:c9:e0:77:a7:db:f7:a7:ad:c8:11:78:
         73:a0:59:3a:5a:42:49:4c:0c:62:43:b4:ce:5e:e2:7d:36:24:
         dc:31:67:05:fd:fc:0e:0e:87:9c:e0:fa:0b:94:9d:10:ad:46:
         9e:8c:78:00:dc:81:79:b9:4f:26:3a:f8:ea:bf:bd:38:60:c8:
         42:d2:66:92:2d:6a:e2:40:79:ee:e8:cc:ba:f0:58:81:09:f9:
         77:e9:bc:97:df:75:65:b2:dc:08:7e:b4:40:81:d7:70:ba:20:
         07:c9:9d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:22:19 2025 by rpki-client