Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39ec8e93-eafd-31ef-a2e9-3fbc33604bf4.roa
File:                     39ec8e93-eafd-31ef-a2e9-3fbc33604bf4.roa (raw, json)
Hash identifier:          mK3uZD0FTFzRsPO/VSUSiXsR45DWSpTEgo9PrO9P+dk=
Subject key identifier:   B0:B8:E2:4A:44:08:0B:63:9B:57:C1:05:23:AA:09:E7:E1:C2:60:F0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849EBEA83AEC1F655CBD720F0C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39ec8e93-eafd-31ef-a2e9-3fbc33604bf4.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     22773
IP address blocks:        2001:579:c1d8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:83:ae:c1:f6:55:cb:d7:20:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=3b9afde2-76af-42d9-9635-27e23a30bda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:18:b7:da:ca:cd:b4:59:92:52:52:73:9e:
                    08:25:fa:78:ce:59:bf:9c:06:4a:39:de:91:15:36:
                    6a:3e:71:d2:26:c4:65:e9:72:da:68:4f:93:35:f5:
                    bd:97:4d:d6:7a:07:a2:53:86:f2:1c:4e:5e:15:dd:
                    42:c0:35:cc:36:e4:8c:4b:a7:53:65:34:02:10:ce:
                    78:0b:4f:b1:fc:3b:df:5b:81:ad:22:d1:6d:d9:c2:
                    25:28:29:02:2d:f2:cd:e7:2e:ce:fa:74:f6:36:50:
                    f1:b6:46:6c:b3:6a:b7:29:fb:88:6b:9f:5b:ad:9b:
                    4a:80:1f:a1:7d:28:df:48:ba:2a:69:72:33:6e:34:
                    1e:24:db:06:4e:2d:7c:2e:1d:00:db:3d:30:78:da:
                    3e:c4:52:b9:78:46:d6:aa:74:96:e1:6c:bd:25:90:
                    da:d2:27:b4:a8:3c:0e:e7:3a:d8:37:1c:a7:cd:c0:
                    67:0a:a9:ba:39:2e:63:06:0e:a5:ac:be:da:9a:0e:
                    79:0c:f6:d8:b6:a2:8f:12:b2:66:60:54:2c:06:f4:
                    c5:72:d4:02:46:a3:e2:9a:5d:c5:08:c1:a8:df:41:
                    1c:fc:6b:ba:2c:73:62:ec:ec:da:2d:35:9d:99:49:
                    79:87:9e:8c:73:cd:30:53:0f:35:ab:91:42:bc:6c:
                    99:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B8:E2:4A:44:08:0B:63:9B:57:C1:05:23:AA:09:E7:E1:C2:60:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39ec8e93-eafd-31ef-a2e9-3fbc33604bf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:c1d8::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c2:9a:df:93:36:62:37:cf:3e:6f:9f:10:0d:f8:b9:c2:8b:
         ac:4b:9c:01:89:00:07:39:06:eb:4b:ed:57:57:2a:62:2f:ef:
         27:ac:29:3f:4b:2a:cc:28:31:50:5f:5c:2d:9a:69:a1:37:ab:
         f3:73:1e:bd:71:2b:23:0d:65:a0:bb:0a:f4:eb:7b:0b:8a:43:
         e3:f8:1c:1a:73:4f:05:47:cd:0c:cb:2a:e4:7e:f9:48:5c:9b:
         ad:58:00:86:70:a0:72:55:72:48:c7:4b:3c:57:22:eb:c7:3c:
         18:f1:3b:ca:ee:5d:0a:f5:48:6e:7a:71:12:f2:3b:0e:15:ce:
         d0:64:b0:ce:e7:6d:db:38:34:3c:9d:3b:5c:be:e3:5c:36:b6:
         3a:fc:69:46:55:2f:b6:d3:b1:82:55:b2:2a:cc:1c:e2:dd:61:
         00:e7:16:a3:47:75:33:5d:d2:bb:f9:55:ba:7d:37:40:1b:97:
         e0:27:1c:81:71:52:3a:99:34:a3:57:00:49:0e:6f:c7:ce:b6:
         18:52:c6:8b:d2:f3:63:81:94:58:9a:14:0e:80:35:a7:8f:56:
         1c:6f:29:18:45:cc:b6:f5:4d:e3:6e:d9:6a:2e:40:4f:86:5f:
         b2:06:a0:57:f6:95:04:63:16:50:28:e3:72:15:fe:c5:ea:f2:
         41:18:1a:3e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnr6oOuwfZVy9cg8MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk
M2I5YWZkZTItNzZhZi00MmQ5LTk2MzUtMjdlMjNhMzBiZGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNkYt9rKzbRZklJSc54IJfp4zlm/nAZKOd6R
FTZqPnHSJsRl6XLaaE+TNfW9l03WegeiU4byHE5eFd1CwDXMNuSMS6dTZTQCEM54
C0+x/DvfW4GtItFt2cIlKCkCLfLN5y7O+nT2NlDxtkZss2q3KfuIa59brZtKgB+h
fSjfSLoqaXIzbjQeJNsGTi18Lh0A2z0weNo+xFK5eEbWqnSW4Wy9JZDa0ie0qDwO
5zrYNxynzcBnCqm6OS5jBg6lrL7amg55DPbYtqKPErJmYFQsBvTFctQCRqPiml3F
CMGo30Ec/Gu6LHNi7OzaLTWdmUl5h56Mc80wUw81q5FCvGyZ3QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLC44kpECAtjm1fBBSOqCefhwmDwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzllYzhlOTMtZWFmZC0z
MWVmLWEyZTktM2ZiYzMzNjA0YmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFecHY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA3Cmt+TNmI3zz5vnxAN+LnCi6xLnAGJAAc5ButL7VdXKmIv7yes
KT9LKswoMVBfXC2aaaE3q/NzHr1xKyMNZaC7CvTrewuKQ+P4HBpzTwVHzQzLKuR+
+Uhcm61YAIZwoHJVckjHSzxXIuvHPBjxO8ruXQr1SG56cRLyOw4VztBksM7nbds4
NDydO1y+41w2tjr8aUZVL7bTsYJVsirMHOLdYQDnFqNHdTNd0rv5Vbp9N0Abl+An
HIFxUjqZNKNXAEkOb8fOthhSxovS82OBlFiaFA6ANaePVhxvKRhFzLb1TeNu2Wou
QE+GX7IGoFf2lQRjFlAo43IV/sXq8kEYGj4=
-----END CERTIFICATE-----
Generated at Wed Jun 18 18:02:20 2025 by rpki-client