Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dec1b41-12c6-363d-88d2-852080a81974.roa
File:                     3dec1b41-12c6-363d-88d2-852080a81974.roa (raw, json)
Hash identifier:          fB2nsHzeEJse9mK1GDWeCeNwa8DyYjegEXhxLxkXbFg=
Subject key identifier:   88:F9:F9:2B:75:01:5D:6F:DB:74:D6:DD:BA:3F:AD:48:72:86:1D:0C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849EBEA843308EC8E164BDBF0C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dec1b41-12c6-363d-88d2-852080a81974.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     22773
IP address blocks:        2001:579:d1f0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:84:33:08:ec:8e:16:4b:db:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=55116849-90c4-496a-a4d1-03ddeb9f8c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:07:cf:45:e8:2b:43:1d:a7:ad:29:7d:c8:3e:
                    22:43:e3:af:0f:99:10:0a:25:bc:b1:4d:1b:c0:86:
                    c8:c3:65:73:2b:2b:a0:9d:29:94:d2:cf:64:66:b3:
                    54:c2:7e:95:4e:b9:dc:a2:ad:a0:7d:ab:72:ea:f6:
                    0f:80:01:f6:92:1f:c3:92:76:23:61:ab:e6:e7:f0:
                    a7:dc:73:c5:14:97:68:24:7d:5f:11:1f:24:d2:83:
                    83:3d:ee:6b:be:f6:13:b2:a7:14:eb:73:4a:83:16:
                    f6:e9:99:fb:ed:f3:4e:34:8f:9b:68:3b:29:0b:c1:
                    e0:96:4d:c6:ed:48:4b:e0:b5:1f:13:90:6f:d3:c9:
                    6a:ac:76:3c:f2:77:b5:73:00:52:2d:34:0d:8f:59:
                    b6:06:eb:47:3e:c6:38:5f:92:72:1a:89:0c:af:56:
                    e0:31:07:02:98:1d:62:57:9d:32:3d:0a:fa:7a:67:
                    cc:fc:b0:65:25:d2:e9:22:38:7e:a1:56:a4:e5:03:
                    49:88:d1:35:9f:37:09:2b:a4:27:df:87:54:4f:f9:
                    25:6f:fd:03:c9:3f:0e:15:49:94:05:b9:d1:e2:06:
                    4a:61:7c:cd:c3:fb:0b:8a:ce:98:a6:b8:ca:77:db:
                    b1:74:18:73:89:ee:38:b7:7c:0e:94:84:54:54:23:
                    cc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F9:F9:2B:75:01:5D:6F:DB:74:D6:DD:BA:3F:AD:48:72:86:1D:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3dec1b41-12c6-363d-88d2-852080a81974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:d1f0::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d5:67:bd:5e:a2:49:57:74:6e:3c:18:b7:69:2b:17:1c:d0:
         a5:f1:b9:de:50:6d:d6:78:29:e0:c2:8c:ba:ca:93:88:61:9b:
         f8:af:e6:34:fd:99:1e:08:f9:6c:9e:e3:ff:77:dc:0d:c1:b4:
         ea:35:3d:55:53:28:d9:6a:16:2c:cb:c1:13:95:d7:c7:6b:d5:
         fe:f4:39:45:6e:a5:0a:0f:d8:42:1b:5c:cf:da:57:7e:45:4b:
         aa:ea:8f:b7:33:e7:ab:91:f6:80:8a:2b:7d:de:ca:9c:74:98:
         42:b5:74:e5:50:af:61:4d:69:21:a2:51:4c:af:99:a9:5e:e6:
         fe:3b:25:5a:06:76:72:b1:9e:d7:ac:c0:b4:d0:c9:74:59:99:
         ea:03:a0:1e:0c:b1:43:ae:1f:2f:c8:64:fb:14:eb:66:df:97:
         61:57:9e:05:24:f2:50:be:64:2d:eb:e2:95:55:91:48:38:eb:
         66:bc:06:f8:f0:d5:26:ca:ef:12:68:96:cd:7d:43:de:77:fe:
         b7:c2:e7:43:90:32:2a:3e:1b:a3:91:c4:08:51:5a:5c:4d:7e:
         09:5e:66:7d:20:07:06:52:3d:bc:61:c6:c3:a7:81:19:9e:98:
         52:48:f3:e8:4f:df:ac:26:37:62:62:c2:ac:67:45:96:1a:7b:
         87:b8:a3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:06:23 2025 by rpki-client