Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/604fe3bf-1a7a-3dee-bd49-459caecc2dce.roa
File:                     604fe3bf-1a7a-3dee-bd49-459caecc2dce.roa (raw, json)
Hash identifier:          r//+z5Jyi0tTYj7B51KFYwjECP8anMeQ/2+K8trfhck=
Subject key identifier:   DE:07:03:5B:7C:52:35:2B:62:48:33:CE:B1:0E:B3:F7:4E:1B:DA:FE
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849EBEA5AD9F5D811A0D5F48680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/604fe3bf-1a7a-3dee-bd49-459caecc2dce.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     22773
IP address blocks:        2001:579:93c6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:5a:d9:f5:d8:11:a0:d5:f4:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=b1e323b0-244d-4314-bb0e-49208c440cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:25:45:47:58:f6:f5:82:c7:07:e6:49:d6:73:
                    d9:7a:eb:13:15:60:5c:ca:f4:c3:a5:7e:54:db:95:
                    7d:63:e0:d7:3f:7d:82:b5:7a:76:90:75:61:c3:17:
                    33:1c:85:72:8b:29:b2:22:ac:92:ce:1a:cf:b7:db:
                    48:c5:04:82:59:83:81:e4:ea:ab:cb:a6:96:21:95:
                    c7:75:de:14:25:00:3b:6e:24:7b:7f:a5:8d:70:ca:
                    96:66:f2:af:5e:b0:36:b4:d2:6f:83:89:95:1b:44:
                    45:ce:79:c2:cc:7b:9e:ee:37:de:7f:ce:0f:78:90:
                    07:c6:36:ef:33:b7:37:a4:13:e7:8d:3c:ff:a8:8a:
                    f0:82:ce:f4:02:cc:e0:66:4f:69:a0:7f:a5:b2:2c:
                    b0:9c:e0:f3:3e:51:07:95:92:bb:f4:1e:a4:4e:89:
                    b7:5b:26:f9:64:72:5a:f2:0c:f8:eb:09:61:e6:be:
                    30:0b:bd:bb:99:13:28:be:75:ca:6c:03:fc:5b:29:
                    3c:7a:8d:3f:8d:dd:f7:2e:32:fe:62:2c:a5:a3:0c:
                    59:2e:2a:07:66:28:a0:b2:7b:a5:7b:b1:82:2f:0c:
                    b0:e7:89:dc:85:95:06:f7:9b:06:be:cf:e7:8e:03:
                    5c:e7:c1:86:5b:75:78:a9:e2:37:ff:a2:29:7f:70:
                    cd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:07:03:5B:7C:52:35:2B:62:48:33:CE:B1:0E:B3:F7:4E:1B:DA:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/604fe3bf-1a7a-3dee-bd49-459caecc2dce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:93c6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:84:9f:d9:a9:2f:65:1e:ce:4f:21:11:e4:26:07:27:d7:3a:
         31:e4:89:04:85:9f:63:05:b1:1a:a7:7f:6b:a8:9b:ef:a0:92:
         69:5c:ee:df:78:17:c9:70:88:2f:62:80:f6:0e:ad:86:ad:45:
         c4:d9:5d:7a:aa:48:0a:4b:02:44:90:29:c2:0d:e3:41:27:00:
         84:a7:8b:23:78:9b:e2:9f:fa:64:93:f1:01:a8:19:05:99:15:
         c9:1b:8e:64:fd:ec:4a:b0:c7:be:69:99:cc:d7:26:5f:93:d8:
         95:27:f2:eb:38:02:6b:b3:db:72:82:00:c6:c9:28:cd:a8:9f:
         2b:1c:1f:b5:5d:a2:4f:a9:d5:5d:49:22:e9:65:ea:e8:18:1c:
         48:83:f2:52:d7:7a:ca:51:45:7d:97:23:7d:c6:90:be:9e:cf:
         d2:9e:8b:6d:80:54:3c:4b:aa:c0:40:73:bf:6a:8f:af:f4:c6:
         b3:a3:bd:d5:b8:ee:47:b1:0e:af:8d:9a:26:a0:f8:24:4b:cb:
         7f:e3:c9:eb:35:37:0b:51:fb:95:0a:e3:ca:b5:64:6e:1f:cb:
         fa:7e:20:cc:cb:03:4b:c1:a8:eb:63:ab:10:b7:38:5e:c3:04:
         8d:f4:71:6d:2a:c4:68:f9:ea:80:8e:a3:2d:5b:41:4a:79:8f:
         c4:da:8f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:39:31 2025 by rpki-client