Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8fda697c-e5c3-3a27-a8d8-91d50400df03.roa
File:                     8fda697c-e5c3-3a27-a8d8-91d50400df03.roa (raw, json)
Hash identifier:          DzYgUD6j72W8CNr52nNwoVRv2g69AsOowNGbmUlKn2E=
Subject key identifier:   58:6F:DC:14:32:A2:03:66:2C:85:C2:16:17:9B:84:F3:76:D5:92:66
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A8C70DE78387C2F14CB172000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8fda697c-e5c3-3a27-a8d8-91d50400df03.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     22773
IP address blocks:        2001:579:f240::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:de:78:38:7c:2f:14:cb:17:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=7c9e33f7-f1fe-4706-af3c-567745a9f79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:1d:25:64:86:ce:65:d5:6b:f2:19:25:36:
                    74:cc:a6:58:7c:e3:7f:5b:b4:b4:ba:6d:80:c9:d8:
                    0c:53:d9:1e:27:4c:98:c9:d3:7b:00:62:75:1a:a4:
                    9e:f3:a0:05:02:f3:8a:4b:69:d3:49:5b:08:1d:41:
                    a2:fa:5a:dd:95:ea:7e:4e:ca:ed:95:01:1b:d2:0c:
                    c6:87:f3:1c:78:ef:f9:72:fa:96:33:76:31:3e:6d:
                    cc:ae:4d:b6:8b:62:cf:cb:0d:72:fb:31:21:de:58:
                    71:a2:4a:78:0b:fd:18:b9:2b:70:11:32:e2:ce:3c:
                    42:3e:a9:7c:4d:00:e5:8c:ed:52:e8:34:dc:c6:83:
                    07:ab:e8:ec:c2:36:b2:b2:84:2a:d6:4d:98:8f:8f:
                    49:21:d7:9d:0e:7c:28:44:17:03:3b:ec:81:3e:3d:
                    b8:1d:b9:f0:4b:bd:f1:01:b6:8a:cc:08:f5:bb:ae:
                    c1:87:94:c2:a8:45:af:e6:bd:f8:53:02:a5:4a:ef:
                    4b:e9:93:d7:2e:bc:0f:70:ec:7a:7d:ab:b2:e8:05:
                    fe:76:65:22:d9:d8:f7:00:a1:8d:9f:07:0a:83:c8:
                    2a:91:42:ac:7b:82:dc:20:d5:08:02:ab:75:51:0c:
                    d6:69:58:2a:11:89:ef:2c:c0:7c:40:7e:81:1d:8e:
                    aa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6F:DC:14:32:A2:03:66:2C:85:C2:16:17:9B:84:F3:76:D5:92:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8fda697c-e5c3-3a27-a8d8-91d50400df03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:f240::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:7b:bc:74:2e:15:62:82:a1:aa:83:3d:aa:85:fb:f7:e0:96:
         de:c7:4b:f9:cb:02:12:93:64:1c:c4:da:bf:24:30:5f:cc:99:
         29:fb:2a:c0:ae:70:38:ff:dd:80:e9:1c:70:01:83:57:08:7d:
         a1:cd:fc:3e:08:c1:7d:e1:70:4c:83:1f:69:73:9a:b6:7c:f4:
         66:ba:12:e5:76:52:e8:a4:93:3c:81:b4:6b:fa:3d:4c:64:b0:
         17:77:6d:f2:d8:8e:74:28:88:58:68:95:7f:ef:ac:d8:47:45:
         bd:08:79:35:03:e8:14:d3:3b:7a:c5:c6:b9:da:20:18:38:bf:
         54:77:34:d9:d7:14:80:b7:7c:dc:17:c7:c8:62:36:4a:db:5b:
         ce:0a:8e:48:df:80:f3:2d:d0:08:5e:af:6a:fc:33:74:10:5c:
         f6:9c:ef:d7:82:ae:13:6b:cc:fc:41:7c:5f:a8:61:9b:ab:c6:
         f3:fc:d2:0f:63:1b:a4:cc:5e:bd:f6:23:9d:e9:42:34:56:ce:
         0d:ad:95:5e:49:92:6b:6e:05:97:71:d0:7a:7c:08:70:6b:37:
         66:4b:fb:a8:20:ae:d6:bd:32:b2:5e:eb:4c:85:d8:6a:d4:1d:
         2f:7a:29:27:59:31:72:82:70:7b:d5:29:f8:8b:86:aa:dc:8c:
         ac:5c:33:7b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqMcN54OHwvFMsXIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk
N2M5ZTMzZjctZjFmZS00NzA2LWFmM2MtNTY3NzQ1YTlmNzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX4dJWSGzmXVa/IZJTZ0zKZYfON/W7S0um2A
ydgMU9keJ0yYydN7AGJ1GqSe86AFAvOKS2nTSVsIHUGi+lrdlep+TsrtlQEb0gzG
h/MceO/5cvqWM3YxPm3Mrk22i2LPyw1y+zEh3lhxokp4C/0YuStwETLizjxCPql8
TQDljO1S6DTcxoMHq+jswjaysoQq1k2Yj49JIdedDnwoRBcDO+yBPj24HbnwS73x
AbaKzAj1u67Bh5TCqEWv5r34UwKlSu9L6ZPXLrwPcOx6fauy6AX+dmUi2dj3AKGN
nwcKg8gqkUKse4LcINUIAqt1UQzWaVgqEYnvLMB8QH6BHY6qOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFhv3BQyogNmLIXCFhebhPN21ZJmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGZkYTY5N2MtZTVjMy0z
YTI3LWE4ZDgtOTFkNTA0MDBkZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFefJA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFB7vHQuFWKCoaqDPaqF+/fglt7HS/nLAhKTZBzE2r8kMF/MmSn7
KsCucDj/3YDpHHABg1cIfaHN/D4IwX3hcEyDH2lzmrZ89Ga6EuV2UuikkzyBtGv6
PUxksBd3bfLYjnQoiFholX/vrNhHRb0IeTUD6BTTO3rFxrnaIBg4v1R3NNnXFIC3
fNwXx8hiNkrbW84KjkjfgPMt0Aher2r8M3QQXPac79eCrhNrzPxBfF+oYZurxvP8
0g9jG6TMXr32I53pQjRWzg2tlV5JkmtuBZdx0Hp8CHBrN2ZL+6ggrta9MrJe60yF
2GrUHS96KSdZMXKCcHvVKfiLhqrcjKxcM3s=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:45:05 2025 by rpki-client