Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90d6a5dd-15b1-378e-896a-c681773c5df6.roa
File:                     90d6a5dd-15b1-378e-896a-c681773c5df6.roa (raw, json)
Hash identifier:          Qylxxr2HVZf+cr7mJRoGMRV3HRz7htH59Lj+nxUpWy8=
Subject key identifier:   A9:70:6C:D0:E1:D6:85:C3:29:45:87:B9:9E:4A:2D:EB:20:FC:D7:10
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A71EB56289BBCA7421165E680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90d6a5dd-15b1-378e-896a-c681773c5df6.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     22773
IP address blocks:        2001:579:d288::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:56:28:9b:bc:a7:42:11:65:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=07162af0-3936-4fa9-b937-4eee7f5079a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:3b:37:b8:c1:82:87:ad:fb:eb:74:7f:19:
                    b7:cb:bf:5e:13:90:e4:f9:5c:e4:8a:ed:81:08:8c:
                    62:1a:75:6a:51:bd:7f:70:bc:e3:0e:37:95:1e:b7:
                    a4:cc:80:d5:39:f8:8b:7d:2b:60:5d:5c:fd:42:88:
                    d3:1b:89:48:26:83:a5:39:5e:96:84:04:da:12:ae:
                    90:d9:b7:1f:86:6f:b9:53:0e:08:04:00:e4:0d:2e:
                    87:1a:7d:1a:2b:62:bb:58:03:a0:b6:45:85:4d:42:
                    63:d2:c5:ce:54:ba:0b:4c:61:8d:cd:32:97:5a:75:
                    fb:d7:dd:1f:1a:b7:3f:64:ce:26:70:8a:5f:e6:87:
                    0a:f0:7f:2f:e4:fb:c0:d5:31:63:e0:d3:fa:71:12:
                    cd:75:e8:9a:a7:ae:4a:dd:c9:37:4e:b6:f7:87:6b:
                    9d:29:bf:07:d0:e8:3e:0a:36:8b:36:e0:85:c9:63:
                    09:9b:46:c3:ab:02:8b:4a:4c:78:8f:a5:4d:36:10:
                    f2:de:12:ce:da:5e:92:b3:26:ae:c7:06:c7:6a:96:
                    a8:ff:a9:ad:26:e5:55:9c:81:ee:31:36:89:df:db:
                    ea:85:5e:a2:ee:64:4d:20:bb:f4:b2:f7:41:c6:83:
                    09:d0:5f:05:e2:a3:a0:f9:07:3c:da:83:3a:04:a4:
                    ab:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:70:6C:D0:E1:D6:85:C3:29:45:87:B9:9E:4A:2D:EB:20:FC:D7:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90d6a5dd-15b1-378e-896a-c681773c5df6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:d288::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:2c:ad:42:4a:0f:7a:95:d8:69:7e:21:f3:5a:0f:75:e3:4d:
         8b:18:f3:5b:f3:8d:39:ba:aa:5f:18:05:06:4c:cf:49:77:74:
         3e:77:74:59:d2:a6:18:8b:02:56:dd:d9:32:c1:e4:ca:35:20:
         08:e1:d7:e9:f4:58:64:e1:5b:7a:96:f7:bc:4e:bd:33:6f:93:
         9b:51:3b:44:ee:d1:32:3a:b0:f6:8b:72:5d:43:e8:02:76:f9:
         59:2f:62:f9:a9:70:fa:eb:49:81:d7:df:0a:f4:de:8f:84:51:
         08:00:fb:ae:d2:93:61:88:bf:d7:c2:24:c7:11:12:54:c6:a3:
         c3:34:7f:4d:42:73:22:9b:99:ce:62:dd:2e:37:c5:48:cf:14:
         e5:2f:db:43:a2:37:d0:73:c5:de:61:04:3b:af:4e:4b:f1:b1:
         c0:ef:5c:7a:06:f0:44:08:c6:6b:9d:a6:9f:d6:b0:c5:d0:16:
         ff:5b:56:b8:06:a0:ec:13:15:49:30:e5:82:ba:34:d2:8c:5b:
         51:5d:f4:aa:a0:b9:96:ff:32:f6:31:68:fb:17:0a:3e:c7:60:
         29:c9:be:20:3a:d5:4e:61:78:80:55:24:1b:e8:45:b6:ce:13:
         2f:b6:af:23:47:f7:f9:e5:b8:50:66:67:68:08:39:ba:01:b6:
         03:d9:43:94
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpx61Yom7ynQhFl5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk
MDcxNjJhZjAtMzkzNi00ZmE5LWI5MzctNGVlZTdmNTA3OWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00Y7N7jBgoet++t0fxm3y79eE5Dk+Vzkiu2B
CIxiGnVqUb1/cLzjDjeVHrekzIDVOfiLfStgXVz9QojTG4lIJoOlOV6WhATaEq6Q
2bcfhm+5Uw4IBADkDS6HGn0aK2K7WAOgtkWFTUJj0sXOVLoLTGGNzTKXWnX7190f
Grc/ZM4mcIpf5ocK8H8v5PvA1TFj4NP6cRLNdeiap65K3ck3Trb3h2udKb8H0Og+
CjaLNuCFyWMJm0bDqwKLSkx4j6VNNhDy3hLO2l6SsyauxwbHapao/6mtJuVVnIHu
MTaJ39vqhV6i7mRNILv0svdBxoMJ0F8F4qOg+Qc82oM6BKSrrQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKlwbNDh1oXDKUWHuZ5KLesg/NcQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTBkNmE1ZGQtMTViMS0z
NzhlLTg5NmEtYzY4MTc3M2M1ZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFedKI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHksrUJKD3qV2Gl+IfNaD3XjTYsY81vzjTm6ql8YBQZMz0l3dD53
dFnSphiLAlbd2TLB5Mo1IAjh1+n0WGThW3qW97xOvTNvk5tRO0Tu0TI6sPaLcl1D
6AJ2+VkvYvmpcPrrSYHX3wr03o+EUQgA+67Sk2GIv9fCJMcRElTGo8M0f01CcyKb
mc5i3S43xUjPFOUv20OiN9Bzxd5hBDuvTkvxscDvXHoG8EQIxmudpp/WsMXQFv9b
VrgGoOwTFUkw5YK6NNKMW1Fd9KqguZb/MvYxaPsXCj7HYCnJviA61U5heIBVJBvo
RbbOEy+2ryNH9/nluFBmZ2gIOboBtgPZQ5Q=
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:20:30 2025 by rpki-client