Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2bda8a6-441e-37a5-8eba-dc205464811f.roa
File:                     c2bda8a6-441e-37a5-8eba-dc205464811f.roa (raw, json)
Hash identifier:          tpajc0x2qW03xlprWw5dJNvQEa0b4oiwbfR7CDSs7Ow=
Subject key identifier:   6D:C9:4B:BD:A1:1F:31:9D:D4:D6:61:E4:67:06:17:04:26:0F:FC:1B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849EBEA5BC5D1E65B515C390D80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2bda8a6-441e-37a5-8eba-dc205464811f.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     22773
IP address blocks:        2001:579:c080::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:5b:c5:d1:e6:5b:51:5c:39:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=bbe7723b-e500-45fa-83a1-3e6e96c1e36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:07:0e:77:60:08:44:3a:05:ae:96:84:df:7e:
                    38:f5:9c:6b:ed:43:09:da:2c:95:25:30:53:55:c1:
                    3f:70:df:a9:f0:07:23:70:44:a3:ff:f7:99:ee:67:
                    a6:e4:ce:32:12:07:26:f2:9b:1a:2f:5e:f4:3d:c2:
                    86:76:14:58:b4:7c:80:82:b2:4a:ad:a0:f5:87:3e:
                    e2:42:34:13:27:74:df:55:6c:f1:c2:54:ed:66:e5:
                    8d:c0:5a:20:5a:2a:f5:22:fa:04:27:79:fc:80:1e:
                    38:98:3b:c9:cc:d0:3d:8c:39:ba:77:da:8b:52:8d:
                    08:1a:94:ca:1c:29:1d:80:11:19:8d:cd:9d:53:4d:
                    6c:b6:48:a6:38:fe:03:3f:7e:ef:d5:8d:8b:4d:bb:
                    9e:72:9d:78:0e:ff:30:22:00:27:29:70:64:56:df:
                    12:55:a3:2d:38:13:1a:45:90:39:61:16:e1:de:1c:
                    e9:3d:33:a2:2c:5d:41:ae:c3:ef:96:75:c0:ea:86:
                    70:0d:44:07:e1:b4:ef:63:29:3b:9a:24:37:50:1c:
                    58:34:f2:53:54:70:14:43:82:73:63:a2:0a:d4:da:
                    9c:e2:3f:e9:d7:e3:18:fd:1d:ac:e3:43:39:53:e3:
                    24:4c:82:f3:54:a3:83:12:d9:8e:67:17:03:70:09:
                    a4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C9:4B:BD:A1:1F:31:9D:D4:D6:61:E4:67:06:17:04:26:0F:FC:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2bda8a6-441e-37a5-8eba-dc205464811f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:c080::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:94:5a:26:dc:bb:4f:70:9d:df:55:6f:ff:5a:d1:4e:bc:d3:
         9d:f5:d1:d4:f2:db:01:b8:3b:3b:61:a6:96:71:fb:ab:ac:12:
         40:1a:96:f3:77:26:b3:5a:44:84:9a:21:d4:e6:05:6d:45:aa:
         e6:47:c8:ea:2e:ce:3b:1e:62:be:c9:93:66:6d:da:7a:f6:ca:
         f9:56:4c:4d:b7:d9:98:d9:4a:c8:a4:8d:98:fd:36:a4:d8:82:
         a3:17:9e:47:f5:6a:b4:f7:69:af:04:9a:83:fa:08:67:f3:9f:
         da:df:76:42:66:e4:93:18:f3:7e:21:f4:24:4a:fd:9a:aa:6a:
         ad:ca:f4:24:07:1c:21:a0:dd:67:c6:30:9a:4e:23:7d:6d:23:
         92:2e:57:51:57:53:4b:fb:ac:ed:c8:b2:4d:cc:2f:3a:c1:42:
         df:e3:cb:30:ca:ec:0d:de:bf:04:28:aa:2c:62:c4:57:10:38:
         1e:24:68:a4:e4:d9:15:4c:5e:a5:fd:82:06:f8:ac:b7:bb:3e:
         62:fc:95:6c:eb:ea:c9:0a:fe:15:b8:12:87:c7:c7:9a:ae:00:
         0e:e5:42:d2:94:2e:db:12:e2:84:a6:8f:31:f8:91:e7:4e:67:
         6b:8d:29:fd:36:07:ea:e9:59:bb:31:43:36:53:ee:5c:f4:e9:
         96:b5:ec:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:57:36 2025 by rpki-client