Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34497119-a238-3ac1-b8ee-eb8a4a82e5fe.roa
File:                     34497119-a238-3ac1-b8ee-eb8a4a82e5fe.roa (raw, json)
Hash identifier:          NLjzpp0vaFq7BRdMnoNar9EXg+Jul02bn4ptbg4ZIXo=
Subject key identifier:   90:77:3B:79:C6:44:DC:F5:3C:B8:2D:E4:5C:16:7E:87:6B:9A:DA:68
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285848C150E627B4EA421B39488200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34497119-a238-3ac1-b8ee-eb8a4a82e5fe.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     22773
IP address blocks:        2001:579:d1a4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:e6:27:b4:ea:42:1b:39:48:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=7db2f33a-d28c-44ad-bc6c-b4ed83561bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:20:42:d8:15:2c:21:85:83:1a:6a:f8:65:01:
                    17:e0:de:41:e5:94:c8:35:a7:1e:29:3e:23:0d:2f:
                    c8:3c:a3:d7:d0:34:21:bb:eb:10:ef:0a:08:08:29:
                    9f:27:46:93:73:05:24:13:f3:00:36:89:c1:ba:65:
                    1c:23:e5:4e:01:47:eb:4c:b9:10:45:51:0b:38:3b:
                    05:a9:7c:79:f9:96:b4:7c:35:35:3b:65:6c:a2:ad:
                    e6:01:e8:56:d2:6d:62:8f:a4:a8:39:a2:46:bf:83:
                    bd:ba:11:75:be:85:ba:9e:2a:19:aa:e8:e4:1f:d5:
                    b3:f9:81:b5:ee:b4:12:99:d8:1d:c9:58:f8:59:54:
                    2a:4b:45:6f:49:d1:9a:86:80:13:d9:08:0a:b5:95:
                    60:6a:e8:b7:77:6a:06:91:be:bf:06:30:35:73:66:
                    ab:f7:87:1d:5b:6d:76:13:97:f0:db:dc:3f:63:c7:
                    7d:ab:c6:5d:a7:64:0f:54:0f:10:d7:92:70:0f:1a:
                    ea:15:d1:d7:c6:a0:0d:c2:00:06:4d:96:45:bd:b5:
                    17:4a:38:5c:be:08:cc:68:dc:d3:78:c2:94:cd:df:
                    1b:39:6d:e9:ac:9f:29:b4:37:c4:ef:c8:a0:96:af:
                    fa:c2:f1:b9:4c:dd:70:73:e3:03:03:e2:85:bd:de:
                    cb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:77:3B:79:C6:44:DC:F5:3C:B8:2D:E4:5C:16:7E:87:6B:9A:DA:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34497119-a238-3ac1-b8ee-eb8a4a82e5fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:d1a4::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:8a:6d:45:79:18:f2:c5:1c:c9:8e:bb:6d:df:b1:dc:7a:5f:
         f4:e6:e1:91:aa:d2:d0:86:bc:60:2d:b4:d9:f2:b8:58:bd:ac:
         a0:21:d4:2f:52:a7:b0:fd:20:48:79:e0:3b:96:cf:c2:01:c0:
         8d:04:c3:53:20:5a:ed:98:b1:a3:90:1b:06:b9:e4:37:a4:80:
         9b:12:2c:9c:e3:cd:df:f4:cb:e8:7c:8a:2a:99:b1:a5:25:6d:
         5b:1e:c3:62:e3:42:e5:cb:76:e7:14:ec:21:75:36:72:54:96:
         bd:e0:90:42:36:34:54:7c:8c:1d:61:34:3c:92:d5:b5:05:54:
         23:d1:80:4f:c3:b1:8d:1d:fa:7b:d1:0f:4d:a3:04:d3:6d:18:
         5a:a5:92:47:40:c7:35:d9:d7:44:94:a3:f3:9a:95:be:a7:7c:
         52:12:b5:fa:da:4f:94:df:30:6b:ce:4e:cd:5b:4f:e6:54:49:
         55:74:16:c9:06:7f:4c:ff:5d:90:fc:82:01:a6:8a:50:43:49:
         80:35:79:4d:52:67:8b:3f:68:ca:0b:9b:cb:61:25:f1:06:d9:
         28:03:e8:74:6b:25:34:1f:fe:bc:65:fe:a2:52:e1:5f:69:5a:
         42:29:8b:98:a1:38:3d:be:ad:95:64:b1:ca:80:61:10:f0:da:
         c4:77:af:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:42:27 2025 by rpki-client