Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3db209d7-0c8c-36dc-9654-57475404a61c.roa
File:                     3db209d7-0c8c-36dc-9654-57475404a61c.roa (raw, json)
Hash identifier:          JjTB6w47kSKdLlipRZcaCQPpmVn0thbIs0j91XvG1mE=
Subject key identifier:   A7:59:B3:19:73:20:92:69:BE:56:7E:1C:34:C9:D6:0F:C0:18:DE:07
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858482D5AA0A244BADAABF5A9E890
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3db209d7-0c8c-36dc-9654-57475404a61c.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     22773
IP address blocks:        2001:579:2430::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:a0:a2:44:ba:da:ab:f5:a9:e8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=a49ff96a-133d-488f-ad24-fbef26fb9926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:15:a0:57:4a:48:f2:dd:6f:b3:77:a0:d5:91:
                    39:df:cf:2a:76:fd:ec:cc:19:20:26:be:9d:e4:a9:
                    e9:2a:6e:bf:80:76:f0:c1:01:9e:19:85:80:20:cd:
                    a8:d3:5f:9e:f0:71:f5:2d:2f:3d:c8:10:76:13:4e:
                    66:de:92:38:1d:0f:33:2b:41:b4:27:2b:10:39:af:
                    5e:2c:fe:c5:bf:cf:db:7e:96:9e:c9:5a:52:69:90:
                    95:ef:bc:f8:d6:71:29:74:bf:1f:d4:c0:f7:b9:db:
                    89:48:38:0d:34:e8:ff:5d:06:dd:fd:fc:8b:20:17:
                    86:75:07:7a:e8:aa:89:b2:dd:d3:1b:38:8c:9d:55:
                    12:d0:ac:1d:c1:3a:94:78:a9:14:9c:48:09:54:be:
                    b4:7d:e6:b1:a3:57:e8:be:ec:91:57:98:88:b8:cd:
                    db:63:f6:8e:ed:ff:a1:42:92:92:25:21:a5:1e:b7:
                    df:81:56:ee:03:c0:9e:3c:03:dd:11:85:a4:21:b4:
                    2d:27:e7:72:ea:e2:6a:7f:45:8d:b7:74:fc:e0:19:
                    80:30:80:e6:22:da:c9:3b:4a:3b:b1:d9:bb:ce:0b:
                    25:ad:66:a9:6a:a3:1c:0b:2b:f4:d5:29:98:17:d4:
                    e0:49:b4:de:38:9a:8a:07:38:e8:63:b6:5d:7e:32:
                    79:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:59:B3:19:73:20:92:69:BE:56:7E:1C:34:C9:D6:0F:C0:18:DE:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3db209d7-0c8c-36dc-9654-57475404a61c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:2430::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9f:90:de:62:6b:15:52:5f:45:e0:fe:67:4e:dc:0f:2d:58:
         f0:b0:b8:84:b8:10:a0:9d:ae:9e:3b:cb:dc:30:6f:91:92:76:
         6c:7e:1b:e5:ad:25:3b:d7:21:f2:16:6f:a9:7f:74:a6:b4:68:
         60:74:39:65:71:22:83:8e:7a:9c:f0:e2:44:db:7d:81:1f:92:
         66:bc:ba:42:5a:01:88:3b:b2:7c:55:00:d8:7a:06:bf:25:f8:
         5c:80:87:9b:5d:bf:4f:71:b5:50:38:6c:01:35:80:f4:05:cc:
         2a:53:67:8c:db:2e:85:10:bf:30:bf:81:79:ba:61:27:23:63:
         fe:2c:e1:b2:25:36:01:5f:4b:c1:ed:c5:f6:80:b6:ab:fb:b6:
         21:f3:54:8c:fb:ef:0b:db:d7:e7:b2:f0:ff:e8:a5:fb:c4:9d:
         52:4e:c2:e9:29:6b:76:b5:28:79:eb:50:87:c0:b2:fc:ba:45:
         6c:34:3c:5f:06:fc:1e:7d:1d:8e:27:dc:20:9b:b6:5b:35:60:
         3b:72:3f:f2:f9:30:54:ad:25:5f:a4:7a:5d:6c:4a:81:e3:77:
         2c:10:7e:55:56:7a:ee:57:ec:ed:0c:d9:62:f3:61:f1:a0:0c:
         a4:35:61:0d:35:ea:d4:dd:db:10:2d:6c:f2:47:1e:b4:11:f8:
         57:79:74:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:19 2025 by rpki-client