Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/447c841a-3d0e-3aee-9072-84822abeb22e.roa
File:                     447c841a-3d0e-3aee-9072-84822abeb22e.roa (raw, json)
Hash identifier:          u3NeCFv0x4Pa5G6/QU0eL7hyeiLAJvn4YLcykXk8ESM=
Subject key identifier:   6B:2F:FF:05:71:C1:9E:CE:F1:01:36:3E:09:79:7D:8C:89:1B:1D:95
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849244E8B5C8AF619272DE7B640
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/447c841a-3d0e-3aee-9072-84822abeb22e.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     22773
IP address blocks:        2001:578:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:8b:5c:8a:f6:19:27:2d:e7:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=0a195387-ff7e-48d6-be6a-a625155b7428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0e:04:32:55:3e:61:44:dc:f9:a5:18:22:29:
                    e8:4c:b3:6f:34:c7:5f:1d:79:ef:68:d3:45:5d:4a:
                    67:dd:63:c7:de:f2:4b:cf:0f:eb:e9:8e:c3:af:8a:
                    25:c8:d0:52:53:b4:54:2e:cb:05:85:02:6b:ad:ec:
                    a7:bc:0c:af:b8:b2:59:62:fb:88:cd:af:b8:1c:02:
                    49:88:f4:be:b8:fb:2c:ba:c0:f0:cf:e8:bf:19:7e:
                    01:a3:7c:6f:72:52:da:52:b8:28:58:9d:5c:f9:79:
                    9e:10:6c:1f:d8:23:68:e7:3f:49:a1:34:c2:62:20:
                    4b:63:f4:b9:76:f6:6b:61:f6:67:c0:7b:6b:25:eb:
                    b2:0e:f0:75:a7:6d:37:f2:57:12:72:70:23:57:4f:
                    96:23:6a:42:e7:a3:66:de:c4:97:63:43:df:96:93:
                    b1:dc:b3:4f:4b:25:b6:e0:cb:78:f9:e5:de:e1:7f:
                    90:5e:fb:20:88:1d:91:1e:34:8e:2e:ac:df:e5:a9:
                    a6:fb:05:d4:45:53:74:2a:1c:a4:b1:0d:ff:c6:ac:
                    65:6e:0a:f3:e8:c0:d7:6e:4f:97:cf:ad:ba:81:1d:
                    70:87:33:84:e3:b8:21:79:34:fc:05:09:dd:34:9c:
                    89:a8:b9:ba:8c:2f:77:66:fb:fc:d8:2d:1e:47:2c:
                    85:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2F:FF:05:71:C1:9E:CE:F1:01:36:3E:09:79:7D:8C:89:1B:1D:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/447c841a-3d0e-3aee-9072-84822abeb22e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:578:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:77:ef:d4:f0:96:c8:7d:b1:ec:ec:84:6a:ed:65:f7:2d:b9:
         8c:21:a5:c0:33:35:1f:25:d6:08:1d:9f:2f:98:39:ee:03:34:
         43:05:33:16:44:47:6d:16:53:89:e6:33:9e:4a:c9:ca:95:cb:
         7d:18:7e:bb:2e:b7:89:4e:f7:28:52:40:37:c0:15:78:45:80:
         3b:94:2f:4b:3e:0b:2d:3e:41:f0:0e:13:a5:60:7b:0f:a4:07:
         bc:73:51:89:65:ac:7c:c0:71:01:0c:c0:67:b8:05:09:df:c8:
         d8:d9:10:1c:92:97:85:78:d0:d9:84:77:4e:44:67:3d:68:d1:
         56:5d:ce:b7:b9:6f:01:88:6c:8a:7b:b3:a8:47:37:f2:b6:29:
         1d:8f:36:61:57:b3:ff:f8:2f:64:b2:3a:87:ac:ca:50:a0:d5:
         73:65:af:98:93:7a:a5:ef:04:aa:bc:0f:81:60:fd:ea:1b:a4:
         77:d4:44:bb:bf:6c:2b:d9:62:35:1e:9b:ec:ef:8e:7b:6d:a7:
         d7:cc:20:49:6c:06:68:4f:eb:f1:09:8e:67:8d:a1:67:dd:2a:
         f3:82:25:2e:51:5e:a1:70:20:9d:14:ce:3c:2e:5c:b3:04:cf:
         f2:99:20:da:52:7e:94:94:39:fc:ee:6f:04:c5:f5:c9:fd:e8:
         b9:d0:42:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkkTotcivYZJy3ntkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
MGExOTUzODctZmY3ZS00OGQ2LWJlNmEtYTYyNTE1NWI3NDI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ4EMlU+YUTc+aUYIinoTLNvNMdfHXnvaNNF
XUpn3WPH3vJLzw/r6Y7Dr4olyNBSU7RULssFhQJrreynvAyvuLJZYvuIza+4HAJJ
iPS+uPssusDwz+i/GX4Bo3xvclLaUrgoWJ1c+XmeEGwf2CNo5z9JoTTCYiBLY/S5
dvZrYfZnwHtrJeuyDvB1p2038lcScnAjV0+WI2pC56Nm3sSXY0PflpOx3LNPSyW2
4Mt4+eXe4X+QXvsgiB2RHjSOLqzf5amm+wXURVN0KhyksQ3/xqxlbgrz6MDXbk+X
z626gR1whzOE47gheTT8BQndNJyJqLm6jC93Zvv82C0eRyyFEQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGsv/wVxwZ7O8QE2Pgl5fYyJGx2VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDQ3Yzg0MWEtM2QwZS0z
YWVlLTkwNzItODQ4MjJhYmViMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeAAc
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE1379Twlsh9sezshGrtZfctuYwhpcAzNR8l1ggdny+YOe4DNEMF
MxZER20WU4nmM55KycqVy30Yfrsut4lO9yhSQDfAFXhFgDuUL0s+Cy0+QfAOE6Vg
ew+kB7xzUYllrHzAcQEMwGe4BQnfyNjZEBySl4V40NmEd05EZz1o0VZdzre5bwGI
bIp7s6hHN/K2KR2PNmFXs//4L2SyOoesylCg1XNlr5iTeqXvBKq8D4Fg/eobpHfU
RLu/bCvZYjUem+zvjnttp9fMIElsBmhP6/EJjmeNoWfdKvOCJS5RXqFwIJ0Uzjwu
XLMEz/KZINpSfpSUOfzubwTF9cn96LnQQrI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:53:36 2025 by rpki-client