Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f219b02-6631-3cee-8344-bc45607d16c8.roa
File:                     4f219b02-6631-3cee-8344-bc45607d16c8.roa (raw, json)
Hash identifier:          +OQbCuL3e8HWzYoH0thoWxA7IJ/iypZvR37VeafQuaI=
Subject key identifier:   BB:C3:50:16:DF:8C:EC:B0:62:50:83:36:ED:C7:A0:FC:7C:AE:03:91
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858483B50158D1CA2A8BC51E5ED00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f219b02-6631-3cee-8344-bc45607d16c8.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     22773
IP address blocks:        2001:579:6189::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:15:8d:1c:a2:a8:bc:51:e5:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=4f6d0c42-ad5f-4318-aaf7-0ffb6fcb9afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:15:9f:f2:d7:c3:58:bf:3c:e0:91:7b:5a:
                    8b:5c:06:b5:fe:2d:95:73:2b:21:1e:fa:1d:aa:cf:
                    a6:2d:ca:04:db:ee:29:f2:c3:0d:39:8d:91:72:24:
                    63:dc:1b:37:ac:f7:be:35:2f:3d:0d:29:28:aa:e9:
                    cc:87:2f:0b:55:37:c8:8a:7d:c4:1f:3d:71:cb:5c:
                    50:0e:2b:aa:a6:da:88:d1:bd:fe:47:99:a2:91:ae:
                    fa:b7:9f:e8:c9:0d:64:3c:4f:ce:ff:e2:63:13:f5:
                    2a:df:eb:ae:8d:cf:be:ee:e2:08:e3:6b:7b:25:39:
                    c1:12:d7:4d:f9:70:8d:cc:45:61:ea:0b:58:88:46:
                    2f:e9:f4:a3:9a:5c:82:6a:10:49:8e:aa:8c:3b:b0:
                    f8:eb:1b:aa:a7:f0:67:46:5c:c8:77:10:9c:92:58:
                    df:c4:45:c5:45:e3:0a:9e:62:02:09:52:fb:44:43:
                    bf:c3:10:53:60:ca:bb:52:67:02:e4:94:45:af:21:
                    e5:ba:dc:84:ee:d2:9c:64:cb:47:9e:14:71:78:ca:
                    6e:c5:eb:8e:a6:f5:8e:eb:19:04:8e:17:cd:69:20:
                    76:5e:c2:c7:d3:ee:bf:a6:e0:b1:f8:b9:25:85:e6:
                    d9:76:6b:6d:13:7f:46:42:bc:b5:0f:f4:42:be:77:
                    0a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C3:50:16:DF:8C:EC:B0:62:50:83:36:ED:C7:A0:FC:7C:AE:03:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f219b02-6631-3cee-8344-bc45607d16c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:6189::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:49:d0:2e:5f:cd:4e:a3:da:6a:9a:94:9e:69:42:77:1d:35:
         3e:85:43:4b:7f:e1:aa:ba:33:f4:ea:ce:10:1d:a0:2c:4d:3f:
         15:32:53:9b:6a:58:44:1a:20:30:82:1e:9c:21:ec:46:a0:29:
         71:32:f7:0e:ae:84:85:7a:dc:30:8f:93:e3:36:60:c8:7c:f2:
         7a:ba:40:97:90:7d:b7:8d:67:cd:cf:9b:08:27:25:f0:0e:3a:
         42:6b:3d:db:db:03:63:5b:37:ca:c3:be:ff:77:c4:c7:34:bb:
         78:2d:92:e2:a3:a4:e7:64:35:ef:fd:c6:b2:20:0d:9d:b7:4c:
         bd:b5:c0:86:fc:a7:5e:8a:20:89:37:5e:e6:fe:52:f0:b0:7a:
         c5:13:23:22:38:b1:6a:86:f6:7a:65:81:b1:81:9b:74:31:99:
         45:4c:54:7d:03:56:7a:12:c1:b7:1e:85:87:c0:00:6f:e4:2f:
         39:f6:4d:58:23:60:f1:a7:21:f5:50:7d:87:3e:86:46:a2:b0:
         95:d6:12:5f:a8:13:9b:d5:b2:7e:00:34:49:f6:c1:ff:3d:e1:
         37:fa:0c:7a:6f:39:5a:21:f2:6e:2e:db:11:19:73:3d:94:1a:
         57:02:ad:be:43:e2:7b:45:1f:16:bd:0e:10:5b:6c:d1:22:21:
         a7:11:62:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:46 2025 by rpki-client