Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d5de168-ec26-3ae5-ae74-979645575e80.roa
File:                     6d5de168-ec26-3ae5-ae74-979645575e80.roa (raw, json)
Hash identifier:          z9Mz2OkPbc3tPajAeE6TYd34tfcpiwcpA5YAzeRzw+c=
Subject key identifier:   26:5F:CE:77:EF:C3:9B:55:C1:71:55:58:42:DB:38:76:D9:95:C6:8D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285848C150E5992471D59168980940
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d5de168-ec26-3ae5-ae74-979645575e80.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     22773
IP address blocks:        2001:579:116c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:e5:99:24:71:d5:91:68:98:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=df1b6259-f12f-4fd0-ba04-0560ef39c52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:98:67:cc:a0:02:d8:56:22:02:c1:5b:8c:
                    84:5a:a9:4f:75:47:ed:4e:ee:85:4c:11:dd:f7:7b:
                    b8:c8:8b:0e:f0:d1:c0:01:93:b9:cc:6f:d0:6d:df:
                    7e:76:4c:2d:84:0d:d1:c9:68:c9:3c:06:cd:10:e8:
                    99:2e:3f:b9:bc:d8:13:46:fb:27:a3:1e:1d:93:17:
                    c7:9e:dd:5e:99:e6:db:d2:02:44:0b:e0:8c:09:55:
                    25:57:d4:0c:09:fe:82:78:e8:f1:9e:c8:c4:1c:04:
                    78:0d:f6:ec:7a:47:3b:b3:18:bd:7c:0b:89:4b:3f:
                    e6:e7:2a:8e:34:4c:b7:bf:cf:9d:6f:e2:c0:4f:5b:
                    68:6a:f6:fd:9b:38:68:d0:68:95:b4:6d:16:c8:4d:
                    1e:24:c6:4d:db:63:9e:20:3d:9f:cf:a7:bc:ed:ed:
                    4a:cc:e4:40:c8:fc:e0:35:21:fd:42:aa:91:71:e7:
                    8d:fd:8d:0f:e0:f8:6b:9d:24:6a:6e:22:d1:25:6b:
                    81:6e:97:08:ab:2a:6e:05:e6:4d:b9:25:7e:51:cf:
                    8c:66:fb:ec:8f:3a:91:3a:cf:92:01:35:f1:e2:5c:
                    f4:aa:aa:6f:96:80:c5:8f:75:dd:04:e3:73:7f:1c:
                    0f:21:47:b4:68:8b:53:91:22:1a:b3:15:3a:10:aa:
                    58:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5F:CE:77:EF:C3:9B:55:C1:71:55:58:42:DB:38:76:D9:95:C6:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d5de168-ec26-3ae5-ae74-979645575e80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:116c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:be:d6:bb:7d:43:de:61:ba:ac:57:75:a8:87:4d:63:d6:20:
         5b:e8:22:ab:48:1c:f0:76:75:b6:f7:99:12:57:53:13:8f:ab:
         66:42:e5:7b:af:5d:d7:96:39:4c:6b:82:8d:cb:6c:63:55:63:
         3d:23:2e:bf:a5:25:48:65:e3:79:31:cc:a7:c5:bf:74:9e:c6:
         10:62:25:f6:23:a1:83:9d:c5:5c:9f:cd:eb:b8:a3:54:fe:cb:
         40:2b:78:44:6a:9a:da:66:c1:95:b8:23:db:62:d2:d2:fc:f6:
         bb:3f:a5:aa:d7:ba:a9:07:a9:0d:a9:8b:fe:fd:84:1b:57:d7:
         49:ec:8d:bf:50:41:20:bb:ed:aa:0a:3f:b7:3e:e0:94:bc:9f:
         dc:c3:08:9b:22:61:1f:3a:2d:bb:58:fa:59:40:69:2a:a2:c7:
         c7:49:2b:2e:27:0b:1b:c5:a5:97:c4:6c:50:c6:42:12:74:72:
         c4:2a:56:b2:97:ac:0e:79:b5:97:4d:87:28:d1:b0:6c:59:30:
         80:35:36:b2:c2:90:4e:4f:6d:ad:99:f5:68:4a:3b:99:6b:11:
         b2:26:1f:66:cb:f1:1d:a6:e2:3f:04:33:f3:16:79:1c:7e:48:
         7d:9c:79:a3:34:45:d1:da:79:c2:4a:b0:da:59:58:60:67:bb:
         ef:cf:2a:08
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjBUOWZJHHVkWiYCUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZGYxYjYyNTktZjEyZi00ZmQwLWJhMDQtMDU2MGVmMzljNTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriSYZ8ygAthWIgLBW4yEWqlPdUftTu6FTBHd
93u4yIsO8NHAAZO5zG/Qbd9+dkwthA3RyWjJPAbNEOiZLj+5vNgTRvsnox4dkxfH
nt1emebb0gJEC+CMCVUlV9QMCf6CeOjxnsjEHAR4Dfbsekc7sxi9fAuJSz/m5yqO
NEy3v8+db+LAT1toavb9mzho0GiVtG0WyE0eJMZN22OeID2fz6e87e1KzORAyPzg
NSH9QqqRceeN/Y0P4PhrnSRqbiLRJWuBbpcIqypuBeZNuSV+Uc+MZvvsjzqROs+S
ATXx4lz0qqpvloDFj3XdBONzfxwPIUe0aItTkSIasxU6EKpYWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCZfznfvw5tVwXFVWELbOHbZlcaNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmQ1ZGUxNjgtZWMyNi0z
YWU1LWFlNzQtOTc5NjQ1NTc1ZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeRFs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEK+1rt9Q95huqxXdaiHTWPWIFvoIqtIHPB2dbb3mRJXUxOPq2ZC
5XuvXdeWOUxrgo3LbGNVYz0jLr+lJUhl43kxzKfFv3SexhBiJfYjoYOdxVyfzeu4
o1T+y0AreERqmtpmwZW4I9ti0tL89rs/parXuqkHqQ2pi/79hBtX10nsjb9QQSC7
7aoKP7c+4JS8n9zDCJsiYR86LbtY+llAaSqix8dJKy4nCxvFpZfEbFDGQhJ0csQq
VrKXrA55tZdNhyjRsGxZMIA1NrLCkE5Pba2Z9WhKO5lrEbImH2bL8R2m4j8EM/MW
eRx+SH2ceaM0RdHaecJKsNpZWGBnu+/PKgg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:00:03 2025 by rpki-client