Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8bd0bd30-15d1-3b85-9f42-6ffb5b5608f1.roa
File:                     8bd0bd30-15d1-3b85-9f42-6ffb5b5608f1.roa (raw, json)
Hash identifier:          9rTVN1TdKCzj77HYJocjtbnMeszrxDB9AHXzKWrj9ss=
Subject key identifier:   C4:C1:FD:2A:E3:B3:DB:50:95:A0:82:22:CB:E8:7D:00:71:90:85:A9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858485A0578B5AD28FE92DB969A00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8bd0bd30-15d1-3b85-9f42-6ffb5b5608f1.roa
Signing time:             Sat 28 Dec 2024 02:00:38 +0000
ROA not before:           Sat 28 Dec 2024 02:00:38 +0000
ROA not after:            Fri 28 Mar 2025 01:00:38 +0000
asID:                     22773
IP address blocks:        2001:57a:7206::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5a:05:78:b5:ad:28:fe:92:db:96:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Dec 28 02:00:38 2024 GMT
            Not After : Mar 28 01:00:38 2025 GMT
        Subject: CN=61213937-eb96-476a-ab62-f06862c9b29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:df:8b:6b:81:13:02:44:51:21:87:08:c0:
                    29:cf:b0:1d:e1:00:8f:75:46:a9:99:5f:63:e7:12:
                    cd:18:23:2a:c1:36:25:ae:f9:ec:a5:be:f1:ff:64:
                    6e:dc:2d:0d:4b:b6:88:5e:15:c6:58:5d:28:2b:ea:
                    7b:c6:53:47:47:e4:bd:2f:85:39:18:3a:d2:a8:df:
                    b9:d0:1b:78:cf:c7:4e:27:f7:1f:4f:95:f7:a8:f0:
                    ea:23:e8:27:57:fd:0a:91:a0:37:42:eb:a1:41:e0:
                    75:0d:2a:c8:f3:ce:43:02:01:c2:eb:af:ee:40:b0:
                    c2:d8:e0:47:f4:f1:94:ef:e8:cc:69:19:07:e5:47:
                    a7:53:b0:10:2b:35:13:5a:de:d8:db:8c:78:7e:d1:
                    2c:ae:7a:e2:63:57:33:66:b5:d4:1a:47:f8:ce:b5:
                    db:ce:90:24:95:c9:c4:37:78:c7:2b:ae:6d:26:5f:
                    60:9e:6f:3d:b5:52:5c:4f:b5:e6:92:e4:f7:11:77:
                    ac:79:b3:72:b4:ca:25:62:1e:c7:48:c6:19:21:48:
                    6f:9b:56:23:98:ff:3b:06:91:91:31:33:c0:bd:17:
                    6d:9f:07:d5:fe:f0:f3:02:94:1f:8b:5e:f8:93:b6:
                    40:9c:8d:8c:f2:f2:f2:a0:79:8d:7b:b9:6c:1c:1b:
                    b6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C1:FD:2A:E3:B3:DB:50:95:A0:82:22:CB:E8:7D:00:71:90:85:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8bd0bd30-15d1-3b85-9f42-6ffb5b5608f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:57a:7206::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:5b:b7:06:5d:b3:06:5a:1f:19:09:32:03:1f:fe:0e:df:82:
         08:7f:60:3d:f7:1c:f1:fc:36:39:4b:a6:b3:af:53:8e:42:7b:
         cd:5b:39:30:69:31:d7:b3:ef:fe:2b:6e:4c:b3:c5:2c:51:b4:
         01:f0:b4:b4:e5:b7:ea:a4:cb:2c:8b:0f:a3:d0:e5:03:14:5d:
         fa:96:9d:0f:69:f3:d7:5f:3d:91:ba:a2:4b:9c:f1:01:53:ed:
         78:6b:2c:46:01:db:4d:c8:d0:d5:f4:ff:2f:f8:85:94:c9:9e:
         05:90:76:36:2b:e6:ad:63:28:fd:1f:db:21:82:08:1c:5b:3b:
         e5:0a:43:6f:d2:29:6f:ff:6d:f6:bf:15:f3:79:ec:e6:dc:e8:
         17:12:db:6c:63:56:ff:bd:f7:07:2f:0e:c3:b9:92:63:c4:da:
         e7:93:21:4a:39:75:ea:94:da:09:98:18:c3:f7:57:8c:41:a5:
         e1:be:30:b8:91:a3:31:4b:46:f9:42:8d:45:bb:8c:68:e3:22:
         f5:8b:83:72:be:b5:ce:11:3f:72:41:74:6f:e1:27:00:90:d5:
         ff:57:28:66:65:4b:a8:43:d9:b4:2f:a7:72:c4:86:ab:69:7a:
         81:85:63:2b:4f:2e:29:5c:6c:8b:f6:6a:40:9c:39:17:8a:ba:
         5f:42:d3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:31 2025 by rpki-client