Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1556d0a-f8fd-3c86-a0b6-79a7dd2de91d.roa
File:                     a1556d0a-f8fd-3c86-a0b6-79a7dd2de91d.roa (raw, json)
Hash identifier:          Ro7yF4oX6lPbql0OiZwrrNqStEn55Yj6DuF9k2Wzh34=
Subject key identifier:   CB:65:0C:DD:E1:07:1B:1C:42:EC:E3:70:50:8E:A7:E8:BE:15:CB:9A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858482D5A9475C27A7B1423B2A380
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1556d0a-f8fd-3c86-a0b6-79a7dd2de91d.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     22773
IP address blocks:        2001:578:8100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:94:75:c2:7a:7b:14:23:b2:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=3ddf13a1-88a9-4fe5-b84f-169608a66ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9a:8a:e0:98:4b:b9:ce:08:9f:1d:bf:f6:c3:
                    33:77:40:da:92:93:4c:36:05:92:f1:ab:b0:df:f7:
                    eb:84:13:bb:95:ba:28:44:0b:b7:b5:07:c3:7c:91:
                    08:4c:4a:58:2d:f9:77:15:dc:b7:f7:95:f2:70:7a:
                    46:03:63:aa:50:07:8d:00:03:20:88:89:00:7d:42:
                    ab:32:64:6e:74:76:92:c8:ef:86:0d:58:81:ed:ae:
                    95:25:2c:0b:2c:80:72:85:01:ed:ec:c7:bc:92:50:
                    d2:20:6d:3b:17:bd:e5:d3:90:3d:41:e8:f8:a7:c3:
                    b4:eb:67:7b:c3:5e:a4:61:7e:3e:67:31:2d:c6:fe:
                    2a:f8:7c:93:01:08:95:3e:09:d4:ee:30:97:55:44:
                    1b:8a:0f:cc:93:7b:d9:70:1c:36:cb:e3:b7:2e:e3:
                    7b:47:85:4e:5c:05:a4:fe:51:73:68:42:ec:de:fd:
                    cc:89:f4:30:b3:ac:99:c9:18:c5:74:08:2a:ea:84:
                    ed:e7:2a:7b:4a:59:22:05:b2:f7:d5:51:96:9b:a2:
                    78:82:5f:dd:49:57:f8:15:9b:47:30:33:dc:de:99:
                    7c:17:10:82:ce:f0:4b:17:4d:c8:e8:ad:ec:6f:57:
                    85:d8:f4:06:93:3a:da:cb:1a:36:e1:84:45:ac:a7:
                    88:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:65:0C:DD:E1:07:1B:1C:42:EC:E3:70:50:8E:A7:E8:BE:15:CB:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1556d0a-f8fd-3c86-a0b6-79a7dd2de91d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:578:8100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:78:d0:7d:65:0a:e5:db:da:59:fa:74:8c:d3:82:c7:f2:e3:
         26:5c:c2:bb:65:06:b2:08:09:1d:49:41:66:a1:ad:c5:55:9b:
         43:a2:71:5d:b7:d3:9c:54:4f:f9:4c:93:c1:b8:5e:b5:e4:47:
         87:5e:23:d5:70:2e:ba:15:45:de:d0:28:c8:d3:e6:6b:b6:b1:
         4f:3b:ba:b6:09:b7:fc:62:0a:7c:80:5a:08:60:4c:7b:11:0b:
         a3:86:01:7c:cd:1f:06:92:86:17:3f:0e:e4:07:af:04:25:3f:
         a9:54:8a:8c:eb:c4:df:f3:66:d9:11:ae:8d:d8:c3:0e:37:e7:
         f1:6f:23:8f:e3:7d:72:ac:c3:03:5c:1d:fd:1a:b9:b9:ad:27:
         39:34:05:37:11:67:f5:78:76:42:9f:63:77:cb:c5:17:da:2d:
         69:5b:b1:d0:eb:92:1b:b3:2c:c4:6f:be:8c:d2:7c:0d:df:ba:
         48:24:f5:a3:d7:43:4a:16:da:dd:7b:ce:44:3a:44:af:da:dd:
         ee:c6:07:6b:60:5d:6e:e2:03:da:e6:12:e1:14:fa:62:d4:d4:
         b7:33:84:cd:e6:d5:71:ae:58:9e:de:63:ec:3d:19:ad:2d:ed:
         83:ee:1f:66:f4:c4:92:de:e7:ec:b6:91:66:99:aa:19:93:ef:
         72:89:20:1c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEgtWpR1wnp7FCOyo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk
M2RkZjEzYTEtODhhOS00ZmU1LWI4NGYtMTY5NjA4YTY2ZmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5qK4JhLuc4Inx2/9sMzd0DakpNMNgWS8auw
3/frhBO7lbooRAu3tQfDfJEITEpYLfl3Fdy395XycHpGA2OqUAeNAAMgiIkAfUKr
MmRudHaSyO+GDViB7a6VJSwLLIByhQHt7Me8klDSIG07F73l05A9Qej4p8O062d7
w16kYX4+ZzEtxv4q+HyTAQiVPgnU7jCXVUQbig/Mk3vZcBw2y+O3LuN7R4VOXAWk
/lFzaELs3v3MifQws6yZyRjFdAgq6oTt5yp7SlkiBbL31VGWm6J4gl/dSVf4FZtH
MDPc3pl8FxCCzvBLF03I6K3sb1eF2PQGkzrayxo24YRFrKeIlwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMtlDN3hBxscQuzjcFCOp+i+FcuaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTE1NTZkMGEtZjhmZC0z
Yzg2LWEwYjYtNzlhN2RkMmRlOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEFeIEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAonjQfWUK5dvaWfp0jNOCx/LjJlzCu2UGsggJHUlBZqGtxVWbQ6Jx
XbfTnFRP+UyTwbheteRHh14j1XAuuhVF3tAoyNPma7axTzu6tgm3/GIKfIBaCGBM
exELo4YBfM0fBpKGFz8O5AevBCU/qVSKjOvE3/Nm2RGujdjDDjfn8W8jj+N9cqzD
A1wd/Rq5ua0nOTQFNxFn9Xh2Qp9jd8vFF9otaVux0OuSG7MsxG++jNJ8Dd+6SCT1
o9dDShba3XvORDpEr9rd7sYHa2BdbuID2uYS4RT6YtTUtzOEzebVca5Ynt5j7D0Z
rS3tg+4fZvTEkt7n7LaRZpmqGZPvcokgHA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:46 2025 by rpki-client