Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/acda00e3-cc10-3a0b-b996-7c6ff7656cae.roa
File:                     acda00e3-cc10-3a0b-b996-7c6ff7656cae.roa (raw, json)
Hash identifier:          npNPd4s1I5t4CkdIrvgwiiKmMQ7JMTaXQhw3G9TTImY=
Subject key identifier:   36:EB:79:9A:D2:9B:6F:B1:CB:E5:FD:1F:94:A5:D8:D4:B7:96:69:D8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858490CB173BA2813797CC03D8800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/acda00e3-cc10-3a0b-b996-7c6ff7656cae.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     22773
IP address blocks:        2001:579:a08c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:73:ba:28:13:79:7c:c0:3d:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=07427f95-1992-4341-9f05-83df29e9a80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:cf:b0:09:c6:4e:b1:57:8c:e5:a8:79:b8:c1:
                    63:ce:3d:a0:37:9e:34:4d:e0:18:81:1f:ec:08:71:
                    08:2b:6e:22:df:04:68:97:39:b6:b3:d4:bb:d9:1a:
                    9e:41:82:de:e0:35:04:19:d1:d5:61:17:e6:0f:f1:
                    01:a3:db:2a:f9:e4:0e:17:27:25:95:38:dc:f4:27:
                    fb:9d:bc:af:1e:ef:27:29:c6:39:61:42:a4:8d:b8:
                    1a:e1:22:d1:9e:8e:8c:99:76:4e:a5:f8:79:df:f1:
                    7b:6b:7a:c7:cd:a4:15:18:bc:4e:17:ba:c1:ef:74:
                    dc:a2:cc:37:a1:f6:d1:59:a2:f6:42:65:ef:27:3e:
                    cf:67:08:35:76:fd:96:de:ce:b6:05:f6:d7:58:f7:
                    ed:aa:86:e5:2a:41:1f:03:59:e4:22:1b:49:c3:c7:
                    ca:40:06:f7:46:4b:35:e6:94:c5:38:ae:27:d2:db:
                    9a:37:ad:c2:0c:8c:2f:dc:c3:a1:6e:68:8f:48:25:
                    82:b4:7c:13:8e:73:df:5d:55:61:4a:78:0b:f9:58:
                    7a:5a:83:17:94:23:6d:83:1b:01:7c:54:9f:b7:c5:
                    01:3a:77:a4:86:a5:b2:87:fb:95:06:17:6e:09:18:
                    4a:63:1a:5a:fd:e4:8f:bc:f2:02:e2:b8:48:fa:b3:
                    c8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EB:79:9A:D2:9B:6F:B1:CB:E5:FD:1F:94:A5:D8:D4:B7:96:69:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/acda00e3-cc10-3a0b-b996-7c6ff7656cae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:a08c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:57:ea:6a:6a:e0:1a:bb:51:61:2b:7c:b5:d8:30:9a:5d:55:
         67:3f:ec:33:74:60:ca:da:78:f1:50:24:b5:65:0a:3b:5c:d0:
         f0:41:11:55:2e:e2:5c:16:84:07:15:fb:23:07:c4:f3:53:e2:
         c3:4a:e7:89:99:5d:32:69:9d:4a:9c:e3:58:63:c2:b3:32:c5:
         8c:01:ba:99:58:d7:78:a7:d9:ff:ce:6c:a2:7b:fd:e7:d9:78:
         18:54:ad:c7:7a:f3:dc:85:6d:9d:3f:9a:41:85:19:30:70:d2:
         e5:ec:04:e4:46:23:7d:92:36:db:b8:72:fc:75:91:cc:9c:75:
         e7:98:a4:1f:3d:ef:0f:5c:cf:38:9b:d7:89:74:82:fb:fd:85:
         3a:2d:41:a0:d0:41:08:e9:ff:fd:97:13:6d:75:7b:2d:f5:e7:
         aa:62:da:90:b2:fe:a2:b3:d1:79:3f:77:d2:a3:05:3d:d5:f6:
         19:9e:d6:e8:c0:c8:95:8e:ba:7a:a4:8c:7a:26:af:1a:8a:f9:
         c4:f4:c6:96:b4:29:aa:95:d0:2b:a6:df:3d:77:35:5b:f4:aa:
         6d:c1:51:08:01:c5:7b:5d:f7:e6:da:27:af:23:b5:21:20:65:
         96:89:c1:6e:8d:44:f1:32:f8:41:5a:c6:3b:07:e4:dc:8e:6c:
         c7:5e:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:07:25 2025 by rpki-client