Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccec6629-a8c0-3cf5-8289-67a111c531f3.roa
File:                     ccec6629-a8c0-3cf5-8289-67a111c531f3.roa (raw, json)
Hash identifier:          CPcEmIyHVajMIjx8Lk6eZpol/cgLinSZL45mSwd69vE=
Subject key identifier:   F0:E5:15:3A:AB:E7:04:AC:23:38:F0:14:0B:ED:EE:AC:4D:77:53:58
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858490CB17202864EAAE1CDCFCA00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccec6629-a8c0-3cf5-8289-67a111c531f3.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     22773
IP address blocks:        2001:579:104::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:72:02:86:4e:aa:e1:cd:cf:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=b7886932-01fd-424a-8c43-9b01293308f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:de:de:e6:1a:ab:14:dd:c5:64:a3:13:89:2e:
                    21:6c:fc:0e:37:b4:0c:eb:c0:1b:0f:30:b5:b4:e7:
                    65:41:56:9b:0e:e7:3f:72:aa:19:c6:e3:08:53:04:
                    b9:20:a8:94:16:06:79:2b:9e:eb:e8:6c:9a:71:48:
                    20:43:17:95:68:77:ac:10:15:79:5f:ff:0c:c1:2e:
                    4d:ad:4f:a3:c0:13:fd:0e:22:67:5e:c1:f9:cb:6e:
                    e0:d0:b2:6b:67:5f:2d:fb:b5:73:a5:98:39:98:15:
                    b5:21:72:23:38:be:cd:5b:89:b6:69:3c:e9:7c:e8:
                    a7:cf:81:24:35:c0:92:d6:40:83:ed:c5:2a:67:82:
                    73:30:84:ae:95:fa:6d:79:c3:4a:73:a4:74:6b:a5:
                    26:aa:c7:ec:7a:b7:4c:85:dc:db:c0:6d:48:ad:10:
                    22:54:b3:8e:1b:b5:b6:4f:90:d7:4c:b1:76:49:6b:
                    ed:7e:ba:e2:8a:64:a3:94:87:f7:97:94:7a:c4:dc:
                    31:b1:21:0c:98:b5:fe:f3:5c:02:20:cf:90:5e:32:
                    7d:dc:e0:78:25:3e:7e:9b:d8:b3:10:f3:e2:db:aa:
                    e6:ac:a3:24:56:47:82:a2:f3:c6:fa:ae:43:0f:2e:
                    20:fc:99:ff:09:0a:93:59:93:12:e8:02:31:eb:1a:
                    a7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E5:15:3A:AB:E7:04:AC:23:38:F0:14:0B:ED:EE:AC:4D:77:53:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccec6629-a8c0-3cf5-8289-67a111c531f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:104::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:84:5f:14:62:9d:35:ca:0a:bb:cf:15:3f:64:5c:11:0f:f3:
         62:2e:4f:e0:e3:bf:9e:11:d4:d7:36:ae:80:a1:95:fd:0c:49:
         ff:b2:d6:48:fb:1c:28:d8:89:0b:71:f0:f3:59:05:c3:71:df:
         c4:4c:86:f6:1e:40:b6:a9:06:f0:c3:b7:51:93:24:8d:7d:a5:
         96:68:51:41:bd:07:14:28:23:e6:bd:ed:24:b6:3f:a9:f2:a1:
         28:b4:64:5b:16:f0:7d:d9:1a:13:1a:50:5a:27:dc:03:d0:64:
         09:e2:ad:46:3d:11:e2:9d:3c:40:a6:9b:46:c7:a6:bb:cb:f2:
         42:9b:3a:a4:3c:e6:10:af:f0:b3:58:14:37:0e:e5:57:b8:e6:
         d5:b6:14:bf:d5:aa:55:18:44:b1:bf:be:16:ad:13:bc:3c:28:
         05:af:d9:d0:50:65:0b:41:44:81:43:d3:72:67:80:d5:c0:fd:
         b7:7b:e0:ad:af:e2:ae:df:3e:96:eb:80:f3:0d:bf:63:31:e9:
         b9:da:fe:c3:c4:ef:c6:21:17:17:ed:76:f5:0c:70:14:93:88:
         5f:af:94:ea:31:75:fe:85:c0:51:16:55:0b:52:ba:6f:78:51:
         4c:48:d8:41:8e:ed:90:40:47:35:60:cb:5e:b0:2a:ac:91:93:
         10:96:47:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:41:23 2025 by rpki-client