Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cf0d29ff-b70f-3aa8-9a5d-35160636fb62.roa
File:                     cf0d29ff-b70f-3aa8-9a5d-35160636fb62.roa (raw, json)
Hash identifier:          nHr3aFuJX6kQ9ZUaP6y8REytacq+4+thGZzUCfidZ5s=
Subject key identifier:   25:22:0E:03:BA:44:56:93:A6:1E:AE:F0:D0:EA:E4:8C:B0:66:75:85
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F432858490CB17519F9523B8F918F2000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cf0d29ff-b70f-3aa8-9a5d-35160636fb62.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     22773
IP address blocks:        2001:579:e0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:75:19:f9:52:3b:8f:91:8f:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=36f675f1-741f-4de7-9abe-12ae87609c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5c:a5:0c:49:9e:41:c4:68:9e:3d:cf:2f:5f:
                    b2:02:1a:a9:a8:68:a0:4f:3c:6e:32:af:d6:0c:df:
                    25:00:67:c6:f3:bc:0e:f6:96:d3:6d:11:cf:5d:70:
                    9d:07:b6:27:78:53:83:7f:b1:65:74:64:79:d7:c9:
                    c0:a6:78:3d:61:8d:cd:2c:f2:1b:3d:31:b7:f7:8d:
                    27:a1:cf:1a:7d:85:36:cb:ed:e7:13:54:e1:f5:4e:
                    f5:1f:ba:aa:85:1b:46:d9:04:0b:78:e5:16:e7:ee:
                    39:9f:cf:02:7c:37:90:f2:a6:f9:93:f3:ff:6b:77:
                    e4:79:7e:7a:cd:5c:aa:29:f1:c1:40:11:d2:64:6f:
                    b4:d4:00:dc:d6:16:0d:0f:f0:a4:94:50:e1:81:6f:
                    08:a8:ed:bf:73:1b:ab:58:a2:84:0b:75:31:79:fc:
                    25:ca:22:2c:79:c3:52:56:a4:b0:f8:d5:5a:5f:d3:
                    18:9b:53:07:3c:de:d1:8d:0f:de:fd:a7:7a:72:47:
                    ab:63:3a:7e:be:2c:b2:64:dc:57:f0:41:e7:66:05:
                    44:e5:d3:4a:68:a1:aa:dd:19:9d:e1:fe:6a:40:c5:
                    be:02:d0:44:b2:ab:8a:53:d9:d2:74:35:98:50:19:
                    5e:0e:f8:68:cd:21:72:18:fd:04:57:f1:41:d1:bc:
                    df:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:22:0E:03:BA:44:56:93:A6:1E:AE:F0:D0:EA:E4:8C:B0:66:75:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cf0d29ff-b70f-3aa8-9a5d-35160636fb62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:e0::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c0:fd:6e:49:9a:a0:0e:1e:54:53:d9:36:ed:05:04:49:0d:
         62:a2:11:22:7a:3f:c3:3e:c4:1c:d0:6c:ed:80:54:7d:0c:06:
         67:e1:55:17:e8:4d:b1:81:86:96:e1:40:0f:61:16:e7:5a:c1:
         da:b8:ac:d3:a5:35:57:4f:9c:44:65:51:57:af:29:36:aa:48:
         de:89:2d:50:06:c1:18:3e:77:b3:01:1f:8e:29:5c:e5:fb:0d:
         bd:ea:a8:82:13:60:8e:26:97:13:98:43:ed:94:2c:f6:51:a2:
         d4:b7:2c:7d:5e:67:b7:34:60:0c:ec:e4:5a:0c:a7:ad:af:00:
         c4:f4:9a:47:66:29:59:0d:02:41:7a:ea:f0:5d:db:8d:23:d1:
         92:9c:02:13:73:ca:08:0d:52:41:ed:93:f7:1d:6c:c8:a1:a8:
         14:02:57:b3:32:e4:d4:34:16:d9:16:f2:6b:a8:c0:9d:d1:43:
         64:c4:c7:f2:b3:70:c1:0d:ef:94:d1:79:0d:28:4f:d0:ba:ef:
         0a:0e:28:27:63:ce:00:2b:55:ea:a4:36:5d:a0:fa:cd:d9:43:
         2b:96:7a:9b:d6:74:4b:63:ce:69:1a:55:74:ef:69:e8:24:69:
         72:60:99:49:81:5f:e8:13:23:75:01:59:3e:c8:f9:94:3d:fc:
         c5:be:f9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:52:40 2025 by rpki-client