Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/edc3cf1c-1191-34ac-bb78-bd7876c58b67.roa
File:                     edc3cf1c-1191-34ac-bb78-bd7876c58b67.roa (raw, json)
Hash identifier:          7qhWdjzMB9+Q2qdTgRRheWYHzZhfzTUfxzItRXbD5rI=
Subject key identifier:   8B:CC:C3:0C:88:5F:5C:CD:20:0C:65:2D:77:7D:C8:80:8F:7B:6A:DA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01DF2CD8272B1A16427E80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/edc3cf1c-1191-34ac-bb78-bd7876c58b67.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        2001:579:84ac::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:df:2c:d8:27:2b:1a:16:42:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=91c31fd2-5cbb-4acd-b7d2-44a85d87a398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:e8:83:3a:c0:e2:b3:74:97:17:a3:52:3b:
                    ff:85:45:8f:ec:72:dc:f6:38:7c:5a:cb:99:c2:53:
                    d4:4d:55:99:d8:bf:2d:7c:52:bf:06:9c:c3:df:fc:
                    e9:e4:4b:0e:d7:33:37:ba:c9:21:53:b9:b2:88:c2:
                    e1:72:d9:56:8d:e4:f2:bd:20:23:96:4f:cd:c1:e5:
                    81:4e:a5:66:79:c9:91:34:c7:ad:97:d1:21:46:70:
                    f0:5e:7f:c6:f9:7b:39:44:e0:f6:fe:94:d5:e5:db:
                    ed:eb:26:83:89:cf:0a:ce:51:55:4c:00:16:e6:10:
                    9c:3a:51:c9:93:77:79:ce:bb:b5:6a:0e:d4:ac:f2:
                    52:0e:01:07:e3:86:0d:1e:d6:3c:b0:ab:a2:d6:cb:
                    45:35:2e:d9:9f:c1:40:bb:4b:17:4a:79:b5:96:8a:
                    40:47:4c:f1:dd:18:d3:45:37:2c:11:f5:c8:40:cb:
                    ee:ae:6e:aa:33:e6:7f:98:7c:68:83:af:3e:b5:91:
                    d4:e0:d1:f8:d4:e3:7b:6e:19:76:a3:e9:57:40:7d:
                    da:5a:7b:93:38:5c:3c:3a:43:c9:e2:0a:78:09:52:
                    1d:0c:b8:76:dd:db:f4:f4:25:9b:08:89:91:be:38:
                    94:96:75:f4:08:1d:4b:2b:f9:67:69:45:f5:77:e3:
                    52:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CC:C3:0C:88:5F:5C:CD:20:0C:65:2D:77:7D:C8:80:8F:7B:6A:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/edc3cf1c-1191-34ac-bb78-bd7876c58b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:84ac::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:de:7f:38:8f:f7:92:05:64:7f:e7:f0:d2:62:d1:3a:83:9f:
         b7:83:65:30:ca:13:2c:7b:4e:70:22:dd:f7:f8:fc:08:42:a2:
         03:98:f6:62:25:e8:cb:a5:ce:f6:56:ca:64:32:22:bf:d0:47:
         59:43:54:46:ad:45:7a:5a:bb:d7:c2:e0:6d:e2:21:05:d8:4b:
         0d:e3:63:25:99:74:05:34:57:3d:fc:f4:de:b0:a6:09:60:af:
         4e:9e:29:36:2e:54:da:1f:bd:ba:2b:da:cc:e3:64:8e:70:61:
         3f:43:18:29:78:55:ea:6a:28:f8:cb:54:dd:6a:c9:3a:cd:44:
         be:70:b8:e7:5f:da:78:e3:fe:4c:09:7c:7e:1e:d4:6f:c6:6b:
         46:7c:50:1e:0a:cb:f9:ea:1e:c6:d3:e3:ce:b7:73:69:cb:f5:
         56:fd:ea:55:3b:83:95:c6:1e:f7:17:01:71:aa:5b:49:47:95:
         9c:b2:b7:58:35:d8:9a:d2:8a:c9:72:ae:e9:7d:97:f8:7f:fa:
         36:e6:14:a0:42:66:e3:9d:25:5e:82:02:1f:96:c6:33:27:71:
         4d:c4:a9:5b:82:4d:eb:83:78:51:8e:12:ee:13:f6:4e:92:dd:
         4a:77:11:5d:07:7f:da:e0:f5:d8:ca:ce:88:af:8b:ce:f9:0a:
         8b:26:17:89
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAd8s2CcrGhZCfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
OTFjMzFmZDItNWNiYi00YWNkLWI3ZDItNDRhODVkODdhMzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7jogzrA4rN0lxejUjv/hUWP7HLc9jh8WsuZ
wlPUTVWZ2L8tfFK/BpzD3/zp5EsO1zM3uskhU7myiMLhctlWjeTyvSAjlk/NweWB
TqVmecmRNMetl9EhRnDwXn/G+Xs5ROD2/pTV5dvt6yaDic8KzlFVTAAW5hCcOlHJ
k3d5zru1ag7UrPJSDgEH44YNHtY8sKui1stFNS7Zn8FAu0sXSnm1lopAR0zx3RjT
RTcsEfXIQMvurm6qM+Z/mHxog68+tZHU4NH41ON7bhl2o+lXQH3aWnuTOFw8OkPJ
4gp4CVIdDLh23dv09CWbCImRvjiUlnX0CB1LK/lnaUX1d+NSuQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIvMwwyIX1zNIAxlLXd9yICPe2raMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWRjM2NmMWMtMTE5MS0z
NGFjLWJiNzgtYmQ3ODc2YzU4YjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEFeYSs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABPefziP95IFZH/n8NJi0TqDn7eDZTDKEyx7TnAi3ff4/AhCogOY
9mIl6MulzvZWymQyIr/QR1lDVEatRXpau9fC4G3iIQXYSw3jYyWZdAU0Vz389N6w
pglgr06eKTYuVNofvbor2szjZI5wYT9DGCl4VepqKPjLVN1qyTrNRL5wuOdf2njj
/kwJfH4e1G/Ga0Z8UB4Ky/nqHsbT4863c2nL9Vb96lU7g5XGHvcXAXGqW0lHlZyy
t1g12JrSislyrul9l/h/+jbmFKBCZuOdJV6CAh+WxjMncU3EqVuCTeuDeFGOEu4T
9k6S3Up3EV0Hf9rg9djKzoivi875CosmF4k=
-----END CERTIFICATE-----
Generated at Thu Oct 16 02:03:33 2025 by rpki-client