Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/605579d8-401a-34a1-96ee-3952588fe677.roa
File:                     605579d8-401a-34a1-96ee-3952588fe677.roa (raw, json)
Hash identifier:          Vh+ad9akrWcBcEM3oRiLChGForYkmv0u6RUMHP2Tq7c=
Subject key identifier:   60:47:8B:18:AC:FA:BB:4C:33:4C:7E:BB:94:8A:63:24:E3:84:44:F2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E79B276FDEAE1798717E800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/605579d8-401a-34a1-96ee-3952588fe677.roa
Signing time:             Thu 19 Jun 2025 14:46:05 +0000
ROA not before:           Thu 19 Jun 2025 14:46:05 +0000
ROA not after:            Wed 17 Sep 2025 14:46:05 +0000
asID:                     22773
IP address blocks:        2600:8800:4c18::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:79:b2:76:fd:ea:e1:79:87:17:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:46:05 2025 GMT
            Not After : Sep 17 14:46:05 2025 GMT
        Subject: CN=2ba980df-78eb-472c-9403-0e1fcfd30079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e8:03:37:19:3f:1d:e4:43:a6:07:cd:33:26:
                    0b:0e:8c:f9:e3:54:81:cd:57:62:ff:b9:58:6e:4d:
                    e6:a2:d1:9a:7a:66:05:78:98:b7:1a:f5:b6:58:aa:
                    89:cb:44:e7:e4:30:e3:e2:ef:57:f1:36:0c:b2:4d:
                    a7:72:ef:02:1d:f8:ae:15:92:c1:7b:8d:f3:df:68:
                    1b:b5:b0:70:67:8d:69:de:36:bb:1d:33:3b:27:e5:
                    89:54:ea:be:ac:c1:ab:42:42:a5:c7:b3:a1:d3:0d:
                    ee:3a:b1:cd:fe:42:e5:f8:9c:f7:e7:7e:b5:ea:17:
                    1e:02:cd:c0:04:5d:2c:a9:47:da:d8:08:d7:67:ba:
                    c2:24:cb:fe:51:f4:10:3f:2d:43:b1:f8:f5:68:43:
                    73:cf:37:cb:3f:89:45:f6:4b:52:0b:a1:3a:f3:f9:
                    8f:42:83:1a:28:e1:99:ca:24:f2:a7:51:ca:47:0e:
                    f9:d0:af:c2:c5:73:32:19:fc:d0:92:7f:1d:d2:d0:
                    4f:53:9c:6a:90:da:c0:48:f0:66:71:ab:fb:4a:12:
                    b1:39:a6:51:65:97:31:74:93:b5:82:cc:da:a7:68:
                    b2:64:14:6d:bc:bd:d6:b8:98:e8:33:f6:5a:54:e7:
                    7a:cb:8c:14:de:e8:d6:6f:af:61:78:83:3b:35:98:
                    81:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:47:8B:18:AC:FA:BB:4C:33:4C:7E:BB:94:8A:63:24:E3:84:44:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/605579d8-401a-34a1-96ee-3952588fe677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:4c18::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e9:7c:f5:82:cf:a1:62:29:29:3b:d6:45:bc:05:bd:f8:8a:
         d2:fa:88:61:b8:57:50:77:f4:db:e0:f9:53:89:10:73:4e:b4:
         03:c8:7a:27:80:85:b1:8d:f9:ce:4c:9f:d1:ce:25:7b:1d:a2:
         00:b9:74:b0:88:d4:30:18:36:b5:85:f9:58:f3:83:79:a7:a1:
         d8:42:96:45:76:b2:32:3b:00:02:2f:47:08:0c:96:3d:2b:3f:
         97:26:3c:57:34:54:c7:38:fc:61:5c:b7:55:15:ce:4f:f0:1a:
         e3:c0:4a:a0:95:eb:9e:aa:98:d7:aa:57:fd:5b:a2:ea:9b:ba:
         1a:2f:5d:bc:6c:22:9f:bf:7c:c8:51:be:82:0a:26:6c:fb:0a:
         fa:ee:d3:da:a0:87:b9:85:9c:1a:97:ee:d3:e4:01:1f:fe:1d:
         bd:70:cc:4b:1a:89:02:e2:cf:ff:6e:38:4a:12:c6:37:4f:8d:
         ce:0e:84:3d:2c:7b:58:b4:2e:c4:45:ff:c8:07:45:29:54:b1:
         28:1b:9f:bf:97:b8:16:a1:e6:7a:9f:39:a3:b0:d8:6d:c8:43:
         7a:44:52:e9:5c:64:be:b0:8d:22:4b:55:50:ec:67:53:4d:f8:
         fb:a2:10:78:b5:6e:b0:48:b3:8e:c8:91:04:03:c5:e9:7f:8f:
         1e:66:6e:24
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo+ebJ2/erheYcX6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDYxOTE0NDYwNVoXDTI1MDkxNzE0NDYwNVowLzEtMCsGA1UEAxMk
MmJhOTgwZGYtNzhlYi00NzJjLTk0MDMtMGUxZmNmZDMwMDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgegDNxk/HeRDpgfNMyYLDoz541SBzVdi/7lY
bk3motGaemYFeJi3GvW2WKqJy0Tn5DDj4u9X8TYMsk2ncu8CHfiuFZLBe43z32gb
tbBwZ41p3ja7HTM7J+WJVOq+rMGrQkKlx7Oh0w3uOrHN/kLl+Jz353616hceAs3A
BF0sqUfa2AjXZ7rCJMv+UfQQPy1Dsfj1aENzzzfLP4lF9ktSC6E68/mPQoMaKOGZ
yiTyp1HKRw750K/CxXMyGfzQkn8d0tBPU5xqkNrASPBmcav7ShKxOaZRZZcxdJO1
gszap2iyZBRtvL3WuJjoM/ZaVOd6y4wU3ujWb69heIM7NZiBKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGBHixis+rtMM0x+u5SKYyTjhETyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjA1NTc5ZDgtNDAxYS0z
NGExLTk2ZWUtMzk1MjU4OGZlNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAEwY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC3pfPWCz6FiKSk71kW8Bb34itL6iGG4V1B39Nvg+VOJEHNOtAPI
eieAhbGN+c5Mn9HOJXsdogC5dLCI1DAYNrWF+Vjzg3mnodhClkV2sjI7AAIvRwgM
lj0rP5cmPFc0VMc4/GFct1UVzk/wGuPASqCV656qmNeqV/1bouqbuhovXbxsIp+/
fMhRvoIKJmz7Cvru09qgh7mFnBqX7tPkAR/+Hb1wzEsaiQLiz/9uOEoSxjdPjc4O
hD0se1i0LsRF/8gHRSlUsSgbn7+XuBah5nqfOaOw2G3IQ3pEUulcZL6wjSJLVVDs
Z1NN+PuiEHi1brBIs47IkQQDxel/jx5mbiQ=
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:21:22 2025 by rpki-client