Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/77dbe6a6-4575-3f37-bc00-37ae83b7606d.roa
File:                     77dbe6a6-4575-3f37-bc00-37ae83b7606d.roa (raw, json)
Hash identifier:          m9X/cMuJYGt1xCCruxOlKkQq34SfC/fHkNj5YOAJjaw=
Subject key identifier:   6F:B0:D5:06:69:0B:C1:64:35:E1:85:74:4B:6D:2D:62:E3:C1:82:61
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849C20AB808EE250F932A366F00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/77dbe6a6-4575-3f37-bc00-37ae83b7606d.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     22773
IP address blocks:        2001:579:f018::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:b8:08:ee:25:0f:93:2a:36:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=aa1f56f9-1823-450d-b0be-4f71ae1f74b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:02:7f:8d:dc:79:b6:ad:b7:31:c6:1a:f6:0e:
                    ad:31:1e:46:15:af:d6:02:da:82:0b:d2:b2:dd:fb:
                    c6:52:fc:00:8c:58:b9:0d:8d:96:4f:e4:c3:61:f1:
                    e9:9f:ac:12:a0:07:b9:f8:6c:f7:24:15:11:90:cc:
                    1e:c7:97:5e:57:63:e0:0c:e1:1c:44:5e:bb:b2:ff:
                    8a:5d:e4:37:82:58:67:9c:59:9f:b3:60:2f:dc:a0:
                    45:d5:ac:3a:fd:42:3d:09:0a:92:cb:66:e9:8a:13:
                    93:26:fe:e3:37:6f:1b:92:5c:04:19:bf:9a:75:e6:
                    65:00:dc:83:be:3d:8f:54:7b:a5:b3:ce:d1:4f:bf:
                    f4:7d:ed:72:92:08:b6:89:0a:a9:25:be:75:e3:d6:
                    42:d9:5a:60:7f:a7:bd:0b:d2:73:c9:ad:3d:1c:a0:
                    c5:11:c0:5d:a2:d0:ac:e9:37:a9:3a:e8:9d:45:ba:
                    7f:b7:2f:dd:8a:cd:ee:1c:49:fb:31:b0:61:84:bc:
                    57:06:ca:a5:8d:83:92:31:dc:6d:7b:09:8a:29:79:
                    fc:79:50:55:15:79:87:91:69:07:cd:6a:d8:3b:4d:
                    ad:07:5b:1f:de:7c:bc:24:1c:3e:9e:95:a4:0e:f4:
                    73:f4:11:e9:fd:05:5a:61:03:f7:a1:fc:71:21:87:
                    97:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B0:D5:06:69:0B:C1:64:35:E1:85:74:4B:6D:2D:62:E3:C1:82:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/77dbe6a6-4575-3f37-bc00-37ae83b7606d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:f018::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:b6:b3:ca:6f:32:f9:56:a9:e6:9d:92:8b:0e:02:4b:7b:9f:
         77:0c:66:d1:a3:44:3a:b2:7d:39:55:7b:ad:2e:e1:ae:f5:8d:
         26:4d:62:20:cc:ba:5d:62:ce:ec:f8:10:93:1e:fa:8b:0a:cf:
         4d:18:c7:74:f6:1d:d2:a4:98:32:c8:37:23:ad:75:c7:ee:fe:
         9b:16:89:2f:79:81:cb:b0:99:56:25:b9:83:d5:30:df:8c:8b:
         3d:1c:67:65:fc:e8:56:71:37:64:8e:58:06:ec:6b:5c:3d:b5:
         80:66:b4:ec:53:cc:eb:0a:6d:84:73:51:c5:d7:42:54:45:a8:
         7f:0c:fc:24:65:7c:98:8b:bf:4f:bc:d0:ba:0d:7a:f8:9a:22:
         68:e3:28:b1:7f:ba:c1:b5:86:7e:e0:da:ab:7e:df:fe:34:85:
         ae:0d:dc:0d:18:72:b1:67:70:21:2e:2b:0a:4a:b2:ed:18:b7:
         4c:46:65:50:36:07:31:25:07:3e:96:88:d6:d2:5c:de:af:eb:
         3e:e5:f1:54:3f:ed:c5:01:f9:42:98:9f:0f:9a:0e:67:d3:38:
         9d:b5:21:3a:54:f6:70:f3:82:7b:fe:a0:ae:1e:bc:42:30:8c:
         82:68:e2:89:c8:15:90:8c:48:bd:42:9e:ad:80:3f:3e:e3:f6:
         89:fb:5a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:40:29 2025 by rpki-client