Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a251b249-89e4-3d1b-8d20-381eff8c6c70.roa
File:                     a251b249-89e4-3d1b-8d20-381eff8c6c70.roa (raw, json)
Hash identifier:          8ArMZSuug+/uDCwiiYUa5kBkJ4jqGRc7OgWyoZeOnjY=
Subject key identifier:   95:70:92:84:3A:9C:76:28:D6:D7:47:61:10:37:AA:8A:5C:63:35:03
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E785D730E009F5BAD91F300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a251b249-89e4-3d1b-8d20-381eff8c6c70.roa
Signing time:             Thu 19 Jun 2025 14:43:24 +0000
ROA not before:           Thu 19 Jun 2025 14:43:24 +0000
ROA not after:            Wed 17 Sep 2025 14:43:24 +0000
asID:                     22773
IP address blocks:        2001:579:8184::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:78:5d:73:0e:00:9f:5b:ad:91:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:43:24 2025 GMT
            Not After : Sep 17 14:43:24 2025 GMT
        Subject: CN=2af52028-97c6-467a-b3c1-100ea90aff68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:0a:44:17:09:3f:44:e1:6c:e9:1f:33:45:
                    bd:b5:f0:a8:37:6a:32:63:57:5b:68:41:31:b4:9e:
                    69:03:21:1e:7f:a9:d5:78:91:56:52:23:27:35:74:
                    1b:da:1e:e8:32:f2:8b:2c:2f:20:8c:75:a8:a1:91:
                    bd:45:54:8d:56:b9:49:90:f8:d9:9e:95:54:da:61:
                    dc:65:e0:2e:42:f1:e1:43:8a:a4:2f:cb:68:85:c1:
                    f1:52:ee:0d:b1:70:8c:42:1d:ad:5b:be:37:3a:c7:
                    76:03:c9:d1:d7:6d:75:b2:a9:8d:c8:97:85:0c:15:
                    97:ef:c4:29:9a:31:31:c4:19:3d:f1:0e:a3:a0:9c:
                    6b:c1:82:aa:f5:9e:aa:04:db:a2:be:de:54:74:98:
                    db:ce:3d:ac:d4:56:3c:41:15:34:7a:22:88:eb:6f:
                    6f:6f:2c:17:e9:7a:9f:19:1a:9a:db:f4:da:bb:6c:
                    d0:ac:d5:c7:e1:3e:9a:4b:80:e2:d7:b2:40:43:50:
                    49:f5:fc:7a:1b:d7:dc:81:b8:3c:6f:6b:73:0b:55:
                    05:d8:af:b3:de:e8:a7:a8:e4:1e:7a:f9:04:2d:22:
                    8d:47:ed:1f:35:0b:85:70:59:59:a9:70:17:93:88:
                    5f:3a:ad:9e:2b:4c:c5:60:85:1b:f8:e9:27:1b:34:
                    b7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:70:92:84:3A:9C:76:28:D6:D7:47:61:10:37:AA:8A:5C:63:35:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a251b249-89e4-3d1b-8d20-381eff8c6c70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:8184::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:26:f0:2f:2f:e5:c6:ad:9c:d5:86:c4:05:0f:28:35:3d:a0:
         5c:42:ca:df:99:da:52:1c:2a:14:29:ba:7e:48:9a:f5:84:cc:
         27:f0:11:e5:6a:86:9c:73:f8:07:5a:a3:14:2e:52:97:7a:8b:
         98:80:bd:06:5c:61:58:8d:ff:96:35:53:a2:eb:8d:2e:e4:07:
         aa:a6:9e:ad:43:a4:bf:04:89:67:d8:14:39:30:2a:88:3f:eb:
         75:84:01:dd:95:5b:54:62:8d:1a:eb:80:5d:d9:ea:b2:58:2b:
         37:a2:67:89:c4:29:77:ad:5b:f6:f8:1a:00:c8:98:21:5e:e7:
         2a:f0:9c:92:ac:3b:ad:94:5d:80:52:4a:92:38:aa:0d:69:f4:
         a1:7e:f5:1d:84:68:c5:b2:9b:bd:ca:22:8c:dd:ea:5c:1f:c8:
         63:70:f2:a1:d6:5f:90:07:3f:1f:c8:96:d1:03:5d:f7:b7:37:
         b7:22:b7:5d:ba:7a:c8:a0:f0:a5:0e:e2:22:20:e2:27:69:44:
         bc:69:46:2d:2a:d6:08:e4:be:3d:ee:63:4c:71:b7:af:19:44:
         06:19:51:01:0f:93:ad:41:b6:54:a6:72:81:f6:d7:5d:19:fc:
         0c:fe:9a:58:64:b7:2d:5f:e2:d2:71:da:09:40:31:50:9a:e9:
         2b:0b:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:12:51 2025 by rpki-client