Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be099a9b-bbf6-3664-b387-c178be9ee1f7.roa
File:                     be099a9b-bbf6-3664-b387-c178be9ee1f7.roa (raw, json)
Hash identifier:          1kdGF2yma8vMm6aRdYHu33GxqOwBLGPo2AEaKpZO1mg=
Subject key identifier:   57:E7:24:5B:BA:14:6D:EE:C0:AB:F8:73:9F:9E:26:70:D7:82:46:F3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849A089F26AF150A8AF8A2D4180
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be099a9b-bbf6-3664-b387-c178be9ee1f7.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     22773
IP address blocks:        2001:579:b885::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:f2:6a:f1:50:a8:af:8a:2d:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=e93a2442-5e6d-415b-a21f-550e836ec28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:03:b8:68:17:07:31:b6:a2:d1:7e:d9:a0:8b:
                    09:3e:36:05:d9:15:5f:4c:7f:d3:98:ef:76:10:da:
                    b9:a9:ee:3a:89:e0:09:a5:74:d1:aa:a4:f8:f7:7b:
                    63:73:ce:c9:49:df:71:8e:8a:27:f3:c5:24:9b:a2:
                    7a:19:90:1b:71:7a:97:96:b1:84:2b:34:e2:8e:3e:
                    74:8c:00:98:42:d4:1f:a9:67:a4:64:c5:21:dd:a5:
                    72:5d:43:47:6b:a8:8c:c5:a1:03:8a:1a:72:93:7f:
                    c5:be:eb:7a:90:45:e5:c9:de:16:e0:68:33:75:17:
                    36:8b:8c:41:a1:f6:bd:e4:be:32:91:b6:67:4e:12:
                    13:ff:19:ee:d2:69:8f:4e:dc:1e:cd:a4:29:b4:8f:
                    d5:cb:44:e6:fb:a9:d0:65:51:b6:6f:5c:12:04:73:
                    29:09:b6:53:1d:4c:bb:be:9c:53:97:a9:99:42:22:
                    59:fc:64:ad:f3:9e:ad:fc:fb:6e:0f:b1:8f:0e:82:
                    9f:e0:d4:38:a3:cf:df:57:22:80:e5:6c:c0:0d:8f:
                    61:87:f0:d7:84:07:3e:f3:bd:62:3c:95:c9:5a:dc:
                    87:d0:f8:97:bd:12:1a:ac:20:67:ab:66:4a:a3:4a:
                    38:0e:a5:b0:f0:e1:57:37:01:0a:5f:b7:b4:40:28:
                    b3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E7:24:5B:BA:14:6D:EE:C0:AB:F8:73:9F:9E:26:70:D7:82:46:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be099a9b-bbf6-3664-b387-c178be9ee1f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:579:b885::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:02:49:cf:4e:fd:89:42:1e:b2:82:f9:03:ad:bb:e1:68:77:
         a9:7d:56:37:50:ba:fb:20:63:43:3d:ed:ad:76:78:ee:53:45:
         dc:a4:e9:55:03:4d:24:b4:59:54:e6:e6:e7:e7:a5:5e:92:e0:
         df:2c:c1:f3:e2:ab:42:a6:02:d2:b2:e9:cb:7a:c3:5a:bf:0e:
         f6:8b:91:39:25:b8:e5:3a:f9:b1:93:e8:99:94:d3:6e:c2:b0:
         5d:36:7e:d7:e5:73:67:92:2b:bb:73:de:5e:b7:d9:d0:ec:89:
         01:8a:cc:5f:56:f5:d4:19:5e:4f:08:2c:c5:b2:25:86:1c:99:
         39:7f:96:40:86:05:a9:f9:0d:04:be:6d:9b:bb:e3:ed:b6:62:
         93:88:bc:3b:a7:91:43:ab:74:45:7d:83:e4:da:ac:07:30:06:
         81:2f:22:43:5f:7a:d8:12:19:1a:88:f9:98:a5:1a:ae:c7:b9:
         c4:56:2e:25:17:3f:f8:c7:35:7c:88:ec:ba:af:af:71:7b:a5:
         4a:4e:15:cd:9a:ce:dc:f7:83:5e:c5:26:bc:21:4e:54:ac:b2:
         6c:5f:27:c7:18:e9:83:3e:63:8c:90:c3:63:83:20:54:25:33:
         c8:7f:ee:6b:5c:2a:9b:b3:fb:26:ff:c9:92:3f:71:18:6d:32:
         d5:eb:ec:a2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmgifJq8VCor4otQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk
ZTkzYTI0NDItNWU2ZC00MTViLWEyMWYtNTUwZTgzNmVjMjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAO4aBcHMbai0X7ZoIsJPjYF2RVfTH/TmO92
ENq5qe46ieAJpXTRqqT493tjc87JSd9xjoon88Ukm6J6GZAbcXqXlrGEKzTijj50
jACYQtQfqWekZMUh3aVyXUNHa6iMxaEDihpyk3/Fvut6kEXlyd4W4GgzdRc2i4xB
ofa95L4ykbZnThIT/xnu0mmPTtwezaQptI/Vy0Tm+6nQZVG2b1wSBHMpCbZTHUy7
vpxTl6mZQiJZ/GSt856t/PtuD7GPDoKf4NQ4o8/fVyKA5WzADY9hh/DXhAc+871i
PJXJWtyH0PiXvRIarCBnq2ZKo0o4DqWw8OFXNwEKX7e0QCizSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFfnJFu6FG3uwKv4c5+eJnDXgkbzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmUwOTlhOWItYmJmNi0z
NjY0LWIzODctYzE3OGJlOWVlMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFebiF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEACSc9O/YlCHrKC+QOtu+Fod6l9VjdQuvsgY0M97a12eO5TRdyk
6VUDTSS0WVTm5ufnpV6S4N8swfPiq0KmAtKy6ct6w1q/DvaLkTkluOU6+bGT6JmU
027CsF02ftflc2eSK7tz3l632dDsiQGKzF9W9dQZXk8ILMWyJYYcmTl/lkCGBan5
DQS+bZu74+22YpOIvDunkUOrdEV9g+TarAcwBoEvIkNfetgSGRqI+ZilGq7HucRW
LiUXP/jHNXyI7Lqvr3F7pUpOFc2aztz3g17FJrwhTlSssmxfJ8cY6YM+Y4yQw2OD
IFQlM8h/7mtcKpuz+yb/yZI/cRhtMtXr7KI=
-----END CERTIFICATE-----
Generated at Sun May 11 07:39:23 2025 by rpki-client