Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a4b9c37c-2435-3d46-8883-46371449fe03.roa
File:                     a4b9c37c-2435-3d46-8883-46371449fe03.roa (raw, json)
Hash identifier:          Lf8+t5VLDST1ql/WPHC7L3mO38KkQBmPCwpAUp7lyg4=
Subject key identifier:   50:FE:EB:B2:9B:D2:45:8F:F0:A3:1E:99:E1:00:E0:1E:B7:F6:17:64
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C0F96006E9C765E3DBBE8
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a4b9c37c-2435-3d46-8883-46371449fe03.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5ec0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:0f:96:00:6e:9c:76:5e:3d:bb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=2e49c1c5-05df-4db3-93ee-d52d83c94c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1b:1b:26:56:c3:fd:c8:08:cb:9d:b0:53:90:
                    fb:7c:78:ec:c0:24:2d:a6:c1:82:34:f9:b4:d7:53:
                    c1:f5:c6:e9:25:c5:f3:5d:32:35:e1:c4:61:26:e0:
                    98:f4:e2:11:d9:22:cd:31:9e:2f:25:6d:f3:da:0e:
                    f5:88:bd:51:cc:d9:4d:c9:17:c1:09:16:aa:31:d7:
                    35:a3:77:87:7b:c3:8a:07:19:c7:85:e0:6a:cc:b9:
                    b0:4f:1f:45:1c:5b:51:3a:97:5b:f5:36:bf:be:e2:
                    8d:77:b2:d0:c8:5f:27:5f:9a:95:a9:55:35:0d:e3:
                    9d:60:d7:c8:cc:75:41:be:e2:ba:a5:8f:fc:ce:88:
                    29:bf:d6:ba:fe:5f:b5:a7:74:81:8c:21:de:ed:10:
                    02:54:99:20:4e:67:63:da:98:91:c4:9d:3a:dc:b6:
                    be:a1:ba:a5:c8:18:02:04:ae:84:6e:ba:e6:f9:87:
                    ac:f5:08:e5:94:69:2b:a0:d4:58:0a:ab:57:08:26:
                    72:d7:14:09:11:20:48:29:ef:16:92:ab:4f:6f:70:
                    29:91:4c:5e:d2:f9:bd:12:02:1a:48:12:6c:44:3e:
                    8b:3a:ba:bb:ad:a3:de:f3:be:a7:2d:e6:3f:ff:5b:
                    26:dd:1c:4a:dc:f9:60:02:db:98:45:ab:07:89:c0:
                    01:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FE:EB:B2:9B:D2:45:8F:F0:A3:1E:99:E1:00:E0:1E:B7:F6:17:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a4b9c37c-2435-3d46-8883-46371449fe03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5ec0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a7:91:a0:58:d4:82:09:c6:90:67:fb:2f:b3:95:93:aa:cd:
         b9:19:b1:e0:e9:12:4d:56:3c:25:44:28:05:aa:2b:0b:d5:70:
         fd:27:ad:d7:2a:94:61:3a:8e:fc:c6:3f:32:75:d1:2f:85:b6:
         03:4c:8f:bc:02:b1:23:80:71:56:f8:24:85:34:16:a9:c3:aa:
         69:23:9a:42:40:f0:11:2f:86:c2:48:ed:49:dc:d5:60:5f:e4:
         72:13:89:18:56:bf:1c:5f:9c:02:4f:25:f8:43:ef:cf:a0:c6:
         89:bd:fa:97:b9:9e:7d:b3:a6:97:87:e6:73:8f:13:e6:48:f9:
         9f:d4:78:9f:2f:5d:b8:58:e1:52:0c:76:89:00:0d:b4:4e:99:
         3f:6e:19:22:11:db:a2:6f:9a:da:5d:87:3d:bd:45:56:f6:19:
         45:96:df:66:19:98:99:ff:11:87:de:14:36:a3:6a:de:b1:17:
         7a:80:e8:34:f1:b7:a7:ad:0b:9f:61:ab:20:15:31:d6:69:ba:
         01:ca:c8:53:69:0a:b2:7b:88:ff:81:9a:30:39:98:c6:6a:e5:
         1e:47:3e:5b:c6:98:90:8e:b8:14:96:ef:c9:d2:c0:2a:7e:9f:
         4d:24:b3:d1:ff:e6:c0:2e:c5:9c:72:77:eb:2b:97:9f:58:ca:
         7b:ee:c4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 04:53:53 2025 by rpki-client