Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/07d408ca-4a17-3217-b68c-83ac5c504446.roa
File:                     07d408ca-4a17-3217-b68c-83ac5c504446.roa (raw, json)
Hash identifier:          PLbxo901iR3u3MSh+hrGQWi6Lrb8adSzl7iznIeOmAA=
Subject key identifier:   5D:BE:54:67:91:F3:43:0F:DF:2D:29:CE:32:74:E4:96:4D:F8:17:07
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584940397382B738745E87A59340
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/07d408ca-4a17-3217-b68c-83ac5c504446.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:45f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:73:82:b7:38:74:5e:87:a5:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=1bdeeb15-8e5d-4024-b726-6959269b1c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d5:68:dc:dd:fa:20:9e:76:7e:0c:5e:08:bb:
                    76:3b:19:b9:87:c6:1e:1a:3b:0a:89:70:da:94:7c:
                    3c:40:c7:da:de:07:ba:b4:60:08:9c:33:fa:5d:17:
                    b2:25:03:c9:76:09:d3:74:de:dd:b3:7a:cc:ad:97:
                    7e:8a:04:9b:67:49:b5:0e:dd:07:c0:fd:e9:aa:af:
                    d2:34:6b:b0:8f:ce:0e:01:50:da:d4:6e:fc:5c:14:
                    7d:09:82:eb:c2:74:83:8e:9d:ee:a2:43:d1:b6:3f:
                    cf:13:1b:30:4f:88:77:03:18:32:8a:49:85:ba:82:
                    7d:c9:7d:59:e6:88:70:f6:ee:82:5f:5d:dd:0b:00:
                    85:a5:ac:d8:3c:2c:8a:f2:04:fe:4c:c2:48:66:0f:
                    99:7d:7b:c6:d3:40:35:17:60:ff:8c:3a:45:a2:43:
                    00:a3:91:80:64:8a:be:3d:77:74:5e:27:14:ce:64:
                    b9:6e:4b:67:36:2b:ba:52:6b:3c:c2:b3:ba:c0:93:
                    e6:fe:93:cc:a7:fe:4f:64:8c:a5:3e:90:12:09:f1:
                    22:6b:2d:6a:57:54:df:e0:6b:a0:cf:5c:a0:82:05:
                    03:3e:fb:56:83:22:05:91:3d:a9:1f:77:4d:58:3f:
                    da:d2:05:a4:51:f5:c8:f6:67:03:a8:7c:26:af:29:
                    37:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BE:54:67:91:F3:43:0F:DF:2D:29:CE:32:74:E4:96:4D:F8:17:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/07d408ca-4a17-3217-b68c-83ac5c504446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:45f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:7a:12:3d:a8:e8:4f:4f:19:94:cd:af:76:70:9c:f8:99:04:
         a6:92:59:4a:c0:e5:9a:62:20:aa:ea:a9:a5:de:d8:90:67:d3:
         95:7d:9a:dd:1d:ec:7e:5e:fc:43:8e:1f:1e:ae:22:a6:e3:1d:
         bf:07:fd:2c:04:c3:f6:c8:68:50:58:36:d5:bd:11:5e:c2:a3:
         8d:6a:46:6e:af:6d:42:44:18:9b:3e:ef:0b:20:43:d7:a4:9e:
         00:2e:51:d6:09:7d:84:69:78:e9:02:df:1e:25:e7:fc:f5:21:
         a7:24:c8:d8:20:e1:bf:7c:68:74:36:f1:20:ed:a9:57:dc:e9:
         36:ee:0f:64:a0:a0:55:a3:d6:ef:59:90:ee:d9:5c:d5:f0:5a:
         04:36:35:af:25:73:c3:3a:ba:84:f2:75:62:b0:02:5f:85:f6:
         3f:28:8e:5f:27:a7:01:d3:ca:08:b4:4b:c8:fa:4a:6c:c4:fc:
         c7:d6:ea:84:b8:a5:02:f4:01:cf:69:e2:58:18:c5:03:88:ba:
         06:a7:3c:07:23:ee:0e:3c:b5:81:59:94:82:a6:c7:40:f1:6b:
         53:0b:de:32:75:ab:58:2a:d4:96:95:66:a6:85:0d:20:91:a0:
         4f:32:17:b2:c6:90:a8:20:a0:9c:32:95:83:b0:45:b5:79:e3:
         67:4f:4f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:50:23 2025 by rpki-client