Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0df869bf-cab9-329a-ba1c-1ba2d98295f0.roa
File:                     0df869bf-cab9-329a-ba1c-1ba2d98295f0.roa (raw, json)
Hash identifier:          296aEds6/IqjpeHEnuk7NICwUe8pFg/hIWkF89S5U7g=
Subject key identifier:   10:A0:EC:74:2B:76:DD:84:62:04:BB:A8:E8:70:48:DF:BB:93:13:13
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C14249B7DF16C276D9F50
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0df869bf-cab9-329a-ba1c-1ba2d98295f0.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5b50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:14:24:9b:7d:f1:6c:27:6d:9f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=018a978c-1d1f-42e2-9d28-0e6884d27a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:3d:14:ae:11:f1:b6:49:2e:c8:c2:37:dc:
                    9a:c7:06:8d:27:8d:aa:8c:49:6f:3a:35:90:14:83:
                    84:de:b9:58:f7:1b:95:75:c1:c9:6e:a5:8d:4b:c3:
                    d7:19:ef:2f:81:d6:e5:23:bd:52:c9:44:ac:76:22:
                    13:02:b3:26:9c:5a:e0:de:62:a8:0b:c8:04:d5:ee:
                    85:df:a8:2f:81:46:dc:a1:cc:21:95:e5:d8:a4:77:
                    9f:04:c0:88:43:55:18:c0:78:1b:cd:91:87:fc:f6:
                    90:7e:e9:02:30:29:35:3e:5f:4d:c0:89:fc:05:f1:
                    b7:bf:7c:62:f1:1f:2d:ab:c0:91:a6:15:f1:e6:27:
                    31:9c:70:15:bc:d2:61:f2:46:48:7e:40:dc:fa:4f:
                    a1:59:e0:fd:33:f6:96:f3:f7:b1:74:47:bf:2d:93:
                    9b:f7:8b:43:ae:52:ff:a8:06:d9:ec:25:47:bf:71:
                    9b:d7:bd:67:d8:4b:e4:91:37:61:d4:d8:5e:dc:0e:
                    ce:8e:31:b8:39:d3:2d:7c:f1:8f:1e:89:ce:a6:94:
                    dc:5c:7a:06:81:6b:72:83:4e:e2:e6:ac:fd:9b:82:
                    7e:32:04:8a:ed:fe:24:d2:e5:73:55:43:63:31:81:
                    2e:0a:ad:a5:b3:df:65:fb:b6:99:ae:3f:df:c0:2a:
                    4f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A0:EC:74:2B:76:DD:84:62:04:BB:A8:E8:70:48:DF:BB:93:13:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0df869bf-cab9-329a-ba1c-1ba2d98295f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5b50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ef:06:d4:63:9e:0d:bf:dd:34:f2:e8:a0:c2:84:fe:78:ac:
         d8:9d:8e:12:c5:be:ab:3a:c6:51:6e:ad:09:9d:50:81:3e:dc:
         32:b8:9b:c1:a1:84:6f:a2:08:61:b4:15:26:2d:a7:8e:5e:ac:
         86:85:77:e2:cf:c4:25:33:77:b6:47:db:ca:8d:cc:9e:a5:55:
         ad:80:fd:6b:0a:80:78:79:2c:57:38:ed:90:c6:de:12:1d:8e:
         dd:b4:9a:d5:df:fc:26:2f:b8:a1:d0:96:fd:5a:06:d8:46:08:
         ce:22:82:d5:d8:f0:4b:e4:73:ea:14:89:29:ae:8f:71:b2:f9:
         da:4b:01:bd:a8:41:06:bf:f0:6e:4c:cb:14:0f:8a:d0:ad:21:
         04:00:31:75:82:1d:08:c9:25:3d:23:80:40:0d:85:63:48:11:
         2f:4f:49:ad:a0:3c:ee:eb:e6:22:7c:86:86:ad:04:bb:0b:45:
         84:32:a3:4d:1f:89:89:77:19:4f:33:d1:86:c9:2d:fe:92:a7:
         16:5c:8f:bf:46:aa:31:5c:17:12:e4:d4:4f:cb:c5:78:be:f9:
         be:bf:38:ab:7f:f4:28:b6:81:76:dc:ac:6d:32:62:c4:71:af:
         f4:52:c1:27:fb:55:2e:d3:76:94:8d:58:37:65:7b:4c:b8:6c:
         01:89:9e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:38:07 2025 by rpki-client