Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/10a4ae85-a3a7-3e82-8fe2-4844df5f5016.roa
File:                     10a4ae85-a3a7-3e82-8fe2-4844df5f5016.roa (raw, json)
Hash identifier:          5wObN+lFt5F8y46zgY3MIaoGOaSClAVH7WrnJ/zVses=
Subject key identifier:   59:CB:70:5E:96:07:7B:AF:D1:65:96:38:D4:77:50:4A:AE:D9:41:8D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C1E2C9593E2B8F0565C80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/10a4ae85-a3a7-3e82-8fe2-4844df5f5016.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5740::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:1e:2c:95:93:e2:b8:f0:56:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=7153255c-e23b-4a4d-ac3b-4d233f185a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:66:ab:ef:bb:db:98:2c:9b:a8:cf:1b:f1:72:
                    a2:a8:8a:f8:75:17:43:37:e1:68:33:aa:af:05:a9:
                    72:42:6e:f6:83:07:e6:5e:30:05:b3:17:4e:d1:34:
                    c2:2a:16:e4:07:da:42:68:aa:7e:33:4e:f0:ec:a6:
                    dc:5d:62:1e:8d:75:98:52:5f:3f:b1:3d:49:42:e1:
                    53:39:26:20:5f:51:34:09:ad:37:70:8c:a9:d6:42:
                    71:c8:9f:d8:e6:6e:cf:be:d3:bf:12:9c:b3:77:98:
                    10:2f:e3:c7:91:fe:40:96:fb:07:05:59:1e:93:d9:
                    25:34:20:d4:69:0d:bb:a6:26:7a:c3:df:0d:ab:64:
                    ca:0f:2d:1c:67:18:62:bd:e8:70:52:2e:bc:b1:b2:
                    ba:e4:b8:7e:0c:0a:0e:29:ed:e9:a4:83:8b:66:b2:
                    db:8a:b7:6a:e3:bf:1c:2a:72:b0:cf:18:ef:2e:56:
                    f6:9c:77:00:e8:a8:c3:ec:29:42:96:9b:88:4b:ee:
                    64:0e:c8:af:f5:8c:93:77:e3:24:26:7c:3c:a1:49:
                    f5:3b:6e:74:1b:7e:0c:56:f8:f2:c9:25:1e:5f:f8:
                    ec:2f:1c:8b:4b:3a:5d:57:b2:5a:52:8a:dd:c1:ef:
                    89:dd:9f:25:5b:04:9f:fd:13:0f:c1:7e:21:72:b6:
                    2b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CB:70:5E:96:07:7B:AF:D1:65:96:38:D4:77:50:4A:AE:D9:41:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/10a4ae85-a3a7-3e82-8fe2-4844df5f5016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5740::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e8:26:c3:3d:a4:82:46:05:8f:8f:a1:a7:18:68:6b:40:7b:
         f3:f9:f9:fb:76:a7:b6:70:18:b8:3b:45:f3:5f:42:68:71:68:
         98:8c:f6:b5:c7:6d:ca:fb:88:41:d6:b2:5e:29:55:7b:02:7e:
         3b:6d:e1:10:8b:93:52:5f:54:3f:74:91:84:8b:38:a8:21:ac:
         1c:95:13:a1:7e:d7:3c:db:2f:14:ee:cf:af:0b:d2:3c:6a:30:
         b3:79:83:aa:cc:00:dc:53:ee:68:9e:bd:07:a8:0e:73:0e:b1:
         48:a2:a0:e3:5b:67:fd:f1:2d:c1:05:a8:eb:e1:0e:86:c3:85:
         a7:41:5e:6a:35:5a:81:16:92:9b:65:96:c2:dd:32:1f:d4:f3:
         d7:0c:70:6c:c2:08:c6:c5:a3:82:df:29:e0:12:15:78:e4:16:
         4c:81:cc:bd:44:ad:02:d9:a2:a3:86:71:aa:02:7e:ec:fb:a6:
         5f:aa:5a:ec:3b:c7:22:80:4e:0c:00:70:ca:69:01:97:d3:aa:
         66:ea:c9:c5:f3:5c:3c:4a:77:dd:11:19:5f:86:0b:31:92:9a:
         ed:82:68:d1:81:b6:ef:a0:5f:e7:0f:3e:04:9d:f2:4a:12:78:
         a7:5a:9e:dc:18:95:e4:20:e7:a7:83:6f:6a:32:c3:41:a5:8b:
         2b:2d:3f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:36:35 2025 by rpki-client