Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21dd65ff-f301-3724-8668-56e32ad90863.roa
File:                     21dd65ff-f301-3724-8668-56e32ad90863.roa (raw, json)
Hash identifier:          5BFg58WTO5efpHf/ChlTPJv+2qzoUYobkIzVsAv6A5o=
Subject key identifier:   66:D8:78:8D:14:79:D4:83:CD:13:21:2E:23:9E:A2:C7:1E:10:A3:DC
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C1CEE579F011A319F8440
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21dd65ff-f301-3724-8668-56e32ad90863.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:4b70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:1c:ee:57:9f:01:1a:31:9f:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=8a7356ae-2e72-4396-926b-38815593ef63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:ce:5c:7f:ec:13:58:a6:05:b9:21:ba:b0:
                    63:e2:6d:bd:8b:6f:d9:85:84:1f:ff:d1:ba:e6:c5:
                    ea:a7:7e:6c:3f:d2:59:40:48:ea:df:c5:dc:06:5b:
                    97:7e:08:e1:a9:c1:be:54:9d:0f:f5:fc:c5:14:a4:
                    16:5b:91:69:79:f9:25:68:57:88:16:ca:69:6a:36:
                    93:09:5c:47:de:68:f5:aa:2b:4c:72:b3:3b:b5:b9:
                    29:39:f0:82:da:78:61:fa:65:2e:79:cc:1e:d4:22:
                    c0:4f:4f:db:94:71:a0:1a:4a:65:fb:69:e2:65:9b:
                    72:98:5d:70:ab:37:95:fb:0b:1d:72:99:c8:f7:03:
                    5e:3e:b8:b2:3c:d5:e8:36:33:7d:16:8b:79:2e:0d:
                    22:43:39:41:51:18:35:9d:f6:3e:dd:81:cc:7f:40:
                    54:3a:92:07:e4:63:7e:d8:7d:de:4c:95:91:ec:40:
                    3f:0e:7f:72:b5:aa:63:b1:df:72:03:29:5e:f7:59:
                    fa:a4:3f:0f:56:45:3d:cd:10:72:50:55:d8:72:e8:
                    68:27:74:db:24:bc:d8:c8:32:5e:e0:56:0f:54:c5:
                    40:87:3c:34:c9:ed:a3:9a:55:b8:32:97:bd:aa:19:
                    b7:a1:9d:a4:f6:34:b6:4b:c9:85:25:b2:27:2a:4c:
                    9b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D8:78:8D:14:79:D4:83:CD:13:21:2E:23:9E:A2:C7:1E:10:A3:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21dd65ff-f301-3724-8668-56e32ad90863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4b70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:92:ff:f6:0a:b1:55:6e:46:d0:80:9b:c5:c9:20:7b:88:87:
         66:6c:2f:92:7f:9d:9e:34:af:ba:be:38:4f:bd:ec:50:c0:11:
         15:3a:0d:2c:35:78:4a:9b:04:4b:01:3a:53:00:88:32:d0:be:
         f4:75:46:1a:b7:c9:1f:2d:df:63:e4:51:e4:73:f9:35:9e:db:
         0f:a9:26:29:be:03:73:1b:b1:ca:25:7b:a5:39:71:30:6a:68:
         3a:a1:ac:24:9c:57:fd:13:93:64:e9:90:e2:71:31:76:89:1e:
         86:88:d8:a8:06:08:79:85:28:6c:12:67:1a:06:29:7f:fb:c6:
         c5:f3:89:82:97:66:d4:90:c0:fd:eb:29:b9:17:e9:89:7a:88:
         f8:b1:42:c6:2f:a8:47:23:f4:18:8f:d0:e0:4d:d4:cf:15:c6:
         ad:f1:8c:74:18:20:ac:88:65:43:d5:2b:e9:90:ce:69:6d:17:
         e2:bf:1f:29:72:ce:13:4f:89:b4:df:cd:69:8a:f1:94:d2:0a:
         52:af:79:3b:5a:3c:0f:b3:83:e4:c1:3a:85:04:45:af:87:5d:
         53:b4:81:21:ff:31:8e:e1:38:e5:4c:4f:2d:77:77:3e:f1:f6:
         5e:ee:49:4c:51:b0:00:d5:4d:08:a4:14:9a:93:83:9b:e8:93:
         26:c3:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:43:37 2025 by rpki-client