Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21ff802b-6dbd-3b24-9336-bec9da6b7921.roa
File:                     21ff802b-6dbd-3b24-9336-bec9da6b7921.roa (raw, json)
Hash identifier:          8EgPIqHT0duXJ8bGY2qR10af+hnQDgNZaJJMT1MHrbA=
Subject key identifier:   8A:59:2A:AA:FB:6D:3D:55:15:50:72:83:3B:A0:B6:15:4E:DD:E7:14
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C0223ADCE5B5B7298F800
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21ff802b-6dbd-3b24-9336-bec9da6b7921.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5fd0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:02:23:ad:ce:5b:5b:72:98:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=bafa952c-ecc7-4b21-b6d3-45fee70c0231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:65:37:5b:0f:a1:3e:0e:5b:eb:16:1b:ec:
                    5b:c5:4b:72:e5:01:9c:41:92:94:2f:41:6d:7f:a3:
                    94:57:3c:08:99:09:38:e7:2a:09:65:43:96:fc:93:
                    83:69:88:9f:83:c2:8b:ed:58:a6:85:5d:9a:75:5c:
                    59:c1:f2:a7:9f:f8:b6:09:8c:93:fc:85:5b:df:1a:
                    f0:7d:1d:4b:0c:20:31:42:72:c0:a1:75:fd:a7:9b:
                    fb:b4:19:65:ae:10:5a:7d:4a:7a:5e:ad:d3:9a:1d:
                    fb:0b:47:c0:6c:2d:41:79:e1:c7:e3:cc:e1:ff:74:
                    4b:ca:50:56:9e:17:53:db:85:f4:36:a9:a5:c4:4f:
                    f4:a4:8f:26:29:01:85:ec:3e:b8:26:8d:35:8f:2f:
                    cb:d1:df:72:79:b0:85:81:87:85:ae:0d:a3:0f:82:
                    05:55:29:c5:a6:2a:6e:ff:e2:2c:ec:82:68:b5:1f:
                    0c:b7:20:f4:02:fa:e4:6e:d1:da:d0:01:b9:4a:7b:
                    0a:e8:26:eb:bf:58:78:3c:22:cd:25:ad:9d:1e:0e:
                    60:e6:19:8e:03:e0:82:ea:2a:70:06:e2:00:f1:16:
                    ce:05:40:48:2b:ce:ab:01:07:a7:bf:2a:1f:7d:ac:
                    59:70:82:6d:27:bc:cf:26:d7:62:83:3a:e3:15:c4:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:59:2A:AA:FB:6D:3D:55:15:50:72:83:3B:A0:B6:15:4E:DD:E7:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21ff802b-6dbd-3b24-9336-bec9da6b7921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5fd0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:07:75:17:83:cf:99:5f:b1:58:fd:f3:5e:5d:68:e5:20:46:
         0f:46:e8:63:17:73:8d:20:89:e0:24:9c:50:d0:47:60:cf:3b:
         ed:32:57:2d:8d:98:7a:de:8b:f5:c2:57:97:39:82:64:54:5a:
         21:5e:43:14:87:0c:c3:d5:ee:15:3c:05:57:74:fa:ac:59:e8:
         61:ab:12:21:31:b9:a4:c3:63:02:ea:27:96:dc:51:65:dd:44:
         d0:84:15:84:7b:62:59:1d:dd:b5:73:3a:c2:d7:b1:de:ec:a6:
         f5:5e:ca:c9:05:4c:a3:86:2f:dd:ac:ce:31:9c:4b:3f:7c:42:
         c8:f8:33:97:33:65:b5:be:66:45:42:d6:56:b8:12:8f:b3:01:
         4a:df:f3:7b:4e:4b:17:9c:1c:66:5b:b1:e3:1c:29:27:bc:9c:
         30:5f:85:e4:87:8c:a1:fb:7e:79:04:02:77:26:de:0f:44:80:
         f5:46:d9:f0:dd:5e:20:6e:07:b3:25:e6:7e:c0:58:3b:a8:12:
         be:0a:64:8f:0b:9e:6b:9c:b4:fa:80:6b:b7:d5:e5:fa:31:45:
         1a:7b:e6:aa:51:5e:6c:4c:24:00:9f:c2:c9:67:05:46:9a:95:
         25:c6:78:40:fb:e8:fa:7e:dc:11:30:32:cd:fb:f3:39:00:71:
         2d:8c:f1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:40:43 2025 by rpki-client