Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/48ac59d7-a53b-3e8d-ae6d-8a2bc8a50c5c.roa
File:                     48ac59d7-a53b-3e8d-ae6d-8a2bc8a50c5c.roa (raw, json)
Hash identifier:          BtWk6FeO1U6kMb+BxIdS7RGm0YUP3XfZJ6HA+oZMnAY=
Subject key identifier:   0A:37:06:B4:57:92:77:19:96:C7:B6:65:B4:78:AF:99:D3:10:54:EA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584940395115CD4A739031B63400
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/48ac59d7-a53b-3e8d-ae6d-8a2bc8a50c5c.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:5db0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:51:15:cd:4a:73:90:31:b6:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=a7c4031b-344e-4017-89e1-db2b0ef95d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:e9:ca:2a:ef:4c:c7:be:00:27:1b:de:15:
                    1e:03:af:99:e4:87:27:9b:5c:76:c5:b7:54:c1:a4:
                    95:61:09:d6:00:f3:0a:53:55:b2:5e:68:68:cb:a8:
                    1c:b8:cb:64:08:7e:29:8f:33:9f:9a:bf:c9:a5:dd:
                    ad:12:c2:62:99:3f:25:5d:03:da:b9:7d:84:68:0a:
                    44:fa:5c:d6:36:a1:08:d8:c8:f4:75:05:34:e0:15:
                    a7:bc:91:eb:f1:2a:e3:11:be:bf:fb:58:e9:10:1e:
                    09:94:fb:9d:fe:94:00:30:7e:59:e0:ee:94:d4:e0:
                    02:56:77:52:18:e7:47:7f:00:36:cf:de:46:1b:1e:
                    2d:91:0f:ae:9b:19:90:8e:08:10:4b:24:ca:bf:46:
                    9f:51:fb:22:8c:76:8d:89:37:0a:d4:50:15:ec:c4:
                    1d:79:bc:55:e5:28:65:e1:78:4e:59:50:18:93:2a:
                    75:ba:e9:c0:26:b4:47:b0:0c:4d:ba:3b:d5:ff:71:
                    07:e7:d2:fc:fd:d4:8f:b7:03:3d:7f:bf:c6:a9:fa:
                    f2:64:e5:6b:be:bd:57:c7:af:c8:a7:0b:3d:06:56:
                    41:d0:18:43:bd:c7:23:07:50:d3:b7:a1:98:73:f2:
                    16:2c:42:26:11:a4:a8:84:aa:af:16:e2:eb:e8:a5:
                    e4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:37:06:B4:57:92:77:19:96:C7:B6:65:B4:78:AF:99:D3:10:54:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/48ac59d7-a53b-3e8d-ae6d-8a2bc8a50c5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5db0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:90:fc:77:9c:36:8f:f3:30:6a:99:56:1b:c2:6e:28:ee:7f:
         d8:de:7c:83:37:04:51:fe:3f:b8:d7:27:8b:fc:c1:c2:8c:ce:
         42:05:24:84:d8:f8:23:02:48:96:94:57:19:89:ec:ce:5f:a9:
         ac:d5:0b:04:0e:32:06:32:94:be:b2:9b:49:49:32:6d:d0:3b:
         60:1b:46:04:a9:cc:d6:95:6d:d8:9b:88:7a:2c:6b:82:f3:ff:
         77:a5:7a:d2:05:7e:09:b9:2e:f7:8a:ba:0d:8c:54:37:07:0a:
         eb:a6:48:8b:29:af:9f:26:73:52:24:fc:36:b4:59:b6:7b:5b:
         71:9f:78:8e:22:a4:1e:19:33:a9:6f:9e:28:e3:19:4a:f3:6e:
         f2:ce:ff:6e:66:2c:7f:c1:be:f9:07:60:12:f0:03:33:08:74:
         de:84:f0:90:ae:0a:bb:f5:19:f0:b9:7a:ff:36:dc:04:5b:89:
         8b:15:05:17:49:c8:9b:e9:80:55:8a:63:ca:42:83:a1:2b:a9:
         68:e6:54:77:b4:8d:33:cf:2d:06:8a:87:07:51:cb:2b:6f:1f:
         70:85:8d:1a:69:1c:9b:f9:cf:ed:a4:d1:7a:5a:c7:fd:4b:4c:
         52:66:0a:49:38:66:89:a6:a3:fb:5d:a8:76:55:7c:f5:c0:09:
         82:e3:3e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:38:45 2025 by rpki-client