Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4b204c6a-9d18-3b6f-81df-97a7dfb26a69.roa
File:                     4b204c6a-9d18-3b6f-81df-97a7dfb26a69.roa (raw, json)
Hash identifier:          4oTWkW6auAxXpzAurlpS9H6hlETc2ZTd1bqPOhli0zw=
Subject key identifier:   E8:3B:15:9F:1C:F9:EB:4A:A0:C9:BA:19:4D:81:1F:F7:43:D6:8C:3A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C1D9665C946A8FCA3CC80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4b204c6a-9d18-3b6f-81df-97a7dfb26a69.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:4ea0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:1d:96:65:c9:46:a8:fc:a3:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=6d187c75-d1fb-42a4-a348-cd9332eb0e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:6e:5b:31:6c:0e:1a:7f:5c:e2:99:f6:72:
                    96:73:9a:56:7b:97:62:fe:6d:ad:e9:02:a9:30:a3:
                    3c:4b:7f:ff:f3:3b:43:98:e7:a9:aa:31:65:e5:1e:
                    df:bc:c6:38:56:d6:ae:49:90:3b:5b:01:5a:da:c4:
                    52:a7:be:28:28:96:f1:f2:2d:e1:92:e5:81:9b:fb:
                    a2:44:da:ac:b6:af:75:cf:0f:b0:1e:2e:a9:32:61:
                    46:7e:f3:30:a3:51:47:46:2b:b8:2e:08:b6:8d:91:
                    f9:2d:9e:49:bb:8b:7d:fc:35:9d:73:39:fe:08:6f:
                    fd:8c:4d:ef:07:d2:a9:82:ed:4a:56:16:2c:c1:82:
                    7d:af:a1:1e:cd:2b:a5:da:12:64:d5:06:f2:5d:a9:
                    a1:db:b2:44:c2:22:36:90:7a:4b:42:1f:b1:21:35:
                    c3:4a:db:f3:46:41:63:67:d6:d3:88:2c:c5:48:85:
                    7a:fd:1b:06:63:65:42:c7:58:72:35:14:d8:34:7e:
                    d4:3c:d6:45:3d:e5:9b:00:51:af:27:23:99:4f:36:
                    1a:46:82:00:15:af:bc:ac:ce:22:11:7f:31:d3:e0:
                    9a:66:b3:89:71:8c:ac:4c:11:9a:80:cc:03:07:e1:
                    12:26:ce:9d:20:7f:0a:fa:8a:6a:46:48:7a:4a:b5:
                    20:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3B:15:9F:1C:F9:EB:4A:A0:C9:BA:19:4D:81:1F:F7:43:D6:8C:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4b204c6a-9d18-3b6f-81df-97a7dfb26a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4ea0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:2e:46:3a:55:59:de:c0:6f:72:52:61:fb:61:fc:d8:f3:5c:
         2c:ff:dd:58:2f:a4:c0:36:cb:12:b8:e4:81:03:97:63:7b:e1:
         be:a1:31:d2:3a:8f:aa:f0:d0:a2:3a:29:42:1f:e7:a5:e0:fd:
         4f:d0:64:b0:33:1e:33:94:44:18:7b:5a:b2:c5:25:80:0b:a4:
         a8:6c:1f:e5:51:95:cb:52:de:f2:af:f2:c1:9d:e3:29:d5:04:
         1a:d1:ec:d4:f3:90:73:ab:2b:12:f1:18:f6:22:50:43:5e:f5:
         15:52:ee:ba:f5:e1:5c:ef:50:19:14:7b:ac:18:30:11:ef:2c:
         9b:f4:d9:3e:c1:7a:b5:37:7a:bc:1f:85:68:d6:54:10:7f:4e:
         b9:1a:57:87:44:77:13:85:4d:4f:4f:33:33:8a:36:2c:d6:a1:
         16:09:08:b9:06:4a:1a:83:44:ff:01:d4:d8:9d:37:df:66:87:
         11:5f:82:3d:9c:a3:78:d2:c1:1a:68:37:49:5a:bd:c1:27:56:
         71:de:a0:67:59:49:ae:61:7e:a5:9a:d2:16:65:3d:b2:48:b8:
         e2:05:9b:06:a1:3a:95:94:4f:52:c5:2c:16:81:6f:98:f9:1e:
         4a:29:1e:72:22:24:35:bf:f8:eb:a6:d3:88:eb:da:f1:fd:f6:
         51:60:8f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:37:34 2025 by rpki-client