Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4b204c6a-9d18-3b6f-81df-97a7dfb26a69.roa
File:                     4b204c6a-9d18-3b6f-81df-97a7dfb26a69.roa (raw, json)
Hash identifier:          6GxR3FC2kcpZrGlT1tmZuuK4Ixh6/M/BNnMiRXNYLwg=
Subject key identifier:   A0:67:0C:E8:F3:9D:77:79:36:96:E9:6D:15:83:AE:4D:D7:95:F9:C7
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858494039722CAD6CACEA0A84CB00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4b204c6a-9d18-3b6f-81df-97a7dfb26a69.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:4ea0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:72:2c:ad:6c:ac:ea:0a:84:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=ffa5a2cd-dc44-4a3f-8f83-f3088f7d75e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:1c:28:d1:85:02:88:3e:d2:09:25:f8:94:
                    ed:a7:25:de:92:f9:29:1b:3d:18:38:f6:9e:0a:ea:
                    7d:21:46:40:15:5f:7f:b3:b4:f9:ba:62:36:75:b8:
                    08:00:81:08:d5:ee:6f:39:eb:0c:d0:93:ef:9a:35:
                    8e:a6:19:86:4d:79:74:cb:d2:9a:b1:0b:e7:e1:ca:
                    38:17:e3:16:1a:1a:de:b7:b8:ea:85:76:18:85:bb:
                    8d:eb:81:b8:ce:05:6a:a0:4e:ab:99:85:1e:40:74:
                    17:7e:e3:6f:82:75:bc:e4:71:88:8d:cf:ff:20:af:
                    77:e9:0b:6e:a0:d3:73:41:c9:8a:f6:e4:15:ba:c8:
                    79:95:a9:5e:6a:28:de:f0:4a:c5:f8:91:68:42:9b:
                    f0:0c:99:90:8c:6d:fc:d9:99:36:f9:c3:3d:dd:56:
                    d6:8b:82:3b:c6:ff:0d:95:04:16:ca:28:e2:f4:09:
                    b2:03:33:1b:46:53:78:ac:f5:1e:e7:f5:ce:58:09:
                    c7:8e:76:c1:00:ae:11:d1:b4:79:2b:f2:cb:ff:ed:
                    90:c2:0a:63:99:1b:2f:56:39:fa:53:c2:be:0a:ac:
                    eb:0e:a5:2f:75:88:12:0e:03:81:7b:89:b8:cf:75:
                    d3:00:7d:5d:69:18:72:e0:c7:0a:a1:70:e1:66:81:
                    9f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:67:0C:E8:F3:9D:77:79:36:96:E9:6D:15:83:AE:4D:D7:95:F9:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4b204c6a-9d18-3b6f-81df-97a7dfb26a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4ea0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ac:0e:7d:c6:6b:06:ac:0d:d0:bf:74:db:3c:62:bf:1c:95:
         24:fb:da:f0:85:27:01:c0:1b:81:3b:49:8b:e4:43:fd:03:4c:
         d3:62:e9:72:93:11:b3:f0:b3:5f:9c:c6:cc:ae:8f:26:01:b4:
         45:fc:16:c4:9c:93:88:8d:61:32:e1:01:f4:c9:24:f4:e6:df:
         6d:21:b2:08:bd:b4:28:1d:3a:6e:b1:7c:9c:fd:1b:9c:e0:82:
         60:b8:e4:a9:21:26:aa:9b:78:14:ac:c5:3a:f6:24:f8:5c:0c:
         f9:a2:76:d7:f6:84:d8:ac:fa:26:63:94:f6:dd:5d:70:54:72:
         d4:fe:a3:37:df:70:d3:1e:7d:ad:08:2f:e6:5c:48:be:81:88:
         98:3c:71:ad:75:cb:a6:ac:8c:d1:37:14:84:8c:44:66:f9:d0:
         26:3a:f8:3a:c5:4a:eb:84:2b:0c:7a:b8:d4:93:7c:8a:a7:9b:
         cc:5a:95:32:b5:31:1e:a8:4e:0a:f4:a4:49:f6:9c:bb:00:f1:
         ed:31:1d:f1:de:d2:60:16:4c:e3:3a:23:04:e1:cc:c1:11:3b:
         8d:61:1c:b0:88:63:dd:84:62:d0:99:72:41:51:8f:4f:a6:82:
         1a:ef:80:7f:80:11:f3:fb:6c:3d:bf:01:e0:b8:c8:52:4e:9b:
         41:e5:d5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:41:12 2025 by rpki-client