Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5a7b118b-da6d-34e6-ba68-40230f6fb7f4.roa
File:                     5a7b118b-da6d-34e6-ba68-40230f6fb7f4.roa (raw, json)
Hash identifier:          9q0+P6hUQZKFD15u8eWzicM0OtUFkhjURZEOcWBp+fk=
Subject key identifier:   A1:6A:49:62:98:2C:AB:0B:3B:D0:C4:22:15:B3:81:37:1F:4D:99:A6
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C0915C1FD048CB7EF7E20
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5a7b118b-da6d-34e6-ba68-40230f6fb7f4.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:4750::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:09:15:c1:fd:04:8c:b7:ef:7e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=c2b29d38-ea1c-40b0-9739-13679e39b748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:fa:41:35:3a:d1:2d:4e:21:9f:09:16:e0:
                    c9:fd:37:40:f1:3d:9b:fb:67:dd:7c:36:6d:01:24:
                    bd:d5:eb:54:65:3f:f0:e6:a0:08:19:c4:bd:a3:29:
                    ba:41:84:0f:ee:93:c8:1a:18:a2:85:fe:ee:34:f4:
                    00:a8:34:d2:d7:f4:ff:20:20:8b:c5:97:44:49:a4:
                    6e:19:24:45:a2:79:70:c0:42:d9:db:3b:43:08:ea:
                    4f:64:76:2a:7e:61:42:f7:ab:83:0d:2c:3a:10:8d:
                    14:a8:02:ef:b1:64:ac:40:ba:7b:77:8f:b0:78:78:
                    56:d7:a5:9a:ff:3c:55:66:76:5d:63:b8:77:25:a0:
                    c3:ae:46:60:13:95:60:04:f9:e2:5f:d3:6d:f5:c0:
                    d7:7b:60:98:f3:10:d6:f6:99:05:45:47:5f:6e:4d:
                    c1:99:ad:af:01:ac:07:b2:15:58:77:dd:3e:cc:d9:
                    4a:46:71:39:d6:28:bd:1f:0f:0b:12:92:73:c1:3d:
                    77:af:bd:b3:4e:1e:8f:a0:c2:94:cd:20:17:28:6f:
                    bc:09:2c:ef:74:ca:ea:3b:91:e1:6a:74:05:54:ff:
                    bb:c6:ce:0a:89:b6:5a:c4:0e:aa:99:8a:b0:dc:f4:
                    85:e3:ee:91:46:d5:dc:a7:09:cc:48:ca:ef:f0:ee:
                    5a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6A:49:62:98:2C:AB:0B:3B:D0:C4:22:15:B3:81:37:1F:4D:99:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5a7b118b-da6d-34e6-ba68-40230f6fb7f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4750::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:0b:bf:a0:3e:76:60:64:6e:65:83:72:25:97:92:98:70:c4:
         74:e1:62:31:74:98:39:60:17:0f:f4:97:21:95:5c:b5:bf:6d:
         4f:d8:93:db:44:b7:38:ca:fb:59:e0:12:1c:17:71:5f:10:1d:
         18:16:a1:93:34:9e:bb:cb:39:0d:bd:31:b9:b6:9f:d4:ae:e6:
         97:f4:1b:af:a0:9f:ba:fa:ac:ed:92:4c:27:31:05:79:0b:13:
         af:18:4e:2e:fc:ab:98:46:ff:f1:5a:47:c3:87:3b:2c:93:71:
         86:09:ae:39:31:6a:13:5f:a9:86:9e:50:19:42:7d:bd:93:6b:
         da:f4:ae:5d:de:00:88:b4:eb:5a:e1:5a:b7:74:74:05:5a:20:
         b3:46:74:3e:8a:bb:f5:11:ad:54:4c:d9:1e:78:d9:29:02:4d:
         d2:cd:92:41:5c:27:ed:bb:9c:47:ac:4f:bb:ec:cc:24:7e:31:
         d2:6a:b8:47:3c:e4:26:f3:36:14:9c:0b:62:0a:9c:fa:b6:8e:
         cc:7d:7f:de:95:5e:3d:d9:8d:ae:42:a4:dd:f7:e4:da:d7:2c:
         13:ad:12:a1:89:b2:e9:29:d0:46:47:8d:96:3b:66:ea:73:36:
         5b:4b:f7:e3:81:8d:bd:93:91:42:f6:1e:a1:2f:b1:8d:05:84:
         6d:11:7d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:43:08 2025 by rpki-client