Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6053ff35-d0b9-30cd-8ecb-27f76279ece2.roa
File:                     6053ff35-d0b9-30cd-8ecb-27f76279ece2.roa (raw, json)
Hash identifier:          Umot406ibgUtKxCSDxZA+3FC+VavhptjLEjg4361nCo=
Subject key identifier:   98:76:F2:38:F4:5A:EF:00:31:52:98:D8:C9:6A:BF:66:92:28:A9:C9
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C0CD6E8654AEFF790CDC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6053ff35-d0b9-30cd-8ecb-27f76279ece2.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5ba0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:0c:d6:e8:65:4a:ef:f7:90:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=6ba3084f-ab97-4212-ada9-8b9cb718ad9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:91:ac:cf:97:ff:34:3a:6d:6b:09:39:fc:84:
                    dd:3c:4f:05:b3:51:bf:e7:e3:3a:82:a4:4b:a3:24:
                    14:d3:43:d3:dc:49:3a:e6:5c:f8:10:ec:ea:c6:be:
                    e9:1b:41:43:bb:d6:40:50:23:1b:88:0e:9b:89:fe:
                    e7:c1:79:1c:32:5c:b1:a7:d1:f7:f9:03:3a:80:81:
                    2e:95:7f:8e:2f:8c:39:6b:92:80:fa:9b:bb:67:e5:
                    aa:ed:1d:8a:f8:33:b1:a1:af:68:e6:65:3a:d0:d1:
                    a6:e2:ad:da:98:99:ee:d9:7d:1d:e2:81:d9:70:ab:
                    d7:19:96:70:75:5b:38:d2:af:70:18:0c:28:84:c0:
                    e1:39:92:73:2b:1f:c1:21:6e:6d:2a:d9:1f:02:7c:
                    ce:4a:af:1d:98:c5:54:90:a1:b8:4d:ab:6f:2e:7f:
                    4f:8c:94:55:5f:41:42:89:2d:01:f1:a0:10:42:6f:
                    78:67:20:1a:a3:09:ed:0a:3f:59:cd:67:de:e4:9e:
                    d8:0f:46:c4:19:e1:98:4e:f9:c2:cc:26:4f:9a:63:
                    64:70:88:b2:fe:8b:2a:78:85:48:c3:c1:e0:32:6c:
                    48:20:16:54:b1:c0:b6:fc:ad:07:63:ff:c6:75:a5:
                    06:bf:b5:22:c3:f4:5e:b5:83:33:83:60:7b:20:07:
                    d6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:76:F2:38:F4:5A:EF:00:31:52:98:D8:C9:6A:BF:66:92:28:A9:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6053ff35-d0b9-30cd-8ecb-27f76279ece2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5ba0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:5b:05:e3:0e:e8:8d:f5:1a:19:28:db:94:0d:77:91:4e:ac:
         e6:7d:ec:62:7b:35:fb:fd:43:e9:96:80:51:35:3c:17:83:37:
         c2:9c:37:b4:45:63:f5:20:0d:4f:80:ba:eb:5b:84:1f:41:91:
         79:0f:08:2d:29:35:d5:d9:34:d5:d5:82:24:9a:10:18:5b:df:
         3c:84:71:53:b1:c3:c4:6a:cd:d7:71:8d:05:b8:3c:d6:a9:90:
         d5:fb:fd:e4:53:3f:5b:72:78:f9:3f:15:d7:e4:b6:a6:f5:3c:
         45:23:e0:60:01:79:01:fd:25:13:d7:15:98:d9:81:50:7d:7d:
         fe:71:86:fd:7b:2e:18:f2:e5:a8:f0:9c:5e:62:a6:e9:2a:db:
         74:c4:a6:26:c9:e6:91:51:24:fb:db:a8:63:b3:4f:a1:cf:90:
         8e:b9:3c:71:19:c7:3d:bd:54:f3:03:93:7f:d3:d1:43:44:94:
         73:f4:8d:d7:bf:b3:9e:da:7f:24:c1:0f:24:f7:e6:dc:a3:43:
         84:c0:9d:c0:62:15:6b:85:08:9d:a4:49:72:41:e0:f1:ae:6e:
         db:a6:50:48:e9:80:5c:b7:51:b6:83:d4:2c:69:71:a0:8c:2f:
         6b:74:43:c1:fa:31:5d:c2:96:d8:05:df:89:2e:a9:96:59:0e:
         88:4d:89:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:39:36 2025 by rpki-client