Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/64d99054-4615-3469-a5d9-3d1f548132af.roa
File:                     64d99054-4615-3469-a5d9-3d1f548132af.roa (raw, json)
Hash identifier:          coUnt6MegY2GaYyn+Gaft9WTtZf2kgbs9eH0ou7SVIE=
Subject key identifier:   DF:B4:31:58:C0:AC:AB:32:71:4E:70:40:72:A8:A5:C1:BB:BC:D8:9A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C1297CF75F6F6606DD700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/64d99054-4615-3469-a5d9-3d1f548132af.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5640::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:12:97:cf:75:f6:f6:60:6d:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=4d9285b4-5c71-4c2d-bbba-370ee0df6c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8d:b3:5c:e3:9d:53:ab:b9:99:58:27:52:0d:
                    06:48:0a:c1:3d:a2:70:ba:43:30:20:b7:de:9b:b0:
                    1f:22:b3:35:28:31:8b:c4:1e:25:64:e2:c6:8f:cf:
                    4a:a5:9b:a9:25:de:b1:b5:39:e2:fa:99:1b:b4:84:
                    9e:f8:b6:9e:1b:10:a1:ed:59:09:fb:f2:6e:10:26:
                    43:2b:cb:09:70:81:63:1a:62:51:8c:c1:53:9e:ea:
                    81:5a:02:a0:9a:30:d7:29:31:9d:fb:15:0c:bd:9f:
                    1d:d9:98:b4:92:f4:21:90:31:e0:ea:1b:96:e8:45:
                    1b:71:a8:91:22:15:89:9e:8e:77:5f:f4:2c:db:b7:
                    d7:84:56:66:7a:6a:11:ce:1c:59:ab:8a:82:9e:73:
                    bf:a1:49:57:0a:43:4a:cd:b8:b2:59:d9:0f:55:e0:
                    73:94:a6:d0:51:ac:aa:fd:51:44:26:fa:ec:00:39:
                    a2:0f:02:ac:7f:17:0a:d5:60:2b:74:41:93:e3:78:
                    03:a3:10:23:7b:cc:a0:8d:5d:d5:ae:8e:40:96:a3:
                    2d:9d:ba:17:f5:37:3b:4c:5e:8a:c8:64:03:24:49:
                    5f:c3:40:e3:15:d6:cc:ed:2e:56:c0:a9:97:fb:fb:
                    07:90:bc:39:1e:85:d0:c7:97:3c:60:93:51:64:61:
                    2b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B4:31:58:C0:AC:AB:32:71:4E:70:40:72:A8:A5:C1:BB:BC:D8:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/64d99054-4615-3469-a5d9-3d1f548132af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5640::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:90:1a:2f:76:86:36:d7:c3:a6:43:a6:9a:84:fb:06:44:d9:
         2b:d3:89:38:fa:e7:a9:f0:23:19:73:db:a5:fe:4c:99:f8:72:
         0d:d5:b4:fa:b5:cd:88:27:1a:db:1a:67:51:8e:98:4d:fd:e8:
         4c:13:28:3a:32:c2:8c:ef:cc:4e:8a:c5:66:35:3c:69:2d:6c:
         47:12:e9:8a:91:fa:09:06:f9:d9:72:2f:41:60:2a:aa:9b:eb:
         97:34:65:88:dd:aa:f5:b9:28:ce:79:22:d3:b1:85:0c:4a:33:
         27:90:7e:0a:48:17:78:bc:24:74:65:ee:b6:e3:69:7f:dc:ad:
         1e:23:75:f6:c0:e7:e7:10:fe:bf:7a:8b:81:59:fc:68:23:6f:
         eb:0c:cb:d6:7c:31:86:d7:40:a9:94:ea:95:62:e1:72:45:da:
         09:8d:9d:4a:0b:c5:c6:fc:ac:4d:ec:ec:fb:45:96:3c:03:3b:
         64:3f:00:83:59:6c:6d:ec:c8:61:57:5c:6a:fe:e2:d1:64:73:
         2d:1d:dd:c2:76:aa:97:05:9f:32:56:3a:3f:fb:ef:51:9a:0b:
         19:e5:41:75:0b:89:83:3c:06:fe:61:42:0e:d3:a4:ae:d8:7b:
         a7:0c:02:ec:3a:85:cf:71:9f:28:90:cc:9f:4a:d7:42:a4:bb:
         f4:ec:4b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:40:39 2025 by rpki-client