Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6749fdbb-1e9a-332c-9e7f-07fac24d74fc.roa
File:                     6749fdbb-1e9a-332c-9e7f-07fac24d74fc.roa (raw, json)
Hash identifier:          Z0AjExgp+0/J/FL3ifNrgX2wE5gLaFkJhfhAagoaeeM=
Subject key identifier:   BA:F6:81:7C:94:01:6F:52:93:D0:BD:D2:8D:12:8D:B5:C0:65:2B:80
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C1FC32477FE37F1559280
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6749fdbb-1e9a-332c-9e7f-07fac24d74fc.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:52f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:1f:c3:24:77:fe:37:f1:55:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=16a3223c-5f72-473b-aac7-f24aa364e599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bc:1f:6e:a5:e0:87:ed:68:ff:ba:dd:31:94:
                    ef:eb:43:f0:19:fe:28:4f:6c:d6:dc:99:ad:87:34:
                    15:22:8e:30:e7:ea:f2:43:43:35:b2:da:9e:f7:6b:
                    74:44:3e:32:ff:25:df:bd:81:ff:7c:93:88:c7:90:
                    32:0f:d9:e3:97:0c:99:02:52:00:49:db:cc:ca:13:
                    d4:82:36:9d:66:f6:b4:6e:2b:66:00:72:84:52:f9:
                    0e:d6:a7:5a:76:40:6f:30:6b:38:13:16:6a:f1:d7:
                    96:a8:6c:c7:66:70:cb:90:19:29:b3:d0:f1:38:81:
                    3b:ae:11:1f:74:9e:de:ed:eb:a7:64:b0:b0:d4:2a:
                    58:7b:57:f1:46:d7:53:d3:f8:89:56:7b:2a:5b:1a:
                    7b:0e:8f:e1:af:f1:71:6e:df:87:e9:a9:d0:ad:40:
                    fc:88:65:1c:e4:68:71:5d:03:21:9c:55:43:79:ab:
                    23:1d:b4:4b:8d:fb:48:e3:34:24:07:0f:04:d1:72:
                    0d:65:78:96:42:11:65:e4:a1:d5:52:9e:cb:b9:07:
                    af:5a:56:41:3b:b7:26:aa:04:d2:8a:05:fb:df:e4:
                    26:c6:d0:84:71:44:41:15:63:67:40:05:1b:c0:ae:
                    09:6a:8f:f3:be:7b:ad:63:ca:5e:36:01:65:4b:e0:
                    15:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F6:81:7C:94:01:6F:52:93:D0:BD:D2:8D:12:8D:B5:C0:65:2B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6749fdbb-1e9a-332c-9e7f-07fac24d74fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:52f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:21:74:c2:50:72:06:f9:49:9b:9d:8f:53:b3:26:48:ac:2a:
         29:07:c9:0b:7d:2c:0d:e7:be:85:96:eb:77:dd:e4:f5:4f:24:
         e3:cf:4c:26:a5:ca:df:47:4e:e2:d5:96:2e:7a:e1:c6:ec:68:
         6b:a0:83:a6:6b:5c:21:15:3f:62:86:cb:6a:c3:7c:c0:15:fd:
         88:fa:67:60:31:a5:02:ef:5c:55:21:ed:b4:5c:3c:ae:0f:14:
         fc:63:c0:af:68:1b:e8:90:c7:48:8a:1f:ee:ec:54:39:76:44:
         3e:fd:39:f5:94:63:e1:e5:c5:1b:bb:68:c6:06:23:19:b2:e0:
         b3:bb:c5:99:91:14:e7:4e:46:fd:f2:89:a9:90:61:fa:9d:51:
         86:fc:bb:42:fa:1b:e6:75:1c:cc:ac:16:12:c8:e6:66:3f:1c:
         7c:89:cd:bf:68:f1:f1:9f:0c:08:ab:57:4f:26:5c:a0:37:c4:
         c3:b3:b7:82:53:25:15:e9:83:e4:8e:c4:f2:17:8f:f3:f9:11:
         e8:c5:65:34:f7:b6:b8:90:58:7b:11:5f:c3:f5:f7:95:e3:ea:
         fe:f2:c1:24:64:ad:c4:ba:1f:9d:79:ec:db:72:5f:77:fa:b8:
         76:d3:38:b1:3d:43:b2:27:8d:b0:b0:08:82:44:cd:bc:23:93:
         1b:8c:37:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:36:33 2025 by rpki-client