Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/691bf20b-7889-3315-b2f6-8daa16c4b679.roa
File:                     691bf20b-7889-3315-b2f6-8daa16c4b679.roa (raw, json)
Hash identifier:          /Ql629Vld1ZztEuWRYPUnOMlvqhcnchyjyKufj5ltrs=
Subject key identifier:   50:D9:FD:71:88:83:E9:D3:DF:5E:1C:46:62:DA:BE:7A:31:E0:4A:07
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C0E52630D112DE0855EC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/691bf20b-7889-3315-b2f6-8daa16c4b679.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:4ee0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:0e:52:63:0d:11:2d:e0:85:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=3c111136-18d6-4191-9089-a60fd7dc79bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:10:88:3b:b7:d3:3b:f3:ee:3b:78:da:26:e5:
                    db:04:0e:73:77:9b:ac:9f:e1:7c:97:66:71:4a:53:
                    bb:5a:30:fd:a2:fb:65:df:6a:74:a0:ae:93:6a:c5:
                    5d:45:5c:ce:cd:44:53:b4:96:02:ef:f4:10:d5:15:
                    7e:75:48:6c:ca:f4:6f:74:da:41:4f:8e:17:1d:91:
                    df:bf:da:08:3b:05:ec:19:c9:34:9c:3b:df:1d:12:
                    52:ab:c5:bc:5c:0f:29:97:e7:23:e2:a1:9b:42:68:
                    56:4f:b0:57:bd:30:f9:fb:7d:74:22:83:b3:25:47:
                    10:14:58:fe:e0:8f:8c:de:e8:c2:1e:c0:e7:f0:35:
                    73:8a:26:8b:c3:d2:a2:37:a1:7c:c9:c4:16:56:2c:
                    e3:d0:0a:9e:c4:4f:27:cb:29:b1:92:63:7e:56:ab:
                    42:f9:0b:d2:2f:a1:49:44:0e:bc:65:33:5c:cd:0f:
                    a4:47:c5:1f:67:35:e1:60:20:a7:7c:a4:10:58:4d:
                    92:4f:93:4f:41:54:cc:85:e2:41:50:96:cb:53:16:
                    95:0e:97:40:6b:f0:86:6d:ce:45:01:e3:cc:0b:8a:
                    89:47:cc:58:3f:dc:8b:1b:fb:19:fa:8a:6f:24:9c:
                    cd:8d:2c:a8:56:5f:f8:16:cb:12:15:b5:0e:4a:2f:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D9:FD:71:88:83:E9:D3:DF:5E:1C:46:62:DA:BE:7A:31:E0:4A:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/691bf20b-7889-3315-b2f6-8daa16c4b679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4ee0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:0d:29:61:bb:ed:e4:b3:5b:21:e9:28:b9:a4:92:1e:25:fc:
         66:fd:e8:bb:d9:3c:ec:c2:c9:a7:17:e8:a2:33:12:3e:42:12:
         90:a7:18:a3:7a:5a:78:89:3c:d1:f5:1b:25:e6:cc:97:d5:85:
         14:0e:c1:9e:23:0e:d6:14:99:81:78:bf:68:d3:fa:40:6d:4a:
         8b:ef:c2:37:df:53:18:7c:99:57:04:a9:fc:54:41:8f:c4:5d:
         4c:c3:0b:99:95:b4:b9:8a:af:14:a1:fd:cd:fc:80:08:b7:81:
         91:9c:f2:d4:9d:6a:6a:c3:cd:30:02:77:62:d5:0f:51:63:12:
         26:c2:48:c5:6e:42:a1:29:1a:8d:a4:82:15:52:e9:8c:d3:1f:
         04:51:f6:23:96:a7:11:f8:79:18:1c:0c:2a:32:8c:04:1f:6e:
         2e:7a:2b:9e:7d:00:d3:2d:76:a9:5b:80:48:2a:8c:a7:09:fa:
         04:94:73:f4:ba:a9:af:75:16:68:6f:00:83:be:8e:0f:b7:bc:
         2b:88:12:63:c8:9d:34:79:4b:25:03:04:f7:94:7d:18:9e:d4:
         d6:4c:35:34:c1:09:87:16:29:99:14:52:37:99:02:93:bc:55:
         e5:21:4a:cd:0b:8e:16:ef:3f:1f:93:2b:75:59:05:1d:4d:e4:
         46:fd:a1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:41:34 2025 by rpki-client