Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7d86f776-ff1a-3463-a7f8-033a02ec33af.roa
File:                     7d86f776-ff1a-3463-a7f8-033a02ec33af.roa (raw, json)
Hash identifier:          obSoT2Wphmoqjsdf2Kvr4eR6lO2OvvhDd9tYBQdEOVc=
Subject key identifier:   41:D2:E9:50:27:E4:AE:C0:9C:2E:79:80:D4:3C:3F:C9:EE:32:E5:6B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584940396B326AB2AA5D57E93AC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7d86f776-ff1a-3463-a7f8-033a02ec33af.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:40b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:6b:32:6a:b2:aa:5d:57:e9:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=68f54a5b-a0bb-417d-9c39-d8a527d19cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:03:16:0a:79:97:fa:5b:9c:3c:6d:ac:7d:0a:
                    68:a2:48:a9:3f:5b:f7:02:0f:74:2d:c7:12:86:ff:
                    36:6d:43:76:8b:98:63:cc:bf:89:be:b4:0e:b7:a9:
                    e4:07:b5:75:99:2f:ec:46:1d:75:78:f2:26:60:d3:
                    37:0c:96:3e:4d:1c:a1:f4:8f:4a:94:be:27:1a:12:
                    49:1b:9d:da:36:fd:73:a5:8c:c3:2b:48:09:52:38:
                    75:aa:38:1c:9e:f9:89:38:80:3e:f3:de:2e:4f:45:
                    e6:48:0d:e8:86:5c:59:99:77:29:8d:f0:5d:8c:03:
                    b7:b4:71:34:8e:7b:54:12:88:57:ce:46:58:61:56:
                    3e:ea:59:a4:f0:8b:7e:bd:fc:59:fb:69:b8:5c:87:
                    cf:7b:10:ca:35:09:03:bc:0b:42:05:d1:42:48:fc:
                    a8:36:d9:7e:04:4d:27:2e:30:fb:56:be:f0:9a:53:
                    7e:07:88:a2:80:af:1d:bc:aa:84:e3:20:be:02:50:
                    73:d7:71:28:f8:5f:41:c9:16:b6:ef:ac:e6:af:af:
                    40:c3:b6:19:d2:5d:3f:91:88:53:02:33:54:f5:31:
                    fd:43:5e:75:36:94:5b:e9:e3:a7:a9:4a:4c:47:88:
                    13:90:5f:95:55:15:e5:ae:b0:e6:9b:48:f8:43:5d:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D2:E9:50:27:E4:AE:C0:9C:2E:79:80:D4:3C:3F:C9:EE:32:E5:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7d86f776-ff1a-3463-a7f8-033a02ec33af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:40b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:3c:92:ee:e8:15:f2:c8:fd:9f:7e:6f:94:71:9b:8c:92:3e:
         eb:5d:0b:35:32:a6:b5:96:5b:89:9a:47:90:a3:87:f8:f8:5b:
         a4:a9:61:b1:53:8c:08:71:6c:88:1e:c0:61:aa:e5:64:69:e2:
         51:af:e9:f3:73:f5:49:2e:f1:38:fa:e3:18:83:d1:f6:44:69:
         49:60:e7:bc:fc:68:fc:56:af:d9:b3:1b:56:f4:96:a8:df:92:
         d8:c7:18:df:1b:09:d7:8a:eb:41:87:89:e1:b2:cc:59:db:78:
         37:4d:9c:d8:be:06:fe:1f:e3:f2:91:e0:3f:f8:ce:d0:f1:1f:
         ea:df:59:93:19:74:e3:cc:d7:c3:9a:40:24:f1:d1:1a:d9:2c:
         c4:cd:80:65:3a:ae:8a:79:dc:6a:6e:59:a4:66:72:d8:b2:c6:
         6e:19:3c:53:64:02:c8:3b:6f:b4:c4:04:6d:7c:1a:fe:68:c9:
         12:be:ef:93:82:c1:ee:6e:ed:c8:53:30:51:1d:fa:0a:a5:6c:
         9d:15:d2:7c:c0:29:93:06:fc:b4:c8:e3:c6:c9:0a:3e:f6:cc:
         81:29:a8:03:31:da:41:a6:55:97:7c:8c:ac:e7:c3:b6:b0:39:
         0e:e0:3f:03:7e:43:13:7d:03:50:e6:49:9e:fb:2c:e3:88:b7:
         95:b1:f2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:43:31 2025 by rpki-client