Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8810548c-f4cb-3aba-a1eb-97de2fb5846b.roa
File:                     8810548c-f4cb-3aba-a1eb-97de2fb5846b.roa (raw, json)
Hash identifier:          qAZc3HBlzenro91wR+4R/VYWdh0UusPnSq8Nf+kHgaQ=
Subject key identifier:   21:02:06:9D:D4:65:45:CA:49:F6:34:F3:2B:DC:3B:DE:84:67:87:CE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004BFFBABFBCE0AB1FCF46A0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8810548c-f4cb-3aba-a1eb-97de2fb5846b.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5c50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:ff:ba:bf:bc:e0:ab:1f:cf:46:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=dce4cac4-d662-4db4-8540-247bf72b57c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1f:fa:04:b6:9d:aa:75:6a:a1:69:6e:52:02:
                    a5:22:85:e0:71:a5:4d:d8:1b:ff:38:9b:79:f2:d5:
                    dd:1f:87:7d:6b:2b:b7:8d:74:78:55:e6:b6:66:16:
                    bd:b5:e3:23:86:07:61:d1:0c:70:2f:da:58:3b:99:
                    3e:1c:c4:7f:09:ea:5d:f3:96:b2:c8:e2:dc:e9:74:
                    c1:d4:71:de:c7:34:74:81:8e:dc:79:b0:e2:7b:e0:
                    e4:5c:d2:b8:11:67:be:f8:cd:18:27:e6:fb:0d:e0:
                    f3:12:05:54:bd:19:e1:13:46:dc:58:1b:75:73:ec:
                    77:65:1c:ae:62:28:09:51:ba:96:0c:43:67:6e:20:
                    d2:d1:db:46:17:a5:76:bc:8d:55:2f:f9:fb:2c:fb:
                    0c:dc:6c:9d:3d:ea:f8:14:f3:43:65:5b:38:38:59:
                    38:e3:fb:61:95:ad:2f:fa:b7:7f:28:00:47:01:80:
                    4f:c6:75:95:0e:03:58:d7:00:07:86:8b:68:f7:11:
                    27:17:34:93:89:1c:c5:80:81:53:16:fd:b6:61:67:
                    cf:90:6a:f7:fd:7e:bd:5c:9b:64:95:2c:db:12:ba:
                    2b:d9:c1:98:b1:bd:a7:6b:02:35:8b:be:81:4c:a8:
                    0c:18:46:05:43:94:23:b2:b2:68:51:b0:d9:e4:ea:
                    cb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:02:06:9D:D4:65:45:CA:49:F6:34:F3:2B:DC:3B:DE:84:67:87:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8810548c-f4cb-3aba-a1eb-97de2fb5846b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5c50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:11:96:52:f7:76:84:61:60:2f:39:aa:af:a2:b7:e9:d9:1f:
         3c:be:2d:ef:ab:0a:55:e5:5a:97:b9:81:d3:4c:b3:8d:21:91:
         4b:49:98:eb:e2:6f:e5:40:75:1b:09:89:f7:29:65:12:59:ba:
         77:90:76:66:bd:13:a1:a7:4b:ef:fe:5f:4f:5a:cb:96:7d:d9:
         8f:f2:e5:f1:f9:c1:2b:5f:f3:22:d9:21:3d:c0:d1:32:d5:6a:
         23:3a:a2:b6:80:96:e6:d4:67:d7:ec:9f:66:ec:a0:23:8d:01:
         18:44:5e:e3:ac:75:62:be:61:b3:56:60:4f:59:6b:6b:b8:17:
         71:98:9c:9f:03:1d:30:71:6c:61:4b:6d:7d:b9:6c:48:ae:51:
         80:05:71:57:b3:4c:f6:0f:da:0d:f8:08:c3:f0:0c:70:b3:fe:
         24:32:d8:a5:cc:99:06:f1:7d:90:75:81:0e:f4:c2:8c:8f:cb:
         cd:b3:db:a6:49:1e:81:88:39:6b:d1:7c:6d:32:45:82:21:ba:
         2a:2f:fc:e5:36:c3:4c:db:d7:ea:51:37:b9:9f:76:a9:88:0c:
         1a:7e:d8:f1:76:8e:00:38:d7:b9:8a:d0:99:6d:d9:35:a0:75:
         63:77:3a:6c:08:bb:af:53:07:8a:79:c3:ea:6e:71:74:b2:a8:
         54:fd:bd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:36:34 2025 by rpki-client