Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/882e417e-523c-30e6-ae36-7182231bcd11.roa
File:                     882e417e-523c-30e6-ae36-7182231bcd11.roa (raw, json)
Hash identifier:          p7tFmX9wZw+Y4OiUczNGIjhWPM+94hG1h5nU+PXdo2U=
Subject key identifier:   9F:73:0A:C6:2B:87:2F:A4:47:0F:A5:D2:B6:2E:EF:C0:EF:6F:82:BA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584940396FD267C0CE4374634980
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/882e417e-523c-30e6-ae36-7182231bcd11.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:53e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:6f:d2:67:c0:ce:43:74:63:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=767edd1d-630a-4577-839c-a63aaec30d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9e:74:93:b3:45:3f:f8:be:18:2c:83:e7:5e:
                    8a:b9:29:2b:ae:83:44:26:df:c4:70:b8:bd:f9:aa:
                    58:04:96:1b:f3:8d:b9:8f:ad:2b:56:c8:70:ab:25:
                    6b:5f:5d:5d:fb:d5:d6:f0:cf:9f:91:ed:7c:cd:2b:
                    20:ae:b9:c5:dc:6c:9c:c6:83:39:98:f0:a9:24:10:
                    17:6a:b0:ec:c1:94:06:b1:9e:81:37:84:92:0b:9b:
                    67:aa:47:cc:33:0c:b0:a3:d2:f2:c9:0b:44:1b:3a:
                    c4:17:6d:0d:be:2f:35:3c:80:c6:03:7e:64:1f:cb:
                    4b:af:60:32:7e:ce:37:ac:05:6f:0b:8f:65:61:b4:
                    2e:b9:d6:3a:48:1d:c2:ba:86:ce:f8:3b:e3:06:44:
                    65:8c:04:9f:03:b0:2a:22:bf:4a:4c:17:73:fe:32:
                    25:15:12:57:87:6f:18:e3:86:d4:66:01:0f:7d:d1:
                    fd:90:26:5f:fa:bb:c6:7a:c3:b5:31:0b:1c:da:77:
                    b2:b1:30:4c:66:b8:b7:2a:b9:f0:0e:11:05:d9:2a:
                    92:fc:61:47:96:14:46:34:b1:df:6c:62:82:70:cd:
                    94:8e:84:c4:06:d8:a5:32:b1:69:c3:69:95:6c:b7:
                    df:f1:57:df:03:e2:23:c5:41:5a:9e:61:45:ce:ca:
                    be:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:73:0A:C6:2B:87:2F:A4:47:0F:A5:D2:B6:2E:EF:C0:EF:6F:82:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/882e417e-523c-30e6-ae36-7182231bcd11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:53e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:0b:2c:b7:ce:03:a0:e5:48:d8:ec:d9:80:b6:36:26:c2:f6:
         b0:c2:07:22:79:c7:80:15:ec:25:54:cc:4d:1d:81:e0:ba:24:
         7e:a7:dc:b8:d4:f4:7d:a6:9d:80:eb:7c:35:fd:25:12:69:71:
         c0:00:90:46:16:c8:0e:9e:f2:b8:8f:5a:3b:1f:e9:9a:b4:50:
         e2:a7:bd:b7:6a:93:27:46:50:74:fc:60:a5:26:13:19:1e:96:
         1b:83:15:a1:5a:57:c3:c6:3e:6d:6a:2c:c5:fd:5e:88:99:c5:
         33:d5:1b:a5:7c:97:04:ed:09:97:84:8e:15:48:1f:e1:1d:d2:
         2e:46:8d:1a:12:7d:c0:4f:53:bb:50:86:cc:ea:81:eb:05:da:
         a8:4b:75:1a:15:fc:91:f9:db:54:ed:58:2c:7d:e4:fb:1a:45:
         00:72:b3:3c:ed:ea:9e:f9:41:ef:37:63:25:9d:41:0e:c3:61:
         b6:88:de:e9:de:81:69:0f:9d:93:6a:3e:e8:46:b7:23:1c:2d:
         83:30:4c:29:ac:56:5f:69:c5:56:7b:85:14:97:4d:08:24:c1:
         64:72:46:62:a2:ba:e3:08:32:23:71:ea:f3:9c:8e:f3:58:d5:
         cf:bc:76:c1:fc:f0:5a:15:af:35:b2:a3:22:d8:3f:85:b7:e3:
         24:df:58:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:45:14 2025 by rpki-client