Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/89d971b5-6ff2-3941-9e01-29db34b76379.roa
File:                     89d971b5-6ff2-3941-9e01-29db34b76379.roa (raw, json)
Hash identifier:          sgyU3gHfO3xMhNGkssmh5C1OMD9qUIRukxhvCKdxWEs=
Subject key identifier:   84:B0:B0:A0:15:0F:BA:F5:A0:AC:C0:56:C2:99:9A:C3:AC:8F:10:24
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C07F8A0CDAF64A2588580
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/89d971b5-6ff2-3941-9e01-29db34b76379.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:4190::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:07:f8:a0:cd:af:64:a2:58:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=bf32fc16-b8cf-4ee9-adb4-b1f379ca1743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:52:97:99:57:62:37:52:a1:d3:32:4f:a5:97:
                    78:e6:de:89:3a:1b:9d:70:54:e1:f3:a7:39:a1:c8:
                    92:a7:6d:49:f9:81:2f:98:74:e6:bc:4a:50:4b:e2:
                    25:ea:4d:d3:93:be:b5:2e:9e:2e:20:8f:53:ed:60:
                    73:3c:f7:eb:e3:7f:f5:8b:62:eb:71:0d:9c:a1:c9:
                    98:e5:ea:b4:0c:fc:b8:df:6a:74:86:54:fd:ff:9d:
                    d0:d8:e4:55:28:23:db:89:94:b5:25:05:48:a8:eb:
                    4e:af:8a:eb:26:89:02:ce:fd:37:e0:69:ba:f1:cb:
                    4a:c8:9d:db:61:e3:b6:c4:58:24:04:ea:5b:a0:8b:
                    3b:95:4c:0f:9e:2f:7d:23:c1:46:64:54:44:cf:e6:
                    74:61:78:a1:20:f2:9e:50:63:b2:ca:b9:58:82:19:
                    df:74:a7:a2:f2:e4:0c:42:ca:1c:27:89:9a:0e:91:
                    48:c1:15:8e:36:45:81:d0:05:f4:88:e5:43:ed:df:
                    78:33:ad:59:34:11:df:c5:50:67:1c:08:f3:d9:48:
                    e0:f7:50:d5:09:42:1e:40:b1:23:f4:46:06:83:ac:
                    d2:dd:b4:0a:54:27:3d:45:6b:85:9f:8c:f9:2b:2e:
                    5b:74:13:14:5e:b1:bf:b5:1b:14:06:d7:ef:ef:c7:
                    02:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B0:B0:A0:15:0F:BA:F5:A0:AC:C0:56:C2:99:9A:C3:AC:8F:10:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/89d971b5-6ff2-3941-9e01-29db34b76379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4190::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:35:85:cd:ff:04:de:59:4b:79:7b:d3:bc:68:ef:26:28:c9:
         58:4b:fa:de:2d:68:8f:c9:50:54:2e:12:6a:ed:b2:66:5a:e2:
         0d:43:0a:95:1d:37:f6:c9:fe:8d:b7:d8:f8:61:0c:f4:90:c9:
         41:41:f4:68:bb:9a:11:73:21:1f:36:cb:2e:35:7a:cd:9e:75:
         43:7e:0e:2f:eb:ca:07:e6:2a:7e:bf:80:57:2c:fc:66:52:9b:
         3e:49:be:83:93:7d:18:3f:b3:c7:e5:1b:77:28:c6:86:99:67:
         fa:22:24:16:13:4b:b5:de:50:79:dc:df:bf:d2:84:77:ed:77:
         b9:b7:72:16:d3:2f:3d:68:d6:1c:c6:e7:93:7a:75:78:c2:51:
         ed:76:eb:3e:7c:dd:27:80:ad:f8:6f:26:75:07:07:99:14:b7:
         d0:1c:f4:5e:79:33:39:a2:67:47:2c:a9:63:4b:cd:2b:12:ca:
         10:b3:1c:65:2b:19:51:80:15:0c:44:82:63:c5:2d:34:41:3d:
         5a:37:43:23:0f:05:a2:1e:6f:5a:37:dd:65:f0:8a:21:de:dd:
         fa:c6:3a:83:a4:28:ac:22:f7:f0:42:f0:30:74:f8:d4:2a:7c:
         ad:d4:2f:e6:41:4d:22:25:3c:1c:bb:15:b9:10:3c:ad:01:db:
         77:5f:db:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:42:33 2025 by rpki-client