Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9299e9d2-e4aa-3af0-aacd-99711b8073ee.roa
File:                     9299e9d2-e4aa-3af0-aacd-99711b8073ee.roa (raw, json)
Hash identifier:          EHquImSQm7TrF/V7NTZygdjEg48OPmNWYq+bbwhaky4=
Subject key identifier:   7D:DB:BF:D4:D1:9C:EE:9B:99:3A:0B:52:2A:B2:E1:60:74:25:C6:C1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849403973FB12E26C3426A4A880
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9299e9d2-e4aa-3af0-aacd-99711b8073ee.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:55c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:73:fb:12:e2:6c:34:26:a4:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=d0bc9aab-0790-49a8-a035-2d437a5bda4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:db:22:7e:3e:73:11:d9:70:68:18:8c:81:f2:
                    8b:2a:9a:e7:56:64:d8:3e:5f:c3:db:f7:89:c9:04:
                    ee:86:ca:06:74:6f:36:c0:a9:80:b9:16:6a:f7:36:
                    0f:8e:df:17:e3:02:11:e7:84:6d:d4:d0:5d:93:fd:
                    7d:9b:4e:3c:3d:5a:5e:82:56:06:33:36:8c:ad:22:
                    14:28:ed:49:75:26:1f:ec:47:dc:94:76:ee:1f:ec:
                    01:3a:39:eb:e8:1d:e6:c6:e2:98:13:7e:5a:d1:ac:
                    8e:51:0f:52:49:fc:6c:df:49:91:1d:cc:06:d0:cd:
                    8f:80:04:f9:d3:20:be:15:f4:3d:e4:a4:0c:c3:31:
                    dd:13:d9:e6:bc:da:21:87:16:e6:a3:27:7d:47:f9:
                    03:82:24:d9:c6:4c:fe:c7:c6:4f:cf:b5:ac:12:f3:
                    b2:36:03:1b:21:38:7d:fc:a3:06:35:ee:1f:5b:84:
                    06:00:72:00:fc:56:6b:d6:1e:9b:2e:d1:e0:90:31:
                    44:62:a1:78:35:9f:46:fd:a7:f4:a0:fc:a9:44:cc:
                    56:c6:d8:9f:f3:dc:47:03:92:24:1c:6e:35:ac:e4:
                    2e:80:e8:15:2b:fd:65:73:9f:fc:13:52:9e:dc:18:
                    39:51:d3:2f:57:51:6d:fa:93:79:cf:fb:94:db:8c:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DB:BF:D4:D1:9C:EE:9B:99:3A:0B:52:2A:B2:E1:60:74:25:C6:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9299e9d2-e4aa-3af0-aacd-99711b8073ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:55c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:bd:a4:cb:72:1c:d9:cb:81:5d:be:67:74:fd:07:c1:45:97:
         ff:3f:1f:d1:13:76:8e:c8:f1:70:31:eb:32:9f:e9:8f:13:76:
         3a:0e:a3:b9:d8:b9:62:40:3b:29:5c:5d:36:80:1b:e9:9d:ee:
         6a:bc:48:ee:99:98:c2:76:c3:47:83:a4:8b:e4:01:8f:c7:8b:
         d6:81:4b:c8:c2:03:93:28:83:fa:ad:bc:51:a6:4f:4b:f5:6a:
         4e:3f:b4:6c:50:7c:e0:bc:95:a9:d6:44:16:ec:7f:20:7a:a0:
         ca:b1:1a:40:a5:2b:97:49:34:a7:f1:a2:fe:98:96:7a:b8:d4:
         c6:42:1c:90:b3:cf:03:d6:60:26:d3:1a:00:cb:4e:81:5b:3a:
         5a:9f:b8:7e:3b:a2:74:ee:17:71:f4:64:ed:2d:4e:a8:f7:d3:
         78:bb:bc:30:8f:58:b0:ce:55:30:31:30:d5:4b:43:ee:93:73:
         10:6f:e5:6f:39:e8:dd:e8:e0:a8:74:c3:27:99:fe:4e:d7:38:
         8f:85:e7:72:13:a0:70:3a:c6:8f:47:db:d1:25:5a:12:f3:91:
         88:91:94:96:96:cc:36:59:84:53:94:e9:ac:21:5b:04:3d:96:
         81:4d:62:f7:96:14:bd:35:5e:8a:4f:9e:01:e8:86:c5:9e:47:
         d2:74:09:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElAOXP7EuJsNCakqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
ZDBiYzlhYWItMDc5MC00OWE4LWEwMzUtMmQ0MzdhNWJkYTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNsifj5zEdlwaBiMgfKLKprnVmTYPl/D2/eJ
yQTuhsoGdG82wKmAuRZq9zYPjt8X4wIR54Rt1NBdk/19m048PVpeglYGMzaMrSIU
KO1JdSYf7EfclHbuH+wBOjnr6B3mxuKYE35a0ayOUQ9SSfxs30mRHcwG0M2PgAT5
0yC+FfQ95KQMwzHdE9nmvNohhxbmoyd9R/kDgiTZxkz+x8ZPz7WsEvOyNgMbITh9
/KMGNe4fW4QGAHIA/FZr1h6bLtHgkDFEYqF4NZ9G/af0oPypRMxWxtif89xHA5Ik
HG41rOQugOgVK/1lc5/8E1Ke3Bg5UdMvV1Ft+pN5z/uU24yCywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH3bv9TRnO6bmToLUiqy4WB0JcbBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTI5OWU5ZDItZTRhYS0z
YWYwLWFhY2QtOTk3MTFiODA3M2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFXA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEW9pMtyHNnLgV2+Z3T9B8FFl/8/H9ETdo7I8XAx6zKf6Y8TdjoO
o7nYuWJAOylcXTaAG+md7mq8SO6ZmMJ2w0eDpIvkAY/Hi9aBS8jCA5Mog/qtvFGm
T0v1ak4/tGxQfOC8lanWRBbsfyB6oMqxGkClK5dJNKfxov6Ylnq41MZCHJCzzwPW
YCbTGgDLToFbOlqfuH47onTuF3H0ZO0tTqj303i7vDCPWLDOVTAxMNVLQ+6TcxBv
5W856N3o4Kh0wyeZ/k7XOI+F53IToHA6xo9H29ElWhLzkYiRlJaWzDZZhFOU6awh
WwQ9loFNYveWFL01XopPngHohsWeR9J0CRM=
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:46:39 2025 by rpki-client