Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/97f3b35e-72ed-3720-9277-c02534805fd2.roa
File:                     97f3b35e-72ed-3720-9277-c02534805fd2.roa (raw, json)
Hash identifier:          0N2UVmbgVDfkxaFwjhDqsW33s9Uau1OZ9Y5mRFOoiAk=
Subject key identifier:   69:14:B2:6E:05:12:C1:9E:DC:89:83:DD:B7:19:F3:F9:85:91:14:B9
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C2269489700305FD36990
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/97f3b35e-72ed-3720-9277-c02534805fd2.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:53b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:22:69:48:97:00:30:5f:d3:69:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=7e438465-efe7-4578-9106-1465c5b29962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e0:55:6c:0c:d5:b7:89:b7:1b:f1:64:2d:bc:
                    d2:6d:16:ed:23:3f:69:df:b5:92:25:07:39:eb:21:
                    79:bf:17:43:f9:dc:a6:41:26:8a:d3:fe:6f:37:92:
                    dc:33:29:a4:98:85:1e:c1:d7:7e:e3:10:7a:19:3a:
                    43:79:a2:ca:ed:1d:6e:15:3d:ad:d2:fb:d2:39:2a:
                    31:bb:cc:30:7f:00:51:9e:1a:eb:53:ec:df:5f:66:
                    07:8e:97:4d:41:8f:3e:6e:46:b5:f0:0f:70:bd:af:
                    c2:6a:3d:27:78:18:78:c0:f5:fd:df:13:2f:c6:90:
                    e8:81:62:6c:a9:f8:ae:27:8f:29:a0:16:de:a4:b3:
                    24:d4:6a:96:cd:fe:b6:80:16:6e:be:75:00:4e:75:
                    a9:6e:24:7b:6b:03:91:ce:a0:dd:80:77:f9:4a:11:
                    05:3b:08:ed:6b:0b:9d:93:cb:66:ae:78:d3:b8:63:
                    6b:30:05:f6:de:0f:50:20:d2:55:df:d6:aa:c0:20:
                    16:41:bb:c2:a2:8b:63:ab:4a:a6:a8:9a:42:e5:8c:
                    cf:1b:8d:54:ca:f2:9a:b7:c9:60:8d:0a:c1:ac:49:
                    70:a8:36:d9:e3:28:d8:39:06:e4:55:83:27:70:a4:
                    a9:b7:ab:5a:24:90:4c:4b:67:4c:f9:81:be:ad:5f:
                    91:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:14:B2:6E:05:12:C1:9E:DC:89:83:DD:B7:19:F3:F9:85:91:14:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/97f3b35e-72ed-3720-9277-c02534805fd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:53b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:02:e6:89:96:08:ed:c0:bd:2f:19:be:7a:0b:1d:d6:1c:c8:
         70:6b:0c:f4:91:7d:0a:ef:09:e0:1a:c4:72:97:d0:61:e6:1d:
         9b:d7:5d:bb:6e:b0:12:d8:67:8d:72:ce:ea:f8:19:c8:e0:5a:
         55:db:f0:6e:8d:46:bf:15:2c:f8:9f:d3:a2:c7:7d:62:a4:1b:
         ab:94:e5:9a:45:7d:63:ac:07:bb:96:81:86:4e:8d:66:44:1a:
         9c:69:11:bd:39:a2:70:ef:0d:0f:d8:66:4c:a6:fb:92:68:e0:
         c9:d9:76:67:c1:b2:7d:18:89:f2:c5:75:77:5d:fc:70:d3:bf:
         f1:bd:6d:d8:25:8b:39:b3:35:2d:90:2a:45:a1:c7:ce:87:b9:
         27:b3:28:84:04:7f:d9:9a:09:f5:41:03:8e:ae:ad:f2:52:4f:
         72:7a:3d:69:c4:cd:be:8e:62:fe:51:92:9a:fa:5a:e3:d4:7e:
         b9:84:73:ab:49:b7:3e:d5:29:dd:bf:b1:81:19:f2:46:53:5a:
         52:17:a1:ec:ba:af:e5:69:cb:dc:2a:1e:27:69:e1:f6:07:94:
         ec:99:1a:8a:31:bc:58:38:83:dc:13:0a:36:7f:e4:cd:a1:92:
         bc:ff:21:c8:2f:24:cd:8e:67:22:e0:54:ea:38:53:a6:70:3f:
         0e:6b:d5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:43:13 2025 by rpki-client