Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/984814c1-accd-3500-a3df-f7f9ea656d23.roa
File:                     984814c1-accd-3500-a3df-f7f9ea656d23.roa (raw, json)
Hash identifier:          zG14PjcsJRe1Eb0euBQIMeEzEXDK1Kh2hghr+Wax76s=
Subject key identifier:   80:C9:37:A2:A4:64:10:8C:DC:A7:58:01:57:A7:1A:EC:E9:5C:BE:25
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C0AD9E468336B33F3AC00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/984814c1-accd-3500-a3df-f7f9ea656d23.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5870::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:0a:d9:e4:68:33:6b:33:f3:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=6b15c059-c014-4a0f-bd88-27e34c40b5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ab:99:9a:26:24:d4:54:db:1a:51:ef:f4:56:
                    0c:76:54:5f:4c:00:ac:32:67:a4:32:4f:a3:4d:6e:
                    25:09:fb:b1:ff:ef:19:07:39:bb:77:67:cc:20:8d:
                    0f:88:a9:46:98:9d:f2:c8:a4:c1:72:80:00:eb:10:
                    90:8d:22:17:f3:34:2a:e2:6c:ec:f2:86:d0:e4:0b:
                    0c:8a:29:ad:d6:2f:f0:48:cc:73:74:d5:34:c6:6a:
                    6a:39:19:4d:d0:0b:f7:84:bf:65:4d:0e:3c:db:55:
                    7c:2a:6f:33:6c:7b:1e:83:c7:a2:33:e2:a2:f8:2f:
                    cc:ff:d0:15:8c:86:29:4b:e8:48:57:5b:cf:68:7e:
                    de:56:19:15:3e:79:f0:44:a1:16:3d:45:af:03:b4:
                    c8:32:1f:fe:7c:34:c0:4f:a8:f4:b9:a7:23:cc:0e:
                    d2:61:85:a6:85:dc:b8:fd:e4:13:cb:d3:88:e3:f5:
                    6b:11:81:80:9f:46:4b:58:77:73:d3:47:e4:8d:90:
                    8a:88:86:0b:7c:f5:44:22:1c:2c:57:91:e5:0f:37:
                    50:44:b2:2b:2d:0c:4a:53:71:a6:c1:4c:6c:7b:05:
                    5b:30:38:81:77:9e:48:a8:db:1b:13:80:0d:33:69:
                    28:1c:69:e0:fd:23:f0:0e:c8:09:12:5c:af:e2:57:
                    a9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C9:37:A2:A4:64:10:8C:DC:A7:58:01:57:A7:1A:EC:E9:5C:BE:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/984814c1-accd-3500-a3df-f7f9ea656d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5870::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:2c:5c:c1:1a:75:c1:49:5e:64:5e:03:24:08:ea:94:37:9b:
         57:e3:7d:57:c9:49:85:31:97:42:fd:b7:88:40:e3:87:e0:c7:
         df:7e:1c:65:70:42:d6:28:a6:0c:3b:84:93:69:dd:6b:88:5e:
         31:a4:d4:66:e0:78:52:6a:90:17:62:63:c5:b9:0b:5f:2b:15:
         4a:a7:ff:4c:30:4d:5d:14:b3:27:e2:0f:fe:8a:65:5f:25:47:
         8f:46:7c:2c:6f:e2:6c:ab:e7:b9:df:cc:65:c8:79:b5:fb:22:
         a1:54:7d:2c:e8:0e:ff:7d:5b:ea:c0:f4:3c:99:a5:be:b7:90:
         57:41:ce:6d:7a:a6:26:29:49:71:de:18:b6:cc:f0:f9:63:b1:
         7a:62:e1:e7:98:08:c5:17:81:af:16:57:c5:c3:cc:20:bd:3b:
         76:61:38:fb:47:a9:30:7f:9b:7b:30:24:11:9c:4b:e2:97:33:
         66:23:c4:55:c1:6d:b9:de:7e:69:71:7e:ef:ea:70:0f:16:0e:
         33:58:e0:41:dc:86:80:d6:28:0b:ba:26:56:b6:9d:ee:29:50:
         a9:7f:82:cd:c2:04:c5:21:1a:b5:34:19:da:d0:ce:cb:07:c4:
         34:08:32:36:f9:5a:b1:56:cf:82:ba:78:82:39:ff:f3:d9:42:
         81:b3:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:39:34 2025 by rpki-client