Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9db0b486-468f-3751-b791-a82bf7394505.roa
File:                     9db0b486-468f-3751-b791-a82bf7394505.roa (raw, json)
Hash identifier:          FL6e85+S+RCMUm+wa6g2XrO8qGQpM/o1Bo5o3dhnpJw=
Subject key identifier:   A3:F1:63:B6:E0:14:20:24:2B:F9:44:58:45:4A:38:5B:4E:97:CE:78
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C00DD5A2A9B02B054B580
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9db0b486-468f-3751-b791-a82bf7394505.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:46c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:00:dd:5a:2a:9b:02:b0:54:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=3631297a-c44d-402f-bbed-909448a68583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4a:2c:d6:e3:e2:6d:8a:71:0c:61:fe:94:4e:
                    13:82:fe:48:05:42:03:9b:22:93:c4:5a:b9:68:a5:
                    4d:8c:bd:ab:c8:17:e9:13:38:09:4c:3f:37:46:29:
                    a8:cb:9e:0f:c5:ce:2a:6c:7d:95:97:38:3c:b2:87:
                    3f:95:7b:f2:16:38:7e:52:98:3e:0e:12:40:42:06:
                    37:2e:05:dc:d6:32:d3:14:58:f0:eb:1a:43:c2:3e:
                    d3:37:35:4a:d0:31:03:40:62:e9:4a:12:22:4e:32:
                    80:4d:29:51:11:2f:ae:00:f4:65:dc:29:ae:c1:b6:
                    4a:f4:62:c7:8c:de:fb:1b:01:5b:89:a7:29:16:7f:
                    e9:08:82:18:0b:eb:53:09:f8:73:99:88:0f:a2:f3:
                    e9:48:d7:ff:47:09:97:45:6f:4b:a2:a7:15:31:42:
                    02:88:23:8f:dd:d9:19:e0:34:f4:14:28:39:69:a0:
                    84:76:ea:ce:40:be:8a:0f:b8:ea:78:dc:fc:71:e6:
                    38:d7:2d:cf:98:8c:40:a2:8b:34:70:a2:d9:b2:e2:
                    b6:dc:3b:d7:f9:45:54:33:82:c2:85:05:03:44:d2:
                    51:26:85:0b:ef:e8:bf:44:c1:ae:6a:57:4a:b5:a9:
                    4c:8b:73:ea:9e:eb:e2:21:41:02:37:0d:9d:9a:cc:
                    f2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F1:63:B6:E0:14:20:24:2B:F9:44:58:45:4A:38:5B:4E:97:CE:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9db0b486-468f-3751-b791-a82bf7394505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:46c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:4a:67:57:28:33:67:2f:3f:20:9a:7a:bb:f4:17:6b:8f:f8:
         98:8c:52:d8:ab:a2:61:8d:74:2a:a6:ad:e3:32:3e:89:16:e1:
         0d:4c:bb:fe:ed:77:9a:68:c6:04:51:c1:93:a9:01:f6:f2:64:
         b9:fb:9c:27:86:ce:17:8a:a1:57:89:f6:00:3e:1a:d8:04:ce:
         85:bd:4d:a7:3d:d6:2e:92:44:77:0d:38:c2:08:53:6f:6a:80:
         b8:ab:2b:cd:5b:97:30:c2:b3:2e:0b:7c:36:af:fd:41:e9:4b:
         78:7b:a5:89:0e:f6:81:28:62:a4:c7:c2:26:43:bc:54:6c:e6:
         ce:6d:17:30:93:45:ab:f3:d8:c8:20:97:b8:b4:1b:3d:c2:af:
         a2:ac:14:7c:5d:98:62:74:41:47:1b:82:be:2c:58:08:41:93:
         77:d8:f0:cd:19:e5:50:9f:c7:01:54:90:d3:fc:f1:43:5b:65:
         cb:85:67:07:bf:58:7f:23:6f:a0:38:cf:40:78:4c:78:84:ca:
         2b:af:0a:08:0c:1a:44:20:e7:d7:fa:d8:b4:60:fe:b8:8f:90:
         b2:93:ae:69:89:c2:91:10:fe:f7:3d:3a:cd:cd:89:93:39:ad:
         d5:2c:db:e1:86:74:9b:45:26:81:1d:13:99:12:af:f9:b4:58:
         af:e0:8b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:43:35 2025 by rpki-client