Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9e293180-9035-3d49-a9e9-e8d32de86fb2.roa
File:                     9e293180-9035-3d49-a9e9-e8d32de86fb2.roa (raw, json)
Hash identifier:          hs2kXWwLXKKK79XkT+KajACZ3Y40I43ITAcJIOfhu90=
Subject key identifier:   69:6F:DF:CD:9E:C2:B2:77:8C:56:D2:AB:67:3F:24:6D:B8:82:89:73
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C0C9D77C2D1D8A3258380
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9e293180-9035-3d49-a9e9-e8d32de86fb2.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:4350::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:0c:9d:77:c2:d1:d8:a3:25:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=c639eaac-7e6a-49ac-b3ba-cbe2c9eef702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:d1:50:fb:ec:a7:e0:36:6c:ca:da:65:e4:
                    d0:a2:2f:98:49:a5:f6:a0:56:91:bc:07:86:88:b9:
                    aa:7f:f0:81:7e:b5:dc:d9:22:28:37:af:cf:9d:0c:
                    19:0a:b9:dc:68:5f:f8:5b:fa:9e:5c:39:7a:e2:04:
                    98:46:a8:4a:7e:4c:64:de:b0:a4:bd:e8:18:3b:ff:
                    cd:6b:32:dc:a0:9b:ce:11:1c:72:bc:6a:06:e1:33:
                    5b:83:60:aa:60:2b:47:4a:63:85:62:d9:20:46:3d:
                    2c:75:17:06:db:42:4e:0b:85:f9:cc:36:fd:ca:04:
                    83:d1:4a:08:ca:16:1e:40:f4:f6:36:1a:a8:7d:ac:
                    e1:30:19:c2:d0:84:93:32:bd:e3:cc:0d:b0:04:25:
                    21:34:14:6b:7d:c7:8a:5e:d7:bf:0d:7d:c4:61:49:
                    63:19:40:b0:ee:18:f7:38:79:31:af:6e:e4:0f:59:
                    f5:fc:69:5b:ff:26:14:37:2c:6f:ef:7b:f4:7e:d0:
                    15:86:c5:6f:32:10:74:9b:b5:57:41:d0:cc:f6:67:
                    f3:fc:6c:c3:ae:1f:fe:25:c7:74:c8:0a:87:76:40:
                    7f:59:c7:f9:56:90:61:14:66:5f:2f:6b:c5:d4:59:
                    51:7a:4b:f9:e4:c9:95:c1:94:11:49:32:6f:f0:80:
                    aa:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6F:DF:CD:9E:C2:B2:77:8C:56:D2:AB:67:3F:24:6D:B8:82:89:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9e293180-9035-3d49-a9e9-e8d32de86fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4350::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ad:42:33:10:44:b3:93:95:a9:0a:2d:7a:d1:f5:61:82:3c:
         3a:02:13:1c:3b:a9:e0:96:90:ff:63:b1:0b:e4:d2:70:57:e5:
         42:99:1e:bd:bb:d1:e7:25:df:ce:c3:14:11:f8:c0:55:05:40:
         d8:14:87:44:26:63:17:0c:f6:77:d1:4b:b0:7b:56:b8:ae:38:
         27:ac:6d:ba:44:9d:44:67:c8:27:7a:bb:f9:7d:93:fb:57:26:
         67:93:7b:cb:44:17:e5:02:ad:70:41:b5:48:a3:18:2f:1c:3f:
         2a:30:82:b7:36:30:dc:4e:e3:21:cd:eb:61:79:f0:5c:5c:d7:
         9d:99:e0:f8:71:19:d1:ba:96:b1:3c:30:2f:31:4b:22:12:7c:
         65:23:81:d9:40:0f:c0:89:98:d4:3b:b9:ab:db:c4:00:44:3f:
         59:7b:4b:a3:65:ea:bb:cd:2d:fb:a1:e0:fb:5d:bd:7b:67:9d:
         9b:a3:b4:33:8e:af:18:1e:52:34:ba:b9:a0:17:1b:d3:65:89:
         87:9a:81:01:71:7c:b0:89:97:21:a9:f4:e2:6e:aa:4a:de:87:
         b7:11:2d:c4:39:ce:88:3b:ef:7e:9d:e5:08:54:c5:6b:a6:29:
         9f:b8:01:a6:c7:85:74:79:34:e8:06:2c:3b:c8:2a:2a:f6:37:
         3a:e8:ff:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:41:38 2025 by rpki-client