Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a2202de2-2aea-3fb9-8c47-c0d09ba47560.roa
File:                     a2202de2-2aea-3fb9-8c47-c0d09ba47560.roa (raw, json)
Hash identifier:          VXLLq1BZd2De/QGZBjUoKVzWz/EXuMMTUJudMBOFLjQ=
Subject key identifier:   3F:49:31:29:AA:AB:34:61:DB:F4:31:92:68:1F:DB:FC:58:A1:DE:40
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C0ED844238BADDFA21148
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a2202de2-2aea-3fb9-8c47-c0d09ba47560.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5ce0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:0e:d8:44:23:8b:ad:df:a2:11:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=90e7a2ad-6e35-4be6-88ac-5ca4d71a4095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:d3:2c:30:2c:f1:f5:e3:ae:e6:78:07:06:
                    17:98:91:70:08:67:fa:a3:74:9a:33:da:6d:e6:20:
                    61:01:50:9e:a5:79:fb:40:0c:dc:e6:f5:11:2d:01:
                    05:17:4d:2d:e0:73:66:65:f4:c7:0b:54:c1:d0:28:
                    0e:69:c1:c0:a5:11:11:d3:06:f0:40:33:09:38:c0:
                    c4:e7:55:65:b7:bc:d7:ae:68:58:1e:a8:1e:3b:7e:
                    1a:5c:85:32:6f:bb:c7:68:62:cb:9e:af:b3:c2:8e:
                    9d:ab:61:70:ea:a8:ef:3b:29:06:fd:41:fd:bc:22:
                    0a:d2:0f:db:f9:a4:93:60:00:0c:8d:f1:b9:2a:2d:
                    92:bc:78:89:d6:57:2a:10:e2:ca:42:3f:b0:b0:64:
                    80:0c:fe:2e:5e:9a:70:eb:b4:0b:6f:27:b5:36:50:
                    8d:5e:cb:59:16:72:c6:f6:2d:25:26:3d:a1:42:6f:
                    24:59:01:cf:ed:71:4f:5c:c3:4a:26:0b:83:fc:26:
                    d3:d2:46:8c:4e:59:7e:12:94:7e:c3:6f:5f:0f:db:
                    e4:6b:75:cb:69:6f:10:d9:8a:f3:6f:91:16:67:93:
                    44:27:91:fd:a5:88:6a:0c:c2:70:c1:6a:6a:8d:d9:
                    f0:4f:d6:1b:fb:3f:a2:b0:12:93:cf:59:89:6a:dd:
                    50:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:49:31:29:AA:AB:34:61:DB:F4:31:92:68:1F:DB:FC:58:A1:DE:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a2202de2-2aea-3fb9-8c47-c0d09ba47560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5ce0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:3b:cc:13:db:6f:c3:67:a4:9d:fa:51:c3:81:c1:46:aa:2b:
         0c:24:55:22:e8:71:1a:bd:07:92:cc:16:36:34:d2:ab:8e:d6:
         92:d3:fe:ff:4b:1b:78:bf:54:50:d6:12:83:d2:97:29:15:23:
         54:28:7f:55:dc:f4:eb:2f:42:a3:cf:1c:e7:be:fa:d0:8b:5e:
         d4:9d:f7:c1:bc:68:99:d3:d4:07:5a:27:08:ef:74:a8:59:d2:
         0b:9f:10:a1:97:5f:c1:03:9c:71:d6:98:6b:a9:25:46:dc:a7:
         dd:9b:f8:d3:43:9f:63:b9:dd:48:ac:67:aa:84:36:84:d9:ef:
         2b:1c:25:5f:d4:fb:92:3d:a8:21:c8:36:57:f6:55:66:e2:3d:
         20:9b:3a:ed:bf:07:bb:1f:27:53:9b:dc:06:ea:22:4b:8d:6c:
         67:01:4d:ff:4d:2c:c3:52:46:b4:b9:28:ed:a8:ba:09:4a:eb:
         a3:1e:2c:4c:0c:18:8d:c5:67:2e:98:6a:1e:08:6e:6a:9c:20:
         6f:91:23:7a:72:3b:4c:5c:67:c9:dd:fa:64:ab:28:f2:d6:be:
         77:a4:55:b9:30:61:45:98:98:a9:28:ea:62:2a:54:de:f1:c3:
         a5:55:79:d1:b2:a5:a1:d0:41:1a:18:6e:89:b6:e4:40:a4:b4:
         1b:b1:0b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:39:34 2025 by rpki-client