Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3ca3291-19bd-3ac0-91ce-a688a6015051.roa
File:                     a3ca3291-19bd-3ac0-91ce-a688a6015051.roa (raw, json)
Hash identifier:          43PF7ox0wykDbEmcYnW+3eT2TBix81lcUy9UXsEoDiM=
Subject key identifier:   A0:41:4F:63:3C:F1:D1:ED:07:CD:85:1A:2F:10:B8:86:A9:40:5D:AA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C06B7B561B2F27BD535C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3ca3291-19bd-3ac0-91ce-a688a6015051.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5ea0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:06:b7:b5:61:b2:f2:7b:d5:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=711dc515-a8c3-4271-8c9a-86228eb16c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:3e:db:17:83:c1:fd:fb:dc:a7:5e:ba:0a:
                    f1:4d:3e:6f:a6:64:e4:8e:e8:de:33:65:33:e8:ef:
                    01:59:ee:d1:9f:68:db:d4:92:6e:78:d6:84:4f:f2:
                    b7:9e:70:c3:a3:b0:76:97:db:81:31:eb:d1:a1:f6:
                    bb:c5:da:b8:c4:19:41:1c:1e:0e:1d:cd:39:24:01:
                    04:5c:f3:da:64:75:16:83:c9:e1:61:1b:f9:37:f1:
                    40:91:f9:23:18:22:e8:e4:7b:73:51:72:61:f0:fb:
                    16:80:84:c5:be:d2:50:b7:30:91:b5:b1:59:b9:3e:
                    5a:a1:0b:89:9b:43:9e:5e:2a:02:4b:59:7a:11:de:
                    75:b0:ce:61:df:2e:46:e9:da:a5:b7:2c:03:ef:b7:
                    2b:c6:c6:02:5a:00:b4:46:28:92:49:ce:5b:de:87:
                    c2:d6:63:c0:e0:c8:18:f3:d6:02:de:72:c3:ac:56:
                    56:dc:60:0b:f3:c3:e9:b0:0f:e9:56:73:97:cc:e2:
                    3c:8c:a9:ce:e2:50:a5:40:a2:ce:27:11:2e:d3:b4:
                    eb:83:08:81:df:65:d5:c6:f1:af:81:88:72:b2:75:
                    3b:6e:88:1c:4f:0c:6b:c1:97:4f:16:1f:dd:3e:d0:
                    06:9f:32:ab:b3:41:82:60:17:19:5c:3a:e9:22:3d:
                    fd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:41:4F:63:3C:F1:D1:ED:07:CD:85:1A:2F:10:B8:86:A9:40:5D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3ca3291-19bd-3ac0-91ce-a688a6015051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5ea0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:1c:ef:0c:db:db:92:f0:ba:60:5b:94:85:03:d3:1a:9f:d1:
         37:2e:06:f2:73:1b:12:cf:d4:f8:db:ab:47:e3:2e:9f:5c:a3:
         82:49:19:31:b4:cf:6c:5f:cf:cc:e0:c4:b1:ff:03:55:d6:0e:
         dd:f8:64:d8:84:60:1d:15:58:c4:b8:b4:8b:8e:c4:66:af:89:
         94:e2:d7:97:81:d2:a7:88:2f:db:f7:3a:72:64:3a:3c:cf:43:
         c8:76:23:78:d9:c9:fb:02:c2:64:a8:4c:54:6c:94:a0:4a:b0:
         3c:37:39:2b:db:16:f8:61:bf:27:b7:ff:4b:53:10:49:69:00:
         83:ec:57:28:82:a0:43:09:b3:fe:a3:54:83:c5:9c:f0:cb:7d:
         c5:a6:da:0e:91:1f:be:ca:b8:64:18:67:6d:0a:41:02:4c:1e:
         fc:0f:79:bc:f8:11:45:07:b7:66:dd:ea:5b:01:34:8a:8d:68:
         85:5c:4c:6d:f3:bf:d6:12:f0:1b:b1:23:8e:81:81:d5:e5:c2:
         2f:10:be:7f:4a:30:6b:da:01:6c:61:5b:c7:83:d1:04:23:b2:
         18:8f:c2:23:81:9d:72:de:b4:41:68:2a:0e:46:e4:20:83:45:
         9c:88:99:ca:0a:ab:05:b6:27:20:7f:76:70:6f:86:6f:d9:d6:
         24:2a:20:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:42:28 2025 by rpki-client