Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5d51147-a8e1-37b7-9bfe-622f347774aa.roa
File:                     a5d51147-a8e1-37b7-9bfe-622f347774aa.roa (raw, json)
Hash identifier:          cayUlCYjYuUqfL09g3VSYhO2rdp4OlPiBRAikYt/+jY=
Subject key identifier:   99:26:57:87:2C:72:1D:96:2D:ED:0D:5D:66:CB:6C:BA:88:C9:B5:CA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C00435D7B397376428A60
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5d51147-a8e1-37b7-9bfe-622f347774aa.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:4e70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:00:43:5d:7b:39:73:76:42:8a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=9ccb7023-f075-4e35-98b5-3bd707e2e728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:2d:9a:9c:37:18:17:97:ca:4c:01:52:d5:
                    47:40:ec:53:89:08:5e:82:90:fd:52:5b:43:3b:1a:
                    3d:b9:86:a9:9f:54:45:37:22:ef:32:16:57:de:d1:
                    44:27:1e:2d:a9:1b:7f:d9:8d:ad:23:40:f5:ae:c2:
                    5e:88:9f:82:c4:a1:d5:fd:d2:38:2d:a3:d6:a8:f5:
                    38:d8:cf:a2:a1:88:6e:eb:8c:c0:33:96:93:97:fe:
                    18:5b:15:74:fb:48:eb:de:77:11:5d:1a:30:8b:98:
                    3b:68:a1:c6:16:47:92:53:da:0a:a1:75:5c:f5:79:
                    21:f4:c6:c4:31:3f:f8:76:3b:2e:af:f1:87:e6:5e:
                    63:2b:f7:bc:04:63:07:73:4c:9c:21:ed:96:e0:7d:
                    12:96:42:9f:59:59:0b:cb:d6:f9:d5:a2:78:c5:04:
                    f1:2e:33:99:00:dd:72:ae:57:85:ee:3c:f5:ac:0c:
                    32:99:63:3e:ff:f7:36:bb:e6:48:3f:2c:ef:19:96:
                    ff:89:cd:27:81:76:76:8f:ed:06:2b:b4:5e:70:aa:
                    35:ba:36:7f:83:e4:a6:4c:7f:c7:78:80:55:05:e6:
                    ab:b8:d4:1c:fd:e6:72:17:f3:04:1d:94:ea:8f:d0:
                    f7:ce:ba:ea:36:fa:e3:02:b5:2d:2f:b7:94:ae:56:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:26:57:87:2C:72:1D:96:2D:ED:0D:5D:66:CB:6C:BA:88:C9:B5:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5d51147-a8e1-37b7-9bfe-622f347774aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4e70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:8b:9e:0b:ef:fd:a6:7f:f3:dd:10:19:5c:d9:a8:df:5b:09:
         ed:58:ef:f3:39:ca:28:85:1f:15:52:e9:58:70:e6:c6:2c:aa:
         ee:07:12:97:b8:19:d6:3a:e9:7b:af:83:b2:82:7b:7b:be:81:
         31:aa:5a:82:ef:0d:4f:e7:2d:ae:98:c0:2f:07:e1:9a:fd:ae:
         48:a7:b4:b8:b2:7c:2a:c5:bd:2f:5a:ac:06:9e:9a:ce:5a:78:
         42:d9:cc:ef:ed:f5:a7:d9:9d:67:6d:d3:b0:f3:1e:78:d9:77:
         0f:ea:60:1d:cb:21:96:18:b9:d7:e8:7e:45:c6:33:2c:c9:49:
         2d:00:c3:30:06:25:fa:62:b1:63:19:95:63:b5:2d:70:30:1d:
         95:25:10:ce:a2:e5:09:3c:97:31:a3:de:ab:76:e0:e9:1c:dc:
         0d:50:31:3f:6b:f0:90:13:48:5f:8a:33:f0:06:cc:ee:dd:b7:
         51:e1:f7:0e:54:c5:01:d1:ba:67:b3:d8:8e:d7:5b:7f:b3:94:
         79:78:2b:15:7d:2e:4e:64:ce:92:92:de:5c:a7:4f:be:74:75:
         3e:18:e1:65:a6:e5:b8:82:7a:c5:fc:66:fd:44:ca:41:b2:cd:
         5d:6e:b8:02:89:20:cb:8d:34:4c:7a:1d:97:9f:34:28:10:69:
         fc:e5:b3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:40:38 2025 by rpki-client