Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aadd8117-7e59-3927-a8d3-00eca0345488.roa
File:                     aadd8117-7e59-3927-a8d3-00eca0345488.roa (raw, json)
Hash identifier:          5BQ32U6Nms7qsFlIqHk/Eg2i9EgGyoPV/xNVsCti2Wg=
Subject key identifier:   F8:E8:BF:90:00:20:7C:D7:B1:07:55:3C:DB:83:AB:B0:A7:77:98:4F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C1FA29F32B3BDEBEED500
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aadd8117-7e59-3927-a8d3-00eca0345488.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:4710::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:1f:a2:9f:32:b3:bd:eb:ee:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=839a3f4b-de01-42e7-8087-eab78d30e6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:65:e4:3c:68:81:c9:e6:43:cb:03:c1:d3:f1:
                    e3:be:d7:fa:3d:32:e3:e9:5f:40:40:40:03:8d:c5:
                    ec:0a:3e:6a:bb:cc:a5:2f:f2:5b:ca:da:05:56:04:
                    bf:41:e3:aa:e4:bd:b0:d9:6b:36:cd:99:22:1d:34:
                    7d:7a:03:f8:7f:7c:81:ea:fb:1f:c9:0e:05:8c:f3:
                    c4:70:7b:dc:26:91:e9:9d:37:4f:de:35:b0:13:4f:
                    54:fa:c0:f2:25:40:1b:a4:68:fb:f8:4c:9c:ed:eb:
                    3f:c8:78:aa:3a:76:40:c8:ab:ee:13:6b:78:65:53:
                    ee:c5:c6:f9:85:37:03:7f:42:c2:93:0d:80:cd:b3:
                    75:e9:d9:1b:f1:ba:39:c5:08:16:4f:16:1b:6d:36:
                    4c:f7:85:7b:2c:91:ca:ea:34:ae:0a:80:88:5b:74:
                    f6:30:21:9f:e6:97:41:5a:e8:d7:0b:42:9d:d9:c8:
                    cd:d3:2f:aa:d4:03:dc:98:ce:33:5b:46:86:4e:4e:
                    74:d4:cd:1f:40:90:c2:04:9f:f9:16:f6:36:41:f4:
                    e8:db:43:28:c0:23:12:65:73:b1:b3:ef:72:ea:2c:
                    a6:d5:8d:a8:11:92:2b:1f:52:84:6d:0f:03:8f:1a:
                    ba:dd:ab:5f:88:3f:42:85:6c:3e:c5:cb:8c:7b:f3:
                    c1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E8:BF:90:00:20:7C:D7:B1:07:55:3C:DB:83:AB:B0:A7:77:98:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aadd8117-7e59-3927-a8d3-00eca0345488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4710::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:01:16:fb:2d:50:64:ff:0e:04:61:da:fd:44:13:3d:1a:57:
         7d:59:5b:7d:f7:13:7a:99:e0:e6:82:4a:1b:3e:24:19:12:ac:
         32:03:2b:9b:8a:6d:ce:70:72:70:3a:f9:95:74:98:a9:c5:41:
         7e:ff:b8:36:12:60:58:4e:7d:df:3f:a9:9e:01:47:52:57:fa:
         30:8c:bd:72:54:2d:00:9a:69:b7:60:e3:8b:f8:0d:10:36:77:
         07:95:cf:fb:50:b6:33:a7:d8:e0:94:ec:71:51:92:90:07:ce:
         f5:5c:3a:7c:0a:1e:5f:88:eb:30:b5:b8:10:a2:2a:b6:c1:b4:
         c7:a7:5b:3e:11:5e:26:37:0e:21:7b:69:a2:d6:f9:a6:de:29:
         32:30:a5:55:39:0b:96:57:a1:3a:8a:95:2a:9b:98:6a:1d:50:
         8f:5f:88:38:10:8b:6a:10:1b:af:c6:58:5c:dc:79:dc:d3:b3:
         44:00:f3:fa:31:7a:53:58:e4:30:e8:70:61:18:09:d9:05:33:
         b8:78:89:72:e3:f0:80:7d:be:cb:3c:86:d1:19:ba:4c:cf:5d:
         44:f4:04:f2:1f:6a:ae:92:0c:f8:db:d9:ec:ec:02:81:a9:85:
         6d:63:12:00:6a:ae:02:e0:01:9c:79:0b:e9:4b:3e:d0:a5:00:
         6b:e0:c0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:42:30 2025 by rpki-client