Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b5523e5c-d8fe-3721-ad7c-9d5784acc27e.roa
File:                     b5523e5c-d8fe-3721-ad7c-9d5784acc27e.roa (raw, json)
Hash identifier:          k5qXY/gfV7KF1E46gYBO8aeIegp9CNIy138SwMxz+UM=
Subject key identifier:   38:D7:D8:C6:79:B0:81:FF:30:36:5E:D5:10:98:4C:8D:04:81:80:CB
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C065733BC424460B20580
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b5523e5c-d8fe-3721-ad7c-9d5784acc27e.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5c20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:06:57:33:bc:42:44:60:b2:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=6b69a2c5-645d-41f3-b4cc-de7b7060b54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9b:9a:5d:03:08:52:2b:73:7a:59:e6:d3:81:
                    3a:10:c8:6c:1c:70:b9:2f:f1:a1:da:9a:80:7f:9b:
                    43:60:7e:a8:65:e0:00:a5:46:01:23:86:89:04:81:
                    61:40:e6:68:0f:d0:97:68:55:10:16:90:a8:8e:dd:
                    bf:0f:46:14:00:1c:c2:44:f5:cf:35:7f:84:ef:0b:
                    eb:b0:d2:4a:7c:b8:26:ac:13:a5:26:06:61:c1:80:
                    fb:bc:1d:52:10:ee:53:6f:3b:56:49:fd:18:79:58:
                    1c:f2:4d:55:83:5d:eb:b6:9a:77:95:a2:2d:6c:be:
                    61:96:54:83:19:a3:48:9d:81:8e:f3:b4:6a:9e:68:
                    ea:40:9f:8d:41:94:a4:1d:3e:9e:42:08:93:51:2d:
                    83:1a:e9:89:88:e4:f6:d5:c5:d7:05:70:8d:fc:a2:
                    c5:e3:ed:2f:1b:41:17:94:3d:bc:3c:6f:3b:8a:e4:
                    2f:36:5e:9e:28:9e:7f:56:61:5e:4d:65:af:78:6c:
                    3e:07:68:a1:ec:74:85:a5:e3:dc:c6:a3:15:fd:cd:
                    c6:c0:ac:83:62:42:48:6e:62:af:e0:dd:b9:bc:32:
                    46:cf:9d:c1:2e:87:20:cb:20:fc:dc:e7:dd:3b:4c:
                    bf:42:30:4e:21:68:42:49:3c:c5:ec:79:7e:b3:72:
                    85:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D7:D8:C6:79:B0:81:FF:30:36:5E:D5:10:98:4C:8D:04:81:80:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b5523e5c-d8fe-3721-ad7c-9d5784acc27e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5c20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:3a:26:b1:3d:dc:f8:f0:7d:92:9b:7f:45:2d:fa:dc:f8:cc:
         d1:26:83:eb:e1:06:75:7d:6a:23:04:a5:eb:60:09:50:0c:56:
         cb:0e:62:5c:9c:0b:11:89:2b:0a:ed:a3:b7:e5:53:d3:8b:91:
         2c:19:a8:8b:bb:51:1e:f4:67:3d:c6:c3:bc:47:ca:92:c7:65:
         d5:6e:b4:c3:d2:30:a3:b1:ad:bb:5e:36:86:83:65:8c:0d:b3:
         17:a2:c2:96:c7:3f:59:ac:ca:15:19:d4:43:e6:14:76:b4:b1:
         fa:01:0e:5e:b8:15:22:76:81:4a:32:9a:ac:69:c3:19:e4:dc:
         c8:d6:29:59:b7:19:3c:0c:20:ce:ab:b5:e7:e7:4f:22:e4:82:
         24:f3:3e:e2:cd:96:92:d9:e0:54:4f:07:90:b8:8a:f2:98:7a:
         1f:7e:1e:11:fa:2d:78:8f:be:a1:29:1e:67:c2:1d:7e:ee:94:
         b8:ff:8f:13:f2:9d:03:04:29:cc:b3:69:43:d4:e1:6a:06:ab:
         83:61:a6:b6:ac:f7:37:98:ce:22:2d:ee:fc:e6:af:fb:52:f3:
         45:af:ed:3e:ec:b7:a2:e5:5f:ed:c3:50:05:e6:b1:08:c0:fe:
         7c:4f:fe:6e:dc:45:2a:b7:d5:da:94:65:88:6d:aa:c2:3e:53:
         7b:b7:bc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:35:28 2025 by rpki-client