Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb3eaaee-9b59-3245-ae24-d2f64bf91ea9.roa
File:                     bb3eaaee-9b59-3245-ae24-d2f64bf91ea9.roa (raw, json)
Hash identifier:          7QFJfDabXCkKQlKXp1rYSUM3asqlXSuZTMmi8e4nlkg=
Subject key identifier:   5E:44:43:61:0C:CE:8B:67:2F:94:84:4A:4E:B1:C6:C4:0C:E0:35:6C
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C1117FA4E80DBCE6D4970
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb3eaaee-9b59-3245-ae24-d2f64bf91ea9.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:57a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:11:17:fa:4e:80:db:ce:6d:49:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=9696aa64-0a2f-4cad-b9bc-1008fb51020c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a4:42:71:91:82:ba:7d:b7:9d:fe:e7:72:5d:
                    c8:6e:dd:63:da:72:44:ca:27:fd:67:6b:96:b8:c2:
                    b2:59:5f:73:b6:81:4c:d6:b5:c7:37:81:63:eb:3a:
                    f8:29:92:eb:4d:09:ef:5d:59:f3:68:07:a2:b0:10:
                    ea:59:38:e3:01:08:71:78:d8:19:d1:2a:3a:ba:86:
                    5e:57:ed:b0:35:2b:15:7b:31:77:d8:d2:2b:41:aa:
                    54:24:47:98:8a:26:9c:08:d2:7c:ee:28:4f:8d:e3:
                    95:ee:5b:86:d9:2c:79:23:9f:f8:1d:9c:46:d1:ed:
                    90:c3:56:0a:60:68:bd:75:8b:a8:99:01:c0:df:01:
                    7f:a5:56:79:b3:b5:b3:89:c4:11:26:f9:0b:5d:42:
                    15:3c:81:b1:a1:ac:13:62:27:f4:67:70:bd:17:74:
                    0c:23:da:6b:e0:a1:39:09:b8:70:ff:1d:b7:d4:79:
                    88:f1:18:72:91:ab:cd:6e:21:69:03:ca:30:3c:a3:
                    2b:66:d4:72:cb:98:df:1d:12:97:f4:c9:16:5d:e3:
                    bd:3b:69:e3:7b:bc:df:31:57:7b:dd:63:c7:6a:e4:
                    a0:cc:4c:fc:63:b8:76:b5:d6:3e:4d:64:e7:1c:7b:
                    a6:83:5c:a0:c6:60:aa:16:30:7b:2a:78:f8:92:84:
                    45:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:44:43:61:0C:CE:8B:67:2F:94:84:4A:4E:B1:C6:C4:0C:E0:35:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb3eaaee-9b59-3245-ae24-d2f64bf91ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:57a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a0:63:ca:43:31:d7:42:66:36:14:15:5b:3f:9e:88:cd:e9:
         ab:57:f5:c3:fc:dd:83:80:84:66:a7:4c:e5:6e:1c:af:f8:b2:
         11:69:4d:5d:88:62:38:b1:dd:f7:db:4c:e1:91:1b:5b:ff:10:
         7a:d9:6b:e4:8c:d4:02:b3:8a:a0:d3:14:7f:46:55:00:1e:fb:
         15:82:2a:7a:1b:8b:5a:ef:a3:ed:6a:0c:b1:9b:8a:f7:4c:6a:
         eb:af:8e:9a:58:4c:a0:cb:ae:6b:84:d3:de:75:30:a8:39:78:
         7c:b9:55:a7:30:a7:30:28:f4:47:ea:a3:2b:76:68:3d:42:d3:
         5b:34:63:3f:ca:e3:b0:5c:9b:09:96:3d:6a:2b:be:59:19:f5:
         58:97:51:78:0e:b1:0c:04:56:1c:61:b4:b1:a8:73:8f:e2:d1:
         d0:4b:54:1d:98:f6:e3:21:33:b7:83:c2:a9:d3:e3:79:67:08:
         ca:ff:84:39:4c:0a:8f:70:d0:bd:4e:dd:9a:87:19:61:8a:b6:
         9a:ad:5d:af:69:9c:7c:57:91:49:0f:07:72:d2:38:32:5b:66:
         0f:60:be:25:4e:c5:01:ad:2f:fe:1f:73:ab:41:57:87:9d:2c:
         cd:1a:4a:92:97:6c:b6:d1:68:f0:73:7e:9b:b4:7c:f6:58:ff:
         5c:bc:49:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsATBEX+k6A285tSXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk
OTY5NmFhNjQtMGEyZi00Y2FkLWI5YmMtMTAwOGZiNTEwMjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6RCcZGCun23nf7ncl3Ibt1j2nJEyif9Z2uW
uMKyWV9ztoFM1rXHN4Fj6zr4KZLrTQnvXVnzaAeisBDqWTjjAQhxeNgZ0So6uoZe
V+2wNSsVezF32NIrQapUJEeYiiacCNJ87ihPjeOV7luG2Sx5I5/4HZxG0e2Qw1YK
YGi9dYuomQHA3wF/pVZ5s7WzicQRJvkLXUIVPIGxoawTYif0Z3C9F3QMI9pr4KE5
Cbhw/x231HmI8RhykavNbiFpA8owPKMrZtRyy5jfHRKX9MkWXeO9O2nje7zfMVd7
3WPHauSgzEz8Y7h2tdY+TWTnHHumg1ygxmCqFjB7Knj4koRFJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF5EQ2EMzotnL5SESk6xxsQM4DVsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmIzZWFhZWUtOWI1OS0z
MjQ1LWFlMjQtZDJmNjRiZjkxZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFeg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIWgY8pDMddCZjYUFVs/nojN6atX9cP83YOAhGanTOVuHK/4shFp
TV2IYjix3ffbTOGRG1v/EHrZa+SM1AKziqDTFH9GVQAe+xWCKnobi1rvo+1qDLGb
ivdMauuvjppYTKDLrmuE0951MKg5eHy5VacwpzAo9Efqoyt2aD1C01s0Yz/K47Bc
mwmWPWorvlkZ9ViXUXgOsQwEVhxhtLGoc4/i0dBLVB2Y9uMhM7eDwqnT43lnCMr/
hDlMCo9w0L1O3ZqHGWGKtpqtXa9pnHxXkUkPB3LSODJbZg9gviVOxQGtL/4fc6tB
V4edLM0aSpKXbLbRaPBzfpu0fPZY/1y8SbI=
-----END CERTIFICATE-----
Generated at Fri Sep 5 03:39:35 2025 by rpki-client