Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cd6cbdbf-8db3-3869-9844-d279cf4b50a7.roa
File:                     cd6cbdbf-8db3-3869-9844-d279cf4b50a7.roa (raw, json)
Hash identifier:          hlEHgejsWGC5VcyYuv7EQVDh4tEY84f1NXxz/Kqoaok=
Subject key identifier:   53:2C:DE:A0:95:56:21:B4:F7:A6:D8:E8:0B:44:72:99:EB:9B:59:56
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C21BABDF1E83E685248C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cd6cbdbf-8db3-3869-9844-d279cf4b50a7.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5900::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:21:ba:bd:f1:e8:3e:68:52:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=9967f08f-c527-46fd-b18e-28ad7f601f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3e:70:1a:72:46:16:80:e4:d0:48:37:41:15:
                    96:19:b3:ff:45:d2:38:1b:2b:99:9b:d2:d8:e1:e6:
                    cf:78:69:ae:77:f6:22:0d:e8:d1:10:dd:0a:1f:f5:
                    fd:8d:c8:6b:fb:04:86:fd:31:66:33:39:5d:9c:bd:
                    a8:88:ea:6b:79:60:3d:e4:97:e1:ad:ea:a9:63:c5:
                    74:00:2a:68:cc:e0:e4:fc:c7:52:e6:78:27:19:f5:
                    1c:67:af:7a:9a:43:1e:23:7b:e8:e8:82:a6:08:4b:
                    1a:1f:e4:b8:20:44:a2:d6:21:18:c6:f6:c9:5a:b2:
                    29:fb:6b:db:43:a7:35:25:e6:07:ba:03:64:66:46:
                    4c:71:ff:21:ef:9a:9c:b7:cd:bc:e6:48:59:20:f3:
                    f8:63:15:5d:80:39:09:22:92:7c:cd:8b:02:98:cc:
                    19:04:ef:6b:0e:25:00:96:61:46:3c:bc:03:1a:04:
                    33:f3:1a:e1:18:f4:67:92:46:34:fb:f2:11:ce:db:
                    66:af:b3:70:40:e1:65:65:c2:fa:3b:b7:fb:d3:bd:
                    73:df:4a:71:ea:d5:0b:57:db:cf:04:6f:13:d1:da:
                    47:98:16:22:45:14:91:00:12:24:96:1a:3b:0c:81:
                    f0:85:fd:ff:d4:34:55:7a:4a:93:ff:cd:a8:65:67:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2C:DE:A0:95:56:21:B4:F7:A6:D8:E8:0B:44:72:99:EB:9B:59:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cd6cbdbf-8db3-3869-9844-d279cf4b50a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5900::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:a6:56:50:8b:cc:19:e7:6b:09:8e:38:5b:38:28:6f:d7:45:
         44:65:4b:2c:03:d4:a1:5b:5f:b0:4b:79:2d:64:f9:bd:88:fb:
         60:82:c5:17:3b:2c:e9:98:37:01:da:3c:28:bd:b9:e7:56:a2:
         a3:00:3e:93:05:48:86:a9:83:01:f5:2c:aa:ba:c3:a0:70:96:
         d5:87:26:cb:56:c4:ac:06:28:a7:b3:95:b7:50:a7:62:03:3d:
         96:4f:cd:a4:81:4e:e9:2f:5d:cd:f9:04:3b:47:1b:6c:68:66:
         25:6d:72:e5:c7:8f:a7:42:17:88:cb:b4:5a:b6:84:8f:f8:b5:
         75:cb:05:6d:74:90:40:db:22:ab:76:59:6a:13:59:ee:80:39:
         c0:9d:0f:c5:cf:8e:7d:6a:c8:07:56:05:2f:a3:4f:ad:ea:4e:
         b8:b7:7d:d7:50:99:25:c0:81:84:45:87:69:43:cd:28:28:39:
         cd:0d:e6:5a:d3:7d:9f:0a:88:b6:6e:d5:c4:24:2e:5f:df:94:
         f1:67:9c:8b:d6:33:7c:33:f4:8b:b4:d1:2e:10:63:fa:b8:12:
         cf:13:31:e8:b6:6b:df:06:e6:42:9e:b2:82:e9:9e:c9:85:ee:
         a9:63:08:ee:9f:7f:b9:96:0a:c2:b9:e9:4f:c7:73:15:75:6e:
         3e:6c:8d:5b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsATCG6vfHoPmhSSMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk
OTk2N2YwOGYtYzUyNy00NmZkLWIxOGUtMjhhZDdmNjAxZjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT5wGnJGFoDk0Eg3QRWWGbP/RdI4GyuZm9LY
4ebPeGmud/YiDejREN0KH/X9jchr+wSG/TFmMzldnL2oiOpreWA95JfhreqpY8V0
ACpozODk/MdS5ngnGfUcZ696mkMeI3vo6IKmCEsaH+S4IESi1iEYxvbJWrIp+2vb
Q6c1JeYHugNkZkZMcf8h75qct8285khZIPP4YxVdgDkJIpJ8zYsCmMwZBO9rDiUA
lmFGPLwDGgQz8xrhGPRnkkY0+/IRzttmr7NwQOFlZcL6O7f7071z30px6tULV9vP
BG8T0dpHmBYiRRSRABIklho7DIHwhf3/1DRVekqT/82oZWefvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFMs3qCVViG096bY6AtEcpnrm1lWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2Q2Y2JkYmYtOGRiMy0z
ODY5LTk4NDQtZDI3OWNmNGI1MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFkA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEamVlCLzBnnawmOOFs4KG/XRURlSywD1KFbX7BLeS1k+b2I+2CC
xRc7LOmYNwHaPCi9uedWoqMAPpMFSIapgwH1LKq6w6BwltWHJstWxKwGKKezlbdQ
p2IDPZZPzaSBTukvXc35BDtHG2xoZiVtcuXHj6dCF4jLtFq2hI/4tXXLBW10kEDb
Iqt2WWoTWe6AOcCdD8XPjn1qyAdWBS+jT63qTri3fddQmSXAgYRFh2lDzSgoOc0N
5lrTfZ8KiLZu1cQkLl/flPFnnIvWM3wz9Iu00S4QY/q4Es8TMei2a98G5kKesoLp
nsmF7qljCO6ff7mWCsK56U/HcxV1bj5sjVs=
-----END CERTIFICATE-----
Generated at Fri Sep 5 03:44:43 2025 by rpki-client