Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ce538dc7-a925-3f19-9892-858df419ab79.roa
File:                     ce538dc7-a925-3f19-9892-858df419ab79.roa (raw, json)
Hash identifier:          Y4HOTdR9Du32fnM6PVjJWYqBFFmrutP36Hjc6acM7Nw=
Subject key identifier:   C7:C8:EE:B3:FA:9F:A9:7F:DE:DB:C5:64:8F:5F:DB:2B:B8:5B:0F:A7
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C01C4D79110C1F7FA2700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ce538dc7-a925-3f19-9892-858df419ab79.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5520::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:01:c4:d7:91:10:c1:f7:fa:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=add13b6b-f72a-4dbc-abce-c6ce7c1411bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:09:15:e8:c1:b6:25:db:92:d0:52:33:4a:
                    14:85:81:a1:16:8f:1d:4f:c2:9c:17:b8:bd:a1:de:
                    07:10:18:22:38:4f:85:18:49:69:e7:0c:61:38:93:
                    e4:22:5c:cf:ec:d3:32:33:15:66:a3:43:86:a4:3f:
                    b0:af:9b:9b:36:5a:4c:95:59:0f:4b:f9:e7:8b:72:
                    c8:5f:30:c5:d2:8c:34:26:31:8b:fa:09:d6:31:31:
                    f5:d3:0a:93:7d:6a:c5:c3:5d:92:05:c5:3b:e6:e9:
                    41:12:44:27:62:c9:31:5a:05:8d:db:51:be:61:7d:
                    a6:2c:84:5f:c3:2a:69:3a:06:81:5d:d7:33:73:6b:
                    73:4b:73:1a:9e:c9:db:48:d9:c1:18:05:32:be:5b:
                    2f:55:46:c4:c4:ad:51:e6:47:1e:37:0c:6c:ba:ed:
                    05:de:21:12:f5:ac:f8:d2:59:96:99:86:54:97:1e:
                    5c:6e:2b:97:f2:65:74:b4:dd:6e:23:0c:92:b3:e4:
                    23:84:86:40:6d:bc:04:60:32:f2:2b:f2:55:a4:72:
                    a3:84:05:79:fa:e0:fb:58:66:b9:67:b2:b5:2a:2f:
                    6e:5b:10:dc:1f:b7:d8:47:27:67:27:d0:4f:42:ac:
                    34:34:04:de:41:74:99:98:2b:6f:de:3c:42:6f:00:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C8:EE:B3:FA:9F:A9:7F:DE:DB:C5:64:8F:5F:DB:2B:B8:5B:0F:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ce538dc7-a925-3f19-9892-858df419ab79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5520::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:06:c7:3e:f2:2a:d9:92:e2:b3:14:5a:ae:e5:76:61:d8:9d:
         f1:58:f2:c5:b5:54:fa:bd:f7:03:8c:dc:c0:fa:3b:c7:dc:0e:
         c9:3d:d6:c6:d5:22:c8:84:3a:fb:e9:9c:e9:28:32:ef:22:00:
         35:fe:7e:a0:47:14:2e:8c:78:39:38:8e:53:db:db:ea:28:98:
         27:f0:90:7b:53:fd:73:65:de:66:c6:c8:43:52:45:f0:de:cc:
         c6:7b:4e:fa:a0:7d:4a:5e:51:c7:b3:02:08:a2:a6:bd:28:a8:
         e8:76:44:e6:df:e7:db:78:0d:f0:a5:2b:90:67:d6:7b:be:56:
         24:06:e4:7d:35:0d:39:f0:4f:ac:ae:a6:a3:84:1c:72:d7:bd:
         43:72:24:03:da:f8:64:58:49:fa:78:25:91:a7:17:cd:95:f8:
         77:d3:44:ae:f6:6a:6e:8a:ba:74:e9:f1:c0:d7:79:01:2b:a5:
         8c:83:89:c1:a0:9b:ff:56:d3:16:d3:68:68:1c:10:ab:88:c8:
         1e:bd:83:a6:55:d4:c5:d3:7a:57:0b:5b:55:d8:16:9d:54:74:
         b0:01:96:81:e5:ff:5d:a2:7b:47:e9:95:99:fd:80:52:70:7a:
         72:60:ff:7e:40:a1:93:23:65:ac:45:a3:e4:cf:e5:cc:b3:41:
         2b:c2:4e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:40:38 2025 by rpki-client