Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d84204e2-a221-33fb-8599-41f51e481a47.roa
File:                     d84204e2-a221-33fb-8599-41f51e481a47.roa (raw, json)
Hash identifier:          JuebE7B3IqTJ4Gmnai99Ss17ENc2ldVSiRklamcXvAw=
Subject key identifier:   CF:11:66:D4:5A:0A:62:C5:6C:50:FC:24:AF:05:C9:FA:0E:CB:5E:C9
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C123A0B6F086F80B22F80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d84204e2-a221-33fb-8599-41f51e481a47.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:46e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:12:3a:0b:6f:08:6f:80:b2:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=da1e5367-4000-4fce-86f5-9eee1f6ac47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:57:75:2c:e7:46:e4:9c:3d:d4:6b:4c:83:
                    8a:27:84:f7:0a:27:f5:aa:b1:37:bb:11:b7:17:fa:
                    fa:dd:42:b1:e1:94:2f:8e:bb:26:0e:cb:11:89:e1:
                    d3:42:1f:d5:26:32:87:9b:7c:e8:69:27:e7:fd:7a:
                    f6:2f:cd:5c:a4:f3:46:a5:1a:f8:76:cd:79:c6:4e:
                    59:a7:48:29:53:42:f7:dd:23:d6:e2:b1:7a:49:90:
                    c3:11:40:d1:f3:7a:22:05:3c:b3:e3:a8:7e:87:c6:
                    13:fd:cd:58:06:45:0c:1c:03:23:d2:ba:1a:a7:5d:
                    a3:13:6e:b8:9c:11:b4:49:2d:c3:ea:95:26:c3:ab:
                    22:72:42:77:7d:b8:89:6b:38:94:5b:e1:c4:7b:fe:
                    07:87:08:a7:27:ee:64:b5:22:22:a9:10:91:7a:a4:
                    fc:d4:38:72:c9:2d:66:32:f4:88:22:47:68:f1:9f:
                    12:78:31:a3:4e:04:33:24:43:77:03:9a:09:0c:a9:
                    9d:54:02:c6:37:e1:a5:5e:ce:2c:93:a6:5c:6a:05:
                    16:89:d6:9d:a0:a4:7c:e6:62:c1:06:ac:50:b2:9a:
                    0b:e9:0b:85:17:39:6f:ec:72:ee:b2:47:b8:ff:38:
                    68:00:3b:75:c4:49:b8:45:0b:a5:4e:90:ed:9a:05:
                    e4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:11:66:D4:5A:0A:62:C5:6C:50:FC:24:AF:05:C9:FA:0E:CB:5E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d84204e2-a221-33fb-8599-41f51e481a47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:46e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:75:ee:39:9f:9a:82:ca:3b:4f:4f:16:23:5e:98:d5:78:8b:
         a3:60:60:b4:8b:67:26:e5:f0:2b:ad:cd:5e:24:58:ca:23:e7:
         8f:24:f2:5a:a3:8e:75:b8:be:b3:c2:4e:ec:ab:e9:3f:1c:46:
         5a:eb:8e:fe:1f:ff:6c:7a:02:dd:69:7f:40:e4:dd:f2:d3:39:
         b7:1b:d8:05:99:84:aa:e4:79:bb:dc:1c:e2:62:fd:98:d3:63:
         cc:77:b9:14:92:c5:3a:18:2d:ac:82:5c:07:0f:38:61:1b:0d:
         4a:be:dc:4a:d6:56:27:84:c7:36:f1:f7:47:b5:5c:c6:23:66:
         bd:2c:4c:85:2c:5c:28:18:e7:f8:ec:b7:85:7f:28:1f:60:05:
         d7:41:49:10:34:8c:3d:93:f4:e8:27:b4:3e:14:5d:a2:9a:61:
         b2:75:9e:8f:3c:99:3c:77:9e:7d:0b:d5:79:75:3e:be:fd:13:
         50:1f:c3:90:58:51:97:c2:ee:46:4c:d8:27:e7:0b:a0:91:6f:
         cf:26:aa:34:23:7f:8d:c3:15:b3:81:0b:21:5a:d9:d6:b8:b8:
         27:b9:70:08:a0:8d:0c:e6:40:d9:b5:30:e3:65:c9:f8:92:90:
         2a:a9:75:45:ca:6e:51:80:b2:e8:ba:76:42:2c:dd:3b:db:a5:
         6c:28:18:d9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsATBI6C28Ib4CyL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk
ZGExZTUzNjctNDAwMC00ZmNlLTg2ZjUtOWVlZTFmNmFjNDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqJXdSznRuScPdRrTIOKJ4T3Cif1qrE3uxG3
F/r63UKx4ZQvjrsmDssRieHTQh/VJjKHm3zoaSfn/Xr2L81cpPNGpRr4ds15xk5Z
p0gpU0L33SPW4rF6SZDDEUDR83oiBTyz46h+h8YT/c1YBkUMHAMj0roap12jE264
nBG0SS3D6pUmw6sickJ3fbiJaziUW+HEe/4HhwinJ+5ktSIiqRCReqT81DhyyS1m
MvSIIkdo8Z8SeDGjTgQzJEN3A5oJDKmdVALGN+GlXs4sk6ZcagUWidadoKR85mLB
BqxQspoL6QuFFzlv7HLuske4/zhoADt1xEm4RQulTpDtmgXkBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM8RZtRaCmLFbFD8JK8FyfoOy17JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDg0MjA0ZTItYTIyMS0z
M2ZiLTg1OTktNDFmNTFlNDgxYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEbg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEl17jmfmoLKO09PFiNemNV4i6NgYLSLZybl8CutzV4kWMoj548k
8lqjjnW4vrPCTuyr6T8cRlrrjv4f/2x6At1pf0Dk3fLTObcb2AWZhKrkebvcHOJi
/ZjTY8x3uRSSxToYLayCXAcPOGEbDUq+3ErWVieExzbx90e1XMYjZr0sTIUsXCgY
5/jst4V/KB9gBddBSRA0jD2T9OgntD4UXaKaYbJ1no88mTx3nn0L1Xl1Pr79E1Af
w5BYUZfC7kZM2CfnC6CRb88mqjQjf43DFbOBCyFa2da4uCe5cAigjQzmQNm1MONl
yfiSkCqpdUXKblGAsui6dkIs3TvbpWwoGNk=
-----END CERTIFICATE-----
Generated at Fri Sep 5 03:38:10 2025 by rpki-client