Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d9793dfa-7b46-358f-9882-a120c274c828.roa
File:                     d9793dfa-7b46-358f-9882-a120c274c828.roa (raw, json)
Hash identifier:          Ddb7NYXDyAfAK5SWhAOkx2nNBpcSkFe07ps+mRM0asU=
Subject key identifier:   D5:70:D6:89:4F:53:E8:93:17:AD:49:22:A2:B8:CB:47:17:17:CB:45
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004BF9B844B9929ACEC6AD80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d9793dfa-7b46-358f-9882-a120c274c828.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5e50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:f9:b8:44:b9:92:9a:ce:c6:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=a243ca40-0e79-45cf-8cea-75211cd150be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:91:1c:26:43:f8:51:9a:28:1b:12:26:f8:33:
                    50:7a:2f:60:fd:44:e8:b5:99:09:6b:4a:74:d0:82:
                    5f:46:db:af:8c:c1:6a:f0:d9:3e:7c:9d:67:61:b0:
                    1a:af:33:d6:e2:30:ca:fc:42:0f:08:79:42:ac:a6:
                    dc:ed:54:49:7a:da:59:0c:78:fe:41:8d:cd:d0:bf:
                    75:e6:a7:43:9b:09:2d:c7:60:83:7c:66:b6:ee:5b:
                    62:91:87:f5:bd:5d:1d:bc:cd:29:9d:a7:b9:eb:3b:
                    f1:4b:ca:e0:1d:f1:09:a0:17:a2:f3:1d:97:cb:f0:
                    52:05:3d:7e:99:d4:ec:05:18:6c:f6:eb:c5:2c:de:
                    9d:c3:5b:99:96:76:f3:cb:c3:ce:1c:14:9d:90:25:
                    cf:2a:4f:42:e2:54:d7:bd:6f:14:0d:61:9a:a4:de:
                    c6:01:c1:f4:ae:61:94:39:b7:b4:29:ee:67:46:c5:
                    bf:47:84:a2:67:d1:f1:86:8f:75:db:9f:5b:1b:82:
                    9b:56:0e:eb:c5:d9:4c:16:b4:68:d1:1b:b6:c7:ea:
                    b8:c6:c1:2e:f7:13:0c:50:52:2f:8b:3b:2f:88:9e:
                    f9:99:4e:df:3d:37:cd:da:4c:7f:7a:ff:e3:0f:0f:
                    40:dd:45:5a:7a:0e:97:96:31:40:5a:88:9b:31:7e:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:70:D6:89:4F:53:E8:93:17:AD:49:22:A2:B8:CB:47:17:17:CB:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d9793dfa-7b46-358f-9882-a120c274c828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5e50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:91:74:4e:6b:d9:3c:f7:30:ce:d6:06:97:8e:d6:0c:6e:42:
         79:d1:6f:bc:85:73:23:54:cc:94:9a:15:ec:92:7b:30:66:b3:
         48:87:3f:7c:17:fd:09:31:95:53:5f:d9:4b:51:d2:45:5f:97:
         0b:09:4a:dd:bb:f0:81:8e:68:15:88:3d:cb:fb:ba:1b:b1:ba:
         6f:8c:d4:00:82:ad:1f:44:15:83:62:b4:08:61:3a:b1:cb:57:
         83:39:12:b7:bb:45:48:ab:8c:7b:f1:31:eb:17:2b:f1:47:3c:
         ca:94:8e:4a:77:d6:f4:a9:c4:68:5a:d0:49:d4:64:b0:67:24:
         68:63:42:52:1f:72:4f:c1:c6:67:70:15:fb:cb:ec:c8:9a:b5:
         dc:a9:79:b7:20:c1:7e:7a:e4:04:b8:9c:ae:4b:65:f9:ba:cb:
         59:86:6a:1f:b1:9d:f2:f5:9c:2e:16:db:12:ae:58:b5:72:e6:
         ff:c5:94:a0:ba:06:67:08:b0:71:70:6e:a4:35:13:3e:e9:00:
         44:d7:28:ca:0b:f1:b4:05:55:09:b4:d2:ef:d4:5f:57:13:fd:
         28:be:05:43:8e:f6:d9:94:8d:2f:af:25:7c:b6:ac:8e:72:7f:
         80:c4:59:d8:c9:cb:36:ee:49:e3:0d:94:54:35:1c:dc:7b:c7:
         cd:eb:2d:7b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsAS/m4RLmSms7GrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk
YTI0M2NhNDAtMGU3OS00NWNmLThjZWEtNzUyMTFjZDE1MGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJEcJkP4UZooGxIm+DNQei9g/UTotZkJa0p0
0IJfRtuvjMFq8Nk+fJ1nYbAarzPW4jDK/EIPCHlCrKbc7VRJetpZDHj+QY3N0L91
5qdDmwktx2CDfGa27ltikYf1vV0dvM0pnae56zvxS8rgHfEJoBei8x2Xy/BSBT1+
mdTsBRhs9uvFLN6dw1uZlnbzy8POHBSdkCXPKk9C4lTXvW8UDWGapN7GAcH0rmGU
Obe0Ke5nRsW/R4SiZ9Hxho91259bG4KbVg7rxdlMFrRo0Ru2x+q4xsEu9xMMUFIv
izsviJ75mU7fPTfN2kx/ev/jDw9A3UVaeg6XljFAWoibMX7lqQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNVw1olPU+iTF61JIqK4y0cXF8tFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDk3OTNkZmEtN2I0Ni0z
NThmLTk4ODItYTEyMGMyNzRjODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQF5Q
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAiRdE5r2Tz3MM7WBpeO1gxuQnnRb7yFcyNUzJSaFeySezBms0iH
P3wX/QkxlVNf2UtR0kVflwsJSt278IGOaBWIPcv7uhuxum+M1ACCrR9EFYNitAhh
OrHLV4M5Ere7RUirjHvxMesXK/FHPMqUjkp31vSpxGha0EnUZLBnJGhjQlIfck/B
xmdwFfvL7MiatdypebcgwX565AS4nK5LZfm6y1mGah+xnfL1nC4W2xKuWLVy5v/F
lKC6BmcIsHFwbqQ1Ez7pAETXKMoL8bQFVQm00u/UX1cT/Si+BUOO9tmUjS+vJXy2
rI5yf4DEWdjJyzbuSeMNlFQ1HNx7x83rLXs=
-----END CERTIFICATE-----
Generated at Fri Sep 5 03:41:38 2025 by rpki-client