Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dc49366c-f542-309f-99df-012d92f62b5d.roa
File:                     dc49366c-f542-309f-99df-012d92f62b5d.roa (raw, json)
Hash identifier:          Rxddj8E3b2ePuceGeFH+1vTdThDA2RSUlVJhDdEQz9o=
Subject key identifier:   71:41:8F:AC:14:A8:95:E2:74:BA:24:9A:46:A5:95:B9:C5:02:3B:6C
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C03A85E7D890579F2F5C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dc49366c-f542-309f-99df-012d92f62b5d.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5800::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:03:a8:5e:7d:89:05:79:f2:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=79457266-90a6-49f3-a8ed-7193a95c70b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:fb:46:d4:54:ca:a4:b8:e3:27:70:5b:f9:
                    a8:61:d4:bc:51:a3:c8:b1:38:5d:5f:30:df:41:f1:
                    68:7f:2a:df:36:88:c1:fe:14:49:4e:71:b2:dd:a5:
                    57:8b:f4:af:74:e8:56:d4:9b:0c:0d:75:96:a9:91:
                    b5:89:e6:39:ea:2f:98:36:8e:93:02:d3:30:5a:88:
                    d8:e2:8e:f6:32:f8:06:50:73:6a:13:b2:d9:88:dd:
                    b7:9c:16:6c:58:94:5b:5e:22:77:42:c1:ca:01:e2:
                    61:9b:36:49:55:98:66:89:11:9d:e4:f9:5e:fd:55:
                    3e:29:6c:82:9b:b4:b9:c4:bb:ab:21:b0:38:50:b1:
                    ec:8e:7f:07:74:ee:c7:27:52:63:30:be:50:cc:32:
                    ce:c4:d7:44:f2:41:33:09:69:97:ee:61:e0:70:bf:
                    22:be:ab:71:b8:86:ad:d6:0b:16:87:27:51:f1:c6:
                    7f:fb:0d:14:8b:0e:a0:ce:9a:8d:de:07:21:c0:b5:
                    57:50:88:6b:53:d6:ab:08:78:bd:99:8e:e8:39:5d:
                    de:55:0a:3e:40:ff:fb:c6:f9:81:cc:fa:67:44:ea:
                    44:9c:06:55:65:3c:f9:40:0c:7a:74:b4:ac:61:83:
                    d4:90:8b:3f:22:d6:d3:56:d4:fa:c9:3a:95:18:fe:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:41:8F:AC:14:A8:95:E2:74:BA:24:9A:46:A5:95:B9:C5:02:3B:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dc49366c-f542-309f-99df-012d92f62b5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5800::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:76:38:bf:76:ff:bd:88:f4:b5:0e:dd:80:6b:f6:f1:c9:27:
         0b:aa:b6:b7:95:d0:7b:ff:c1:5f:97:01:a8:3b:c2:bc:62:fa:
         b7:bf:68:bf:41:38:a9:2c:2b:05:26:fc:d1:48:bb:a1:44:33:
         1c:ca:89:fd:d1:7f:57:5a:2e:3f:b9:e2:2c:a2:ce:e5:26:d3:
         fd:f1:a1:c6:7b:63:17:61:82:1a:5f:8c:c0:db:24:a5:44:63:
         4e:0e:74:00:ab:bb:e5:bc:fb:b2:4b:ce:7f:9f:83:11:40:3b:
         a0:87:11:89:0e:0a:91:f1:cc:6e:3b:2d:7f:10:f9:2a:d7:ae:
         e7:b7:c8:76:8a:6e:64:b1:06:84:12:01:81:01:59:ce:40:e5:
         66:01:8e:e6:8f:3f:e0:fd:82:95:1e:8e:5d:d1:91:51:bd:ca:
         8c:21:57:03:95:5b:63:05:c7:08:23:46:a6:d7:a4:02:82:57:
         b0:19:f0:4f:44:06:67:4c:f9:a9:5e:5f:04:fe:26:2d:9b:c6:
         d4:61:0e:be:36:84:07:53:bd:79:9d:1b:97:77:2d:cc:d8:54:
         48:73:17:14:4f:ca:6d:9a:2a:55:35:bc:35:09:66:bf:fe:dd:
         e8:ac:ec:ed:34:e7:4d:6f:e1:1a:59:68:2a:95:a7:2b:b4:05:
         b5:87:4c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:38:47 2025 by rpki-client