Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e97c44c9-8bb7-320e-9425-d457112c1f6e.roa
File:                     e97c44c9-8bb7-320e-9425-d457112c1f6e.roa (raw, json)
Hash identifier:          dA8vgsfxw2vbABc/rKXm+mG8Efcq17zZR7CUbcEX1/A=
Subject key identifier:   91:8D:79:27:28:C3:00:74:7B:95:8C:0A:88:DF:F1:55:85:D1:2B:C3
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C02E9027B7FCF68B0B600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e97c44c9-8bb7-320e-9425-d457112c1f6e.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5b80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:02:e9:02:7b:7f:cf:68:b0:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=66ee2097-908f-462a-b8ef-66884c7b4848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a8:e5:28:49:d8:2e:b4:b0:99:01:50:e1:e2:
                    a1:51:ae:23:f7:59:2e:a5:11:69:20:d5:43:d7:8b:
                    98:6c:33:b6:eb:f1:dc:82:e4:60:e6:78:13:2f:6b:
                    8a:fc:1e:36:fa:b2:fa:f6:35:49:8d:3a:b9:c4:8c:
                    50:ca:79:9c:cc:28:6f:3d:1d:f8:f0:b7:06:80:47:
                    7e:28:a9:8b:56:aa:29:32:ad:16:b3:09:09:e5:7a:
                    9b:fe:85:34:53:18:d3:38:55:7e:eb:bd:e3:71:b3:
                    d7:74:7c:fd:3d:0e:e0:3a:35:f4:01:2e:b0:08:1b:
                    92:de:22:08:70:a3:c6:14:4a:bb:06:8a:0b:bc:dd:
                    c2:61:7b:6c:b5:3c:4a:e7:cf:c6:27:24:bf:92:c8:
                    54:db:c0:0b:67:78:7e:86:9f:3a:f0:4c:f1:c1:d3:
                    ba:ec:ef:72:fd:1a:ee:88:ed:88:41:03:78:ab:10:
                    fa:52:d1:3b:e2:7a:a7:07:80:c2:f5:63:5f:ee:3c:
                    18:37:44:b7:9c:6c:38:2e:a4:7d:c0:23:bd:ec:5e:
                    c5:8c:4b:2e:2d:04:04:5c:49:8c:a9:a9:82:cb:7f:
                    5e:71:bc:ba:eb:21:ee:bd:f5:e3:b3:07:b4:0c:fe:
                    78:ce:27:76:94:92:23:6f:c1:8c:c0:4d:df:9d:ef:
                    df:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8D:79:27:28:C3:00:74:7B:95:8C:0A:88:DF:F1:55:85:D1:2B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e97c44c9-8bb7-320e-9425-d457112c1f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5b80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f0:4a:a4:51:ca:ea:ad:ff:9c:91:0e:18:01:be:0c:d1:6a:
         bb:4f:38:b6:f0:9c:28:d4:0b:d6:fb:f4:7d:14:ae:75:25:f6:
         0f:2f:6a:e0:28:5e:93:2a:98:02:bb:b7:a6:c3:f3:68:aa:3d:
         8b:b6:3a:4f:7f:53:57:c0:42:04:85:bf:78:b4:a0:ac:ca:3d:
         8a:4a:5b:11:fd:bc:e0:f6:b8:e7:8d:4d:f3:81:e2:03:6e:89:
         12:61:d4:28:79:a9:98:4f:eb:70:9c:65:3d:85:85:e8:55:33:
         79:56:f5:42:c0:fd:3b:0e:5b:aa:7c:ff:15:82:5a:b6:e8:d1:
         57:a9:50:cb:7c:b2:4a:52:5f:2d:a2:1a:ba:bb:d6:a3:7a:c2:
         60:da:de:7c:24:b7:67:42:f2:e6:05:5e:e2:6a:b5:16:31:19:
         db:b4:01:6a:0c:4c:28:33:ac:8d:53:8e:5d:fb:36:7a:54:f3:
         a1:ee:39:f4:d7:b7:4b:6c:d1:29:6a:c6:37:65:f0:de:33:33:
         f2:9c:e5:15:e6:09:ec:c8:df:07:c3:ff:7b:51:1d:6a:72:67:
         57:44:61:32:c8:e5:5a:ee:64:36:ca:37:64:d2:e2:c0:27:8a:
         bd:2c:17:36:66:68:1b:82:e9:f3:73:3b:cd:bb:eb:07:06:5a:
         87:ad:a4:e5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsATALpAnt/z2iwtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk
NjZlZTIwOTctOTA4Zi00NjJhLWI4ZWYtNjY4ODRjN2I0ODQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjajlKEnYLrSwmQFQ4eKhUa4j91kupRFpINVD
14uYbDO26/HcguRg5ngTL2uK/B42+rL69jVJjTq5xIxQynmczChvPR348LcGgEd+
KKmLVqopMq0WswkJ5Xqb/oU0UxjTOFV+673jcbPXdHz9PQ7gOjX0AS6wCBuS3iII
cKPGFEq7BooLvN3CYXtstTxK58/GJyS/kshU28ALZ3h+hp868EzxwdO67O9y/Rru
iO2IQQN4qxD6UtE74nqnB4DC9WNf7jwYN0S3nGw4LqR9wCO97F7FjEsuLQQEXEmM
qamCy39ecby66yHuvfXjswe0DP54zid2lJIjb8GMwE3fne/frQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJGNeScowwB0e5WMCojf8VWF0SvDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZTk3YzQ0YzktOGJiNy0z
MjBlLTk0MjUtZDQ1NzExMmMxZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFuA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADXwSqRRyuqt/5yRDhgBvgzRartPOLbwnCjUC9b79H0UrnUl9g8v
auAoXpMqmAK7t6bD82iqPYu2Ok9/U1fAQgSFv3i0oKzKPYpKWxH9vOD2uOeNTfOB
4gNuiRJh1Ch5qZhP63CcZT2FhehVM3lW9ULA/TsOW6p8/xWCWrbo0VepUMt8skpS
Xy2iGrq71qN6wmDa3nwkt2dC8uYFXuJqtRYxGdu0AWoMTCgzrI1Tjl37NnpU86Hu
OfTXt0ts0Slqxjdl8N4zM/Kc5RXmCezI3wfD/3tRHWpyZ1dEYTLI5VruZDbKN2TS
4sAnir0sFzZmaBuC6fNzO8276wcGWoetpOU=
-----END CERTIFICATE-----
Generated at Fri Sep 5 03:37:35 2025 by rpki-client