Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/eeba115b-1e93-3b3c-8be4-f0590c2f8070.roa
File:                     eeba115b-1e93-3b3c-8be4-f0590c2f8070.roa (raw, json)
Hash identifier:          KhAjphhwmB/t1ANHvVTqrJgXCE1XrmNSt5r1dyuFKSE=
Subject key identifier:   12:22:0E:B5:C2:E9:20:30:E9:05:F7:C9:25:E4:D8:DF:D4:6C:DB:A3
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004C19436D53E09D7F6FC000
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/eeba115b-1e93-3b3c-8be4-f0590c2f8070.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:4170::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:19:43:6d:53:e0:9d:7f:6f:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=9a2c4783-af46-4cc5-8e72-cb1dcad85cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:19:3d:d9:f6:b1:96:ff:ee:c5:04:9b:b9:16:
                    6e:b8:c6:94:c9:4b:f3:f9:20:49:33:3a:b4:c6:8e:
                    77:f2:96:18:c0:14:58:ac:68:5f:df:40:6d:51:49:
                    e8:34:33:ef:af:07:14:6a:ab:6a:7c:e3:c8:95:7a:
                    bd:32:f4:a6:4d:c7:1d:1b:e5:92:ea:1a:60:13:f0:
                    85:10:33:3b:c4:37:16:9b:ce:02:5e:14:a5:e7:df:
                    10:9c:ed:9f:78:6e:93:65:05:31:1e:35:78:b6:65:
                    06:a3:f0:31:9d:03:87:f3:64:90:01:df:5d:79:2e:
                    73:33:40:c3:fa:2f:17:ed:24:e5:1b:c7:5c:37:7e:
                    5d:be:ce:6d:68:fd:b3:55:1a:ff:5b:bd:51:2c:ce:
                    bb:93:3b:e7:e4:2a:41:13:b0:69:7a:ca:31:62:5a:
                    ed:45:f3:8b:40:b2:0a:07:d1:0a:c4:f2:14:96:00:
                    8c:d0:d9:a5:ac:bc:79:3a:1b:77:22:c6:6c:04:88:
                    31:01:d7:3c:c8:4b:c9:d6:02:9b:2f:92:0c:2d:66:
                    16:a9:5f:7d:f9:3f:34:39:7c:b6:d3:0e:29:ed:1c:
                    67:47:f3:30:5e:bb:25:d8:05:3c:8f:a7:2e:bc:2e:
                    25:a5:f6:11:e8:b6:dd:9c:de:bb:07:4a:a7:ea:23:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:22:0E:B5:C2:E9:20:30:E9:05:F7:C9:25:E4:D8:DF:D4:6C:DB:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/eeba115b-1e93-3b3c-8be4-f0590c2f8070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4170::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ae:95:a4:26:a2:08:4c:53:7d:67:54:a0:a3:b1:b8:3a:14:
         39:d5:1e:f8:d2:f5:4d:ee:87:72:9c:cd:e3:bd:b8:11:a9:9c:
         bb:09:70:70:9e:40:5b:3b:f6:1f:d6:e9:8a:25:c4:41:87:02:
         69:6d:b9:f7:94:9f:3f:d5:9e:ad:f8:ef:c9:ce:aa:3f:8f:2d:
         82:69:ac:01:5b:b4:3e:91:9f:2a:8f:9a:1d:2f:bf:f0:4f:d0:
         45:77:bc:5c:1d:d7:f3:33:70:6c:65:94:83:b2:d9:34:4e:aa:
         a3:4f:73:c9:ab:c6:3c:08:36:ff:b9:38:db:81:05:40:c8:86:
         d2:81:e5:fa:e0:b4:9c:44:5a:ec:dd:c8:b6:1a:d2:e4:ff:ef:
         82:f4:8f:e2:d0:64:dd:3a:82:26:89:2c:20:8f:1a:5a:97:f4:
         f0:cb:f5:e2:60:fc:11:ad:c4:16:7e:db:fd:dd:a8:2b:be:8a:
         5e:04:d1:40:c8:19:9a:40:9b:8e:c3:2a:8e:6b:f5:f3:84:9b:
         52:4d:ef:af:3c:60:82:ea:c9:36:8c:b2:58:60:96:13:9a:9c:
         08:94:03:df:aa:fb:1c:ef:46:dd:74:47:62:52:82:57:8b:80:
         44:52:d1:11:0a:92:bd:15:12:26:0b:fd:3e:d4:bb:84:1a:ae:
         50:05:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:38:08 2025 by rpki-client