Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f545e7aa-8036-3360-bc8f-ae465cc07333.roa
File:                     f545e7aa-8036-3360-bc8f-ae465cc07333.roa (raw, json)
Hash identifier:          HPtwPoKi9RDE/BRadPnpJ2l5QnZDR2m15YpEO/7icuQ=
Subject key identifier:   3E:A5:A0:75:67:68:B2:08:58:8D:E6:A5:3D:C0:F6:8A:6F:5D:B4:5B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584B004BFA090A59DD468609D830
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f545e7aa-8036-3360-bc8f-ae465cc07333.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        2607:8940:5850::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:fa:09:0a:59:dd:46:86:09:d8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=7e1db155-a236-4031-80ad-d0f2d586cc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:aa:10:b4:e9:30:6d:20:26:25:48:6a:5e:ed:
                    db:65:84:cf:b6:0f:84:64:ec:8c:ba:e5:dc:88:72:
                    87:fc:39:77:fb:50:03:12:0d:e2:d2:6e:9d:d4:b0:
                    ca:e7:95:43:86:54:ee:d0:bb:bc:50:52:99:1a:bf:
                    da:a8:7e:23:4e:03:92:1f:d3:fd:42:d9:07:14:25:
                    33:6e:c6:03:4b:5d:2e:36:cd:24:65:91:a3:9c:c3:
                    93:a5:05:de:65:8f:ae:02:99:e5:32:39:fc:ae:97:
                    f2:1d:a9:d5:6f:85:c3:0e:b6:ff:3e:1e:bf:a7:ff:
                    00:b0:a6:90:95:dd:e7:9e:bd:61:f6:e3:0e:2e:05:
                    7e:e4:ff:db:9d:d8:63:5f:6d:6f:96:4a:02:e4:02:
                    c7:51:ce:88:30:d9:34:55:87:08:67:58:63:04:28:
                    13:dd:33:54:23:f6:d3:e6:09:61:e9:e5:df:96:e9:
                    a4:37:cc:89:ca:d2:ae:ad:b9:24:06:ac:49:42:4d:
                    39:86:f5:d4:e5:e6:d8:eb:5f:7f:bc:aa:fd:2b:6a:
                    fa:bc:e5:c6:89:d6:88:4d:64:02:34:35:06:91:0d:
                    5b:d3:c5:e9:89:8d:66:a3:48:b4:cd:80:93:a9:3e:
                    06:31:4d:b5:6e:a9:cf:71:be:ef:b0:6c:a7:79:62:
                    4c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A5:A0:75:67:68:B2:08:58:8D:E6:A5:3D:C0:F6:8A:6F:5D:B4:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f545e7aa-8036-3360-bc8f-ae465cc07333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5850::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b0:37:30:a4:4f:a2:2f:9c:84:25:17:f2:b5:50:18:e1:4b:
         41:f2:7d:c8:03:1a:0e:d0:e1:8d:fa:fb:d9:fd:aa:56:7c:44:
         0d:33:3a:9c:41:99:9f:60:ba:34:f9:97:55:db:72:bd:80:9d:
         31:95:07:e7:34:f2:5a:ff:27:8b:07:37:27:4e:5e:ed:2d:01:
         79:4a:92:24:66:29:5f:de:b6:51:3d:85:3f:b0:de:a9:f3:48:
         fa:a4:5a:a6:56:37:39:1d:b5:c5:21:02:83:d9:75:3c:92:47:
         0a:f3:c3:46:a9:14:96:70:96:a5:6e:d9:63:5f:8f:a0:e5:f3:
         06:f7:d8:8a:83:57:25:97:93:0f:a1:15:95:ec:aa:fe:9e:2f:
         25:23:f4:91:0d:3e:62:f6:ad:df:b0:0d:28:5e:7b:a2:42:e7:
         44:70:ff:6b:4a:02:9d:81:03:41:a0:aa:0c:3f:0f:3d:a4:02:
         34:57:3b:c5:03:6d:53:be:48:3c:b3:7c:65:b6:bd:94:7b:dd:
         9f:61:cb:0b:dc:81:dc:c6:3b:bf:84:b2:4a:7b:55:5c:5d:59:
         71:cb:b6:97:2d:ca:7e:f4:08:27:92:e9:2f:d0:8d:1b:a5:ca:
         6b:f2:98:2d:44:2d:f8:32:07:90:3f:98:11:c3:0b:55:f6:50:
         6b:02:93:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsAS/oJClndRoYJ2DAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk
N2UxZGIxNTUtYTIzNi00MDMxLTgwYWQtZDBmMmQ1ODZjYzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKoQtOkwbSAmJUhqXu3bZYTPtg+EZOyMuuXc
iHKH/Dl3+1ADEg3i0m6d1LDK55VDhlTu0Lu8UFKZGr/aqH4jTgOSH9P9QtkHFCUz
bsYDS10uNs0kZZGjnMOTpQXeZY+uApnlMjn8rpfyHanVb4XDDrb/Ph6/p/8AsKaQ
ld3nnr1h9uMOLgV+5P/bndhjX21vlkoC5ALHUc6IMNk0VYcIZ1hjBCgT3TNUI/bT
5glh6eXflumkN8yJytKurbkkBqxJQk05hvXU5ebY619/vKr9K2r6vOXGidaITWQC
NDUGkQ1b08XpiY1mo0i0zYCTqT4GMU21bqnPcb7vsGyneWJMPwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD6loHVnaLIIWI3mpT3A9opvXbRbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjU0NWU3YWEtODAzNi0z
MzYwLWJjOGYtYWU0NjVjYzA3MzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFhQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABSwNzCkT6IvnIQlF/K1UBjhS0HyfcgDGg7Q4Y36+9n9qlZ8RA0z
OpxBmZ9gujT5l1Xbcr2AnTGVB+c08lr/J4sHNydOXu0tAXlKkiRmKV/etlE9hT+w
3qnzSPqkWqZWNzkdtcUhAoPZdTySRwrzw0apFJZwlqVu2WNfj6Dl8wb32IqDVyWX
kw+hFZXsqv6eLyUj9JENPmL2rd+wDShee6JC50Rw/2tKAp2BA0Ggqgw/Dz2kAjRX
O8UDbVO+SDyzfGW2vZR73Z9hywvcgdzGO7+Eskp7VVxdWXHLtpctyn70CCeS6S/Q
jRulymvymC1ELfgyB5A/mBHDC1X2UGsCk8Q=
-----END CERTIFICATE-----
Generated at Fri Sep 5 03:43:11 2025 by rpki-client