Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/773711fe-d16a-3264-8aa5-6b74483fd17e.roa
File:                     773711fe-d16a-3264-8aa5-6b74483fd17e.roa (raw, json)
Hash identifier:          sdplvmMg5nXzaHMPdzgESMXVzaVeI+YcZE0QKBsm6OY=
Subject key identifier:   59:64:18:08:62:C5:E8:C0:4C:7E:53:E5:7A:42:40:25:D3:4A:75:76
Certificate issuer:       /CN=ae55b5de-dd92-467b-8e52-a8892152f63e
Certificate serial:       010D0C9F4328584AF5214640D6B392C9AD34A500
Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/773711fe-d16a-3264-8aa5-6b74483fd17e.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     1097
IP address blocks:        2607:77c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:46:40:d6:b3:92:c9:ad:34:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=23e94978-9ee5-4f60-a412-75262687202d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:31:df:11:eb:85:7a:6e:80:b2:f6:5b:be:
                    71:18:3b:dc:1d:09:48:12:5f:13:ab:42:54:62:d2:
                    63:3b:98:05:07:ab:30:c3:dc:78:a4:34:7c:53:88:
                    9b:a7:69:0f:10:16:2e:4e:e7:df:e0:8e:26:48:e9:
                    2d:a1:4e:ca:b4:89:de:ba:d4:fd:8b:e3:42:9e:0e:
                    fb:1d:cb:7e:44:bf:59:a3:4e:a5:c9:56:04:b3:ee:
                    1a:a7:fe:e9:a2:8c:e2:4e:1f:f2:6a:e4:4a:fe:da:
                    07:3c:30:35:63:d3:f3:21:b5:0b:3e:ad:62:f9:81:
                    d3:7f:db:58:dd:df:ce:1c:f8:4f:c5:5b:d0:04:02:
                    9c:13:38:35:a5:4e:5d:72:10:79:72:f6:28:8b:07:
                    5b:18:53:4b:71:76:e1:7a:38:97:9b:16:96:1c:9b:
                    10:97:7a:bc:84:7f:b0:78:2e:e0:ab:e1:45:ef:21:
                    d8:74:7b:67:d0:3f:6d:81:39:0c:1e:30:35:09:7c:
                    a7:d4:a0:9f:31:e9:28:96:3b:cb:85:b3:aa:6d:0f:
                    3f:81:f6:5d:d1:45:fa:88:be:15:47:73:3c:4f:33:
                    b9:28:ad:21:e4:52:bd:31:00:ce:53:56:83:d1:f6:
                    a8:64:18:04:ed:f0:fb:0c:29:08:2d:6b:80:a8:df:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:64:18:08:62:C5:E8:C0:4C:7E:53:E5:7A:42:40:25:D3:4A:75:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/773711fe-d16a-3264-8aa5-6b74483fd17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl

            X509v3 Authority Key Identifier:
                keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:77c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:02:25:1a:cc:6f:ea:c4:bf:ea:99:c7:1b:69:7c:02:e7:06:
         cb:b8:70:fb:91:03:25:77:3e:d9:6c:41:c2:71:5e:d9:66:cf:
         00:5b:22:0a:5d:99:3f:3a:5a:bb:26:b5:60:51:f1:6e:ca:b6:
         54:33:f3:3b:7f:6f:43:cb:9e:3c:1d:58:b2:1c:de:88:17:7a:
         ec:07:99:11:73:59:a2:f6:65:dc:4e:19:91:25:19:6e:d8:d1:
         e5:05:37:27:bd:7e:26:c9:00:43:92:18:1a:d9:50:d8:aa:f8:
         92:9c:f1:97:83:5b:ef:34:a3:4f:1c:38:44:de:d6:49:3b:6a:
         3c:06:e9:9f:97:e4:bf:36:8e:5b:ed:72:f7:66:74:4f:cb:74:
         1d:f5:03:eb:32:4c:a6:d8:d1:db:1d:5f:1e:97:eb:da:d7:bc:
         c2:d2:54:48:24:9a:e8:c0:5f:bb:da:91:cf:37:08:76:8f:b4:
         e1:f1:1d:b6:91:cf:b1:40:38:2c:a2:b3:f8:45:84:37:75:a9:
         0a:b7:38:59:40:b1:ca:9a:1b:80:4f:36:4a:2e:6e:7a:9a:f6:
         bf:f0:f2:d4:7e:35:89:2f:55:ce:f8:9a:8b:cd:84:3b:7b:e8:
         ca:1d:e6:a7:71:82:34:78:99:5d:b1:db:31:af:e6:f7:04:41:
         34:37:80:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 17:07:52 2025 by rpki-client