Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e25af9e-dfdb-314e-aba9-07e3b60c3978.roa
File:                     0e25af9e-dfdb-314e-aba9-07e3b60c3978.roa (raw, json)
Hash identifier:          Bfdn1VXW2TkjfgiL6+/nR7GlpMngN75W3/woovBjf2k=
Subject key identifier:   D2:52:95:C3:97:FF:FB:36:72:FD:59:8E:2A:68:A6:3F:47:3C:E3:F5
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F902C8C0155DA9FE6581400
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e25af9e-dfdb-314e-aba9-07e3b60c3978.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:4010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:2c:8c:01:55:da:9f:e6:58:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=7d308bce-3587-43d1-99aa-5388ca11135a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a2:d9:a7:c4:cc:18:16:93:51:2d:f7:2e:0e:
                    2d:f1:65:8e:fb:81:ec:6e:6e:94:fe:80:18:29:8c:
                    58:a8:a7:89:8c:1e:95:5b:fe:25:4c:66:62:9b:85:
                    7a:08:5b:53:36:b4:4e:82:3d:17:5f:b4:f8:d6:a0:
                    f2:8e:7c:7b:19:13:96:b4:70:7f:e9:11:2e:57:d6:
                    b2:16:8c:ee:82:1e:4f:c5:e6:19:c4:68:92:05:51:
                    cb:6a:7a:f8:df:6c:63:f5:1a:e2:1a:46:3b:4c:07:
                    02:96:b8:6c:a7:9a:4c:bb:f4:41:72:57:c0:83:04:
                    73:3d:98:2a:18:6d:aa:2f:24:26:0a:51:57:15:d3:
                    1a:fb:5d:1f:84:20:76:19:48:4d:2d:a5:12:66:70:
                    6b:7a:5e:31:78:2b:f1:f2:f4:dc:2d:88:34:d2:fb:
                    09:b1:b0:15:9c:ab:c9:9c:a1:00:41:4f:27:7b:57:
                    bb:14:18:57:72:e2:17:b2:3d:c8:33:e3:cf:48:ee:
                    14:f3:85:4f:b9:26:a3:c6:ff:4d:ab:4c:44:a2:30:
                    30:9e:26:2f:dd:d3:3e:06:ca:4b:0e:b1:4f:f2:d5:
                    60:db:f8:a3:24:a7:48:b2:74:8b:c9:75:61:dc:3a:
                    01:a9:9d:0d:91:fb:45:4b:93:8f:3c:38:01:06:02:
                    f9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:52:95:C3:97:FF:FB:36:72:FD:59:8E:2A:68:A6:3F:47:3C:E3:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e25af9e-dfdb-314e-aba9-07e3b60c3978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:1a:2b:8a:5b:c7:29:cb:37:1a:19:46:13:d3:b0:50:59:02:
         54:10:8b:56:bc:92:b9:45:35:0c:77:d9:2b:39:a1:cc:f5:86:
         bb:4b:25:e4:50:24:7f:d6:7e:71:28:94:44:ce:2d:52:89:99:
         af:e2:1f:23:d5:0b:a2:5c:28:a6:18:a1:0c:6b:b9:a3:02:34:
         5c:04:cd:e4:69:71:cf:a5:84:06:0f:2c:77:64:ce:61:1b:14:
         89:d9:93:10:98:48:40:df:e0:71:78:30:62:7a:ce:67:fc:cf:
         42:ea:b7:c3:af:23:c9:d5:f1:21:d6:d8:e1:b2:08:bb:ea:fa:
         8d:a9:96:1c:d0:a4:21:7d:a8:fd:1e:ef:a7:81:7c:9b:a0:ce:
         94:eb:1f:75:44:08:e8:dd:1b:c9:d6:65:b5:24:e7:dd:c8:50:
         61:4e:af:4c:e7:dc:21:0e:c5:16:22:1d:16:06:d0:f1:05:98:
         dd:01:da:ef:91:9a:a5:35:9d:9d:7c:1a:27:c5:25:2f:1e:a8:
         6f:9c:fb:11:6f:d1:4d:30:db:3e:a9:1a:70:82:8a:7f:b1:17:
         21:c7:a6:97:c3:45:bf:8e:59:10:57:8d:39:83:fa:9b:41:01:
         17:90:39:00:ed:97:99:02:ee:4a:49:cb:98:a6:d6:6b:24:eb:
         d9:59:ed:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:39:57 2025 by rpki-client