Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1072b390-8c15-3903-aa82-aba7b947a672.roa
File:                     1072b390-8c15-3903-aa82-aba7b947a672.roa (raw, json)
Hash identifier:          gCGeb9dD7zyAUxfzUtSopGUzxIAtCwPY0NA2vEt/S8A=
Subject key identifier:   5F:5F:B7:21:E2:60:4F:42:F0:DA:73:EB:AF:C6:F0:0B:AF:47:50:64
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F902C5A2C5052AA90C07200
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1072b390-8c15-3903-aa82-aba7b947a672.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:4b30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:2c:5a:2c:50:52:aa:90:c0:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=f8af8b64-00c7-4415-a4ca-b840ec45f68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:01:26:4b:0e:61:ee:5f:94:31:31:a9:dd:e0:
                    ac:83:83:a4:83:42:f1:1e:c3:5c:c8:39:8d:00:2c:
                    48:a2:eb:42:f1:50:2a:99:c3:99:11:35:e6:37:ae:
                    0b:ba:5a:bd:59:f7:25:f4:58:36:83:e0:d2:4a:09:
                    16:d3:0c:e4:fc:91:b7:28:73:b0:87:8a:76:3f:09:
                    23:f0:eb:e1:6b:00:98:b0:b5:40:b0:37:32:55:75:
                    1a:eb:48:54:3f:9e:b9:f1:67:60:36:0b:4c:b5:21:
                    3f:6c:e8:d7:c4:d3:d2:8d:9d:87:0a:8c:ed:09:8e:
                    7f:e5:a4:b2:fd:bc:4f:81:56:e3:34:8a:86:8a:2b:
                    f0:51:1c:67:0f:58:b2:fa:8f:03:2e:b0:8e:83:9a:
                    f8:be:19:3c:6d:34:23:4f:49:cb:7a:1f:e7:7f:de:
                    31:1e:09:8b:fa:94:b0:17:cc:ba:bf:9f:b7:fb:ed:
                    3c:f2:e5:fb:17:dc:75:9e:e8:7b:91:c9:5c:fb:5b:
                    b8:ea:c0:ec:20:60:91:9a:a5:7a:70:00:6a:84:d0:
                    d8:1a:4d:9b:4f:ba:b2:56:f7:e6:50:d3:cc:b9:75:
                    a3:51:78:0f:9a:e0:cc:6c:ca:54:50:1d:93:ef:fa:
                    5a:de:a7:64:47:47:9b:cf:9e:b3:7a:3b:f0:58:ea:
                    d4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5F:B7:21:E2:60:4F:42:F0:DA:73:EB:AF:C6:F0:0B:AF:47:50:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1072b390-8c15-3903-aa82-aba7b947a672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4b30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a3:70:80:22:dc:47:2f:30:8f:de:0f:fc:ab:84:31:4d:08:
         2e:22:ed:41:c7:99:62:ad:0e:cb:96:f0:ce:50:79:b6:8e:46:
         84:0f:ea:51:c1:d5:01:99:46:f1:fb:58:68:f1:a8:d2:30:61:
         c4:fb:b2:bb:09:40:53:98:7d:9c:28:a0:34:e1:d4:4e:92:c0:
         a3:88:3a:0e:d4:8e:44:e2:fb:0b:8b:ac:e5:60:80:35:c9:8e:
         95:e1:ca:75:e2:27:3f:d3:1f:d1:15:36:92:cc:24:90:20:4d:
         f9:23:e5:d5:3d:b8:64:5e:79:6b:dd:22:3f:1e:29:a6:f3:0b:
         a5:a5:f8:e6:4e:e8:7f:46:e5:93:6d:96:ce:5e:6c:fc:40:e0:
         5d:37:ba:9a:7a:2a:ce:a0:2f:5c:52:e4:3d:f3:6d:62:f7:a0:
         72:39:29:a3:5a:6a:d1:38:e6:c4:ec:02:3f:50:8d:1a:7c:72:
         74:76:32:42:e8:b3:4a:c8:f5:c7:4f:ab:75:11:4a:94:c9:93:
         31:4c:41:2a:74:44:50:9c:e1:28:bb:e6:b0:2c:ee:b4:d2:26:
         37:30:eb:f0:0c:09:86:c7:2f:a3:11:2a:68:eb:6f:b7:3b:b4:
         8b:ac:95:ae:e4:c6:0e:44:e5:3d:0a:19:66:b1:33:fa:4d:69:
         52:78:21:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:04:08 2025 by rpki-client