Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/16906be1-195b-3adf-bbef-17a7110b2adb.roa
File:                     16906be1-195b-3adf-bbef-17a7110b2adb.roa (raw, json)
Hash identifier:          xUn8y1njaOHl9Lr9fCMIGVrj5PYMLfrfc8p/9LT9vUg=
Subject key identifier:   DD:70:1D:69:9B:CF:24:7D:D6:6F:4C:C6:AE:80:5C:9C:37:BB:5F:B1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F90425EE863DC882A776F00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/16906be1-195b-3adf-bbef-17a7110b2adb.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:5cc0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:42:5e:e8:63:dc:88:2a:77:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=4e35ca77-734b-45a0-8541-a40a4c310cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:cb:67:4b:22:a4:79:d7:0e:d7:0b:37:d5:
                    6c:97:a7:75:36:ee:05:5b:ca:d1:09:eb:07:f2:af:
                    9a:57:4c:eb:a6:92:d4:d0:74:f0:0f:90:62:69:33:
                    68:eb:51:9a:94:43:08:42:6f:13:67:f6:ba:92:72:
                    82:fd:83:bb:a8:f3:1e:38:07:f1:ee:3c:98:27:43:
                    a5:6f:5e:e2:4a:9b:1f:5b:fe:93:75:d9:c0:d2:d4:
                    fd:29:2e:9a:8b:b3:87:74:56:ca:67:b3:a7:1c:e8:
                    4d:21:67:24:9f:70:39:1f:1e:f7:4d:6b:6d:0c:a5:
                    c3:61:b4:1d:ab:52:db:e0:33:61:52:32:56:b0:4e:
                    75:eb:4c:71:d7:99:39:1b:ab:6a:08:8b:cd:0f:83:
                    a6:e4:4f:a9:cd:46:6c:1b:79:81:94:aa:fd:e2:ab:
                    b1:50:bf:6e:55:25:03:94:e6:c9:00:19:96:36:c6:
                    3c:07:92:24:91:70:7d:79:9d:e9:d1:e2:73:fa:d4:
                    71:d6:6d:a7:8d:25:19:f4:c9:db:19:02:b5:78:d6:
                    0b:2e:a3:78:28:29:a7:7d:8a:4c:a3:67:f7:79:f7:
                    c4:83:96:5c:45:a0:e1:0b:14:06:a2:96:17:ad:68:
                    34:19:86:c3:87:95:b5:ee:53:fb:04:d3:dd:37:f2:
                    30:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:70:1D:69:9B:CF:24:7D:D6:6F:4C:C6:AE:80:5C:9C:37:BB:5F:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/16906be1-195b-3adf-bbef-17a7110b2adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5cc0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d3:56:18:d8:8b:9a:64:4e:88:37:09:15:7b:56:a1:dc:66:
         b4:67:47:cf:b5:4d:26:3e:6e:ac:63:7f:9e:2a:5d:c4:df:71:
         fa:cf:44:67:8c:9e:11:aa:08:6b:80:f6:f7:ae:42:ca:e9:83:
         d1:5c:0b:59:bf:d5:3d:74:62:0b:ed:95:31:ff:c6:5e:0f:b1:
         e0:56:1b:04:c3:de:51:21:eb:84:83:f7:b9:ba:50:6d:d6:13:
         09:59:1f:17:b8:c4:96:e3:a5:9e:9d:c8:1d:96:d8:d0:2e:20:
         45:6e:3d:aa:bc:13:4c:b2:cb:c2:23:1e:cd:6a:3a:58:17:da:
         df:64:b8:12:69:42:03:83:f8:0d:31:da:ae:ea:c8:0c:aa:79:
         a7:96:fb:5e:e8:81:4e:68:eb:f6:a7:14:c8:51:38:70:7f:4e:
         d2:29:1e:5d:95:c8:01:51:fa:10:bf:95:20:7e:32:bf:c1:0e:
         04:22:e0:61:34:f8:28:af:44:75:40:19:ed:89:8f:9e:bd:6a:
         81:a9:b0:3b:14:ad:43:f2:2d:b4:0e:31:93:51:c0:04:d7:94:
         9b:18:1e:cf:0b:18:0d:b0:85:d1:ae:cb:68:2b:d9:e6:ba:ed:
         c6:cd:cd:bf:b2:27:eb:c7:ac:7f:25:80:ff:48:ca:70:c3:8e:
         f5:3c:3d:c8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEofkEJe6GPciCp3bwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk
NGUzNWNhNzctNzM0Yi00NWEwLTg1NDEtYTQwYTRjMzEwY2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPrLZ0sipHnXDtcLN9Vsl6d1Nu4FW8rRCesH
8q+aV0zrppLU0HTwD5BiaTNo61GalEMIQm8TZ/a6knKC/YO7qPMeOAfx7jyYJ0Ol
b17iSpsfW/6TddnA0tT9KS6ai7OHdFbKZ7OnHOhNIWckn3A5Hx73TWttDKXDYbQd
q1Lb4DNhUjJWsE5160xx15k5G6tqCIvND4Om5E+pzUZsG3mBlKr94quxUL9uVSUD
lObJABmWNsY8B5IkkXB9eZ3p0eJz+tRx1m2njSUZ9MnbGQK1eNYLLqN4KCmnfYpM
o2f3effEg5ZcRaDhCxQGopYXrWg0GYbDh5W17lP7BNPdN/IwwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN1wHWmbzyR91m9Mxq6AXJw3u1+xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMTY5MDZiZTEtMTk1Yi0z
YWRmLWJiZWYtMTdhNzExMGIyYWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFzA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHXTVhjYi5pkTog3CRV7VqHcZrRnR8+1TSY+bqxjf54qXcTfcfrP
RGeMnhGqCGuA9veuQsrpg9FcC1m/1T10YgvtlTH/xl4PseBWGwTD3lEh64SD97m6
UG3WEwlZHxe4xJbjpZ6dyB2W2NAuIEVuPaq8E0yyy8IjHs1qOlgX2t9kuBJpQgOD
+A0x2q7qyAyqeaeW+17ogU5o6/anFMhROHB/TtIpHl2VyAFR+hC/lSB+Mr/BDgQi
4GE0+CivRHVAGe2Jj569aoGpsDsUrUPyLbQOMZNRwATXlJsYHs8LGA2whdGuy2gr
2ea67cbNzb+yJ+vHrH8lgP9IynDDjvU8Pcg=
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:25:48 2025 by rpki-client