Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1d0c3358-d788-315b-bec6-270541a7a2aa.roa
File:                     1d0c3358-d788-315b-bec6-270541a7a2aa.roa (raw, json)
Hash identifier:          miIeVw9ZJcQasUWHbypPYkTTF1EjB8GoQeQ+5D6gnoU=
Subject key identifier:   5A:A0:42:A9:6C:08:24:08:FA:47:86:1F:88:C2:65:C5:D7:01:18:21
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F90380DC5D1D20ED2B35384
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1d0c3358-d788-315b-bec6-270541a7a2aa.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:57c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:38:0d:c5:d1:d2:0e:d2:b3:53:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=4888e27e-4414-4109-b9ae-add4c2daa104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1b:22:9f:63:21:a8:d6:27:4d:12:b0:58:ba:
                    a8:5f:ad:cd:ca:e2:9b:f9:b3:ff:a9:ff:cb:1b:19:
                    a3:1e:5f:6f:40:5b:95:fb:29:d2:11:a4:48:40:39:
                    66:79:30:18:30:c0:31:ab:85:0c:d2:1b:8e:94:c4:
                    b5:fb:00:00:eb:64:2e:60:3e:9a:4b:7f:3d:18:69:
                    de:4f:76:4c:9d:37:fe:b3:ad:c5:5b:57:58:15:77:
                    f7:bb:98:b5:7b:64:8b:7e:86:a8:fd:67:42:3e:63:
                    f2:3b:aa:2c:7e:bc:e1:98:cd:5f:08:e7:81:1f:aa:
                    28:f2:66:df:8a:26:99:7a:cd:19:b1:ff:f2:eb:a1:
                    9b:ad:6f:3a:e2:f0:43:d7:d8:44:56:5c:15:d8:20:
                    e2:6c:55:36:fb:32:1e:be:9f:68:56:6d:0e:c6:c8:
                    f0:61:84:bc:84:8a:c3:59:84:ef:5a:cf:99:5b:4e:
                    ee:fd:a7:f8:f9:b2:b6:32:bb:09:97:ff:d5:b4:28:
                    4f:e9:a9:47:4a:45:3c:67:41:29:c5:a1:3f:e4:23:
                    a4:00:98:e2:9a:9f:99:b5:b3:ab:a9:bf:43:77:f9:
                    de:ca:eb:bc:8a:e5:14:7f:29:0c:35:97:4b:be:fb:
                    34:79:26:62:86:5e:dd:1b:63:ae:18:b8:aa:42:45:
                    98:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A0:42:A9:6C:08:24:08:FA:47:86:1F:88:C2:65:C5:D7:01:18:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1d0c3358-d788-315b-bec6-270541a7a2aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:57c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:2a:b6:9b:36:ad:c0:54:01:c3:d9:d3:26:1b:77:31:02:f0:
         58:43:ab:4c:7a:12:0d:b7:bc:02:50:7b:be:01:ad:f2:5f:a5:
         b8:f6:7b:22:f7:71:25:e8:c7:d2:fe:c4:4f:d5:77:3d:3c:74:
         a9:51:fe:ab:b8:51:29:80:d1:3e:8b:02:03:30:b1:bb:a2:42:
         35:e3:21:f6:2b:f2:31:11:c2:fe:a6:b9:d7:21:bf:f2:86:71:
         e4:d3:8c:31:ce:1f:ce:74:e6:44:6e:5e:bc:d1:aa:cb:1f:7a:
         ce:77:1b:c7:f4:b2:0f:b5:23:f9:1c:28:2e:57:64:12:cf:d5:
         b8:ec:87:ee:0a:6b:69:97:19:c0:13:21:90:e9:66:a2:8d:92:
         f6:d6:ad:e1:b6:a3:cb:17:17:a5:97:34:29:14:35:a3:47:63:
         83:e8:2d:c8:3e:b2:f2:19:fb:41:ce:52:81:d9:c1:87:f1:3d:
         bf:b1:0c:2f:ae:f6:10:4e:b0:ec:ca:b6:8f:96:b3:73:6c:b6:
         ed:d0:d5:42:5c:81:9a:1f:3b:fd:dc:8e:96:6e:a4:49:fd:77:
         68:64:b2:65:1d:5c:df:47:77:37:15:42:87:7f:75:c1:69:41:
         37:8c:6b:c1:ea:c4:52:38:76:29:ad:f5:7c:4f:29:d9:be:5f:
         8f:bd:7c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:09:37 2025 by rpki-client