Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1fcb2b23-311c-3609-a4ad-8b1a0b3295b5.roa
File:                     1fcb2b23-311c-3609-a4ad-8b1a0b3295b5.roa (raw, json)
Hash identifier:          xildpHziAzYXmWo2IdPGUus/jMsa2jcW9ecU14gU+Yw=
Subject key identifier:   49:18:58:14:39:9E:34:25:72:D6:8D:FF:F6:DC:B5:D4:9B:B2:D6:B1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584940397126D05D25A9D70982C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1fcb2b23-311c-3609-a4ad-8b1a0b3295b5.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:4840::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:71:26:d0:5d:25:a9:d7:09:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=662855d3-cdf8-49ac-a368-335b0d1299e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b8:95:8d:c5:dd:4a:79:5e:fc:c6:b5:0e:38:
                    9b:aa:63:ef:34:1b:f8:f9:ce:27:5d:5e:b0:2d:6e:
                    b9:d8:31:9d:67:c0:c4:15:2d:e5:6f:9d:47:41:3f:
                    0c:ec:35:52:df:2d:44:6a:73:b0:52:d5:c7:f8:bc:
                    af:a5:26:c6:90:a5:ea:92:2d:bd:48:9f:18:8f:ad:
                    22:90:c3:a4:84:15:8a:3e:1d:e1:58:8b:8b:9d:08:
                    c6:b4:73:59:fa:f7:40:85:01:3d:dc:0d:ef:3f:82:
                    91:de:02:af:c0:28:80:0d:a7:fb:2a:e9:49:ac:46:
                    ac:15:97:7d:b4:23:95:34:99:34:6b:8e:2d:b5:3c:
                    00:07:7d:83:d1:e4:0c:fe:37:b7:ed:24:35:15:2b:
                    18:76:37:e6:29:f8:61:66:09:43:aa:8c:f4:47:82:
                    ac:c8:23:0a:33:9d:00:f3:df:e0:b8:3d:17:af:82:
                    5f:1a:6e:3d:2e:62:e3:5f:b1:88:56:5a:58:82:53:
                    93:65:32:c2:eb:63:8f:26:b8:16:a1:13:97:0c:b1:
                    16:c4:ef:3e:a7:6d:07:73:e1:ec:12:3a:54:11:8b:
                    57:cf:80:c9:3d:5b:45:a5:30:42:35:34:7a:55:e3:
                    52:a8:be:2e:9f:52:4d:b6:10:ba:f0:29:33:5c:78:
                    a1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:18:58:14:39:9E:34:25:72:D6:8D:FF:F6:DC:B5:D4:9B:B2:D6:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1fcb2b23-311c-3609-a4ad-8b1a0b3295b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4840::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:20:b2:58:28:f0:95:ad:77:a7:36:7d:be:2c:7f:ae:c3:f3:
         01:df:8e:2b:d7:ac:5d:aa:0b:c8:a1:ed:fd:97:62:65:19:b3:
         ca:59:f2:fc:fa:dc:12:72:62:73:9f:60:e7:a8:a5:52:f7:7a:
         f5:71:82:c8:6e:e5:d4:37:ca:a3:62:a6:74:a1:4b:07:df:75:
         93:24:1e:ce:4c:ed:3b:8d:c1:cd:1f:5b:16:ad:66:38:ba:e0:
         52:e3:44:5e:e8:3d:2b:06:b6:42:9f:ef:f2:b7:c5:00:53:3f:
         a0:2e:50:2f:cb:1f:61:46:5a:12:c7:52:09:e8:bc:b4:75:b1:
         e1:d5:ed:11:7c:0d:27:6f:e5:36:aa:d4:36:fe:a5:7f:7a:36:
         f3:a7:03:ea:f2:65:7e:65:ed:43:a0:45:46:38:8a:b7:8f:e2:
         90:e2:39:73:c8:a2:b5:1c:70:42:31:bd:d3:32:45:ed:1e:d7:
         5f:a0:ff:9c:94:52:ae:94:53:d8:71:3b:14:c7:25:f8:9f:c2:
         49:fb:4d:7d:41:7b:49:5c:68:b4:8e:25:35:28:61:75:7f:70:
         7d:01:a4:a0:f5:14:2a:b7:02:02:93:64:c6:ad:30:0f:65:38:
         a7:83:f2:f9:b9:62:d0:57:e0:7a:be:c5:40:69:6f:df:a0:25:
         ee:c5:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:38:12 2025 by rpki-client