Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2f500d13-643c-3455-9367-773b494fddb3.roa
File:                     2f500d13-643c-3455-9367-773b494fddb3.roa (raw, json)
Hash identifier:          64bbO4/qrVWhaACAZJq2z2qLj12Rx8CifzbDqGu0nYU=
Subject key identifier:   5A:6E:33:E8:ED:C9:34:FC:DA:41:80:10:35:B9:C5:CF:96:EA:B0:71
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F903D1292B7285F969CD7C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2f500d13-643c-3455-9367-773b494fddb3.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:4e20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:3d:12:92:b7:28:5f:96:9c:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=0a955834-c1d9-4ebd-acc7-5b4d648820fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6f:7d:77:66:10:3b:bd:77:dd:f3:49:b2:c7:
                    24:1c:db:10:dc:38:ff:b7:d8:11:10:76:f2:cb:71:
                    80:f3:65:9a:eb:2a:11:24:44:b2:bd:e5:69:16:8a:
                    fd:e1:2b:3c:0d:3b:1e:38:b6:b1:df:8f:9f:ae:06:
                    19:f0:5a:d2:40:b5:9c:dc:f9:83:0b:3f:51:e2:ca:
                    4e:d4:89:ff:11:c8:71:80:07:17:14:ba:05:c6:6b:
                    35:51:30:24:03:93:2c:67:97:a2:ca:6f:79:a0:85:
                    1d:c4:4e:92:29:0a:f6:85:25:f5:d8:ad:ba:36:cd:
                    fe:78:b2:5d:ab:52:27:bc:e7:1c:c5:40:46:42:69:
                    1a:48:e1:db:f7:b6:93:d6:90:86:ec:73:88:f9:f8:
                    59:b9:10:b3:ef:4c:f5:c4:fd:94:33:af:bb:46:1b:
                    b3:25:db:96:42:1a:c8:f8:6a:66:76:fe:40:3d:de:
                    fa:7c:5b:83:a2:d1:86:83:ae:ae:5e:50:d2:b3:8d:
                    76:fe:0b:b2:e2:3d:5d:cc:e8:bb:c2:68:c3:cb:01:
                    26:b5:41:21:8e:0b:ba:c1:0c:4e:f5:32:9c:1f:37:
                    cd:b9:2f:f1:fa:ea:be:01:e2:4d:3c:ec:d5:67:77:
                    3f:0c:f2:45:70:9f:50:79:38:ae:ee:57:1c:4e:5b:
                    11:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6E:33:E8:ED:C9:34:FC:DA:41:80:10:35:B9:C5:CF:96:EA:B0:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2f500d13-643c-3455-9367-773b494fddb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4e20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:3e:9d:dc:e9:d9:d4:5b:7e:79:35:8e:95:cc:7e:7e:61:6d:
         67:74:79:85:59:d9:3c:07:72:1f:97:5a:d9:69:a9:4f:79:e2:
         f2:c3:89:3b:c0:a6:d0:ac:d0:fc:6c:4f:af:4e:43:72:3a:bb:
         b7:48:0d:81:ec:bf:7e:18:ba:5d:17:86:4b:b5:44:99:dd:d7:
         a4:7c:70:1b:a5:a8:fb:22:01:65:1f:b9:32:c9:87:ba:fd:9f:
         df:a5:0a:69:ce:00:01:f2:4b:38:ce:5b:ad:6e:9e:e1:35:21:
         29:bb:d9:d1:bf:ee:b6:04:5e:f2:b1:1f:47:54:93:be:11:d5:
         c2:4f:14:66:1e:28:25:29:c2:56:7c:a5:56:cb:e7:91:c8:0d:
         41:d0:fd:90:f1:c3:41:b3:04:05:49:1c:72:c1:e6:db:9d:46:
         bf:27:e9:07:a5:ec:9b:3e:e7:02:20:72:c3:50:7a:7b:9c:d6:
         84:58:36:dd:b1:9b:d0:d6:66:3f:fc:85:77:d9:8e:bb:b5:e3:
         a4:c1:8e:40:2b:45:43:3f:1f:4d:7e:d0:b9:e9:dd:f8:a6:12:
         d9:2f:41:c0:92:ff:64:a5:a2:a3:cb:40:24:0c:60:8f:94:dd:
         c2:88:88:24:2f:5a:09:6b:aa:be:b7:ac:41:c2:2d:1c:77:66:
         53:d3:b9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:03:46 2025 by rpki-client