Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30c98f17-19ab-3a4c-85e4-c14b4ff67b3a.roa
File:                     30c98f17-19ab-3a4c-85e4-c14b4ff67b3a.roa (raw, json)
Hash identifier:          jL+XyxQIk9q0DHq0ounuKM21mewl8CXn59fP/5O9yXU=
Subject key identifier:   63:CD:BB:BC:2C:E3:E4:FC:67:D0:8B:BB:05:E3:C4:8B:59:4C:73:70
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F9040A7CD442F30AC4BEF40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30c98f17-19ab-3a4c-85e4-c14b4ff67b3a.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:49e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:40:a7:cd:44:2f:30:ac:4b:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=e638b825-126a-45d6-bdbe-6456d76ffc13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:da:45:c4:8f:f3:dd:1d:1a:b8:e8:a5:78:eb:
                    06:68:b3:31:b1:a1:f5:16:01:5d:9a:1d:9a:b0:64:
                    11:90:08:37:d8:b2:b7:4b:bb:76:ec:87:1d:de:23:
                    79:43:f9:93:34:44:b6:06:e6:97:b5:05:a8:9f:a4:
                    20:bf:a1:c5:6a:b2:c3:44:fc:7b:68:c4:5a:04:c3:
                    6c:bb:49:44:03:35:ae:d1:b3:f0:91:af:36:80:bd:
                    5a:04:99:e3:8a:0f:71:fc:d8:24:3a:38:6d:a4:59:
                    1f:86:4d:be:1b:0c:71:a8:c7:5b:aa:ec:4c:d2:4a:
                    6b:83:3f:35:ce:0e:0f:34:0b:70:1e:ee:fc:47:46:
                    e1:35:f4:64:61:d3:03:8c:b4:a1:3e:0f:d4:d7:a2:
                    f1:63:e1:ab:3d:5b:8e:ff:df:63:6a:41:6b:a1:0c:
                    b8:4d:e6:3f:56:9f:1a:8e:e6:07:0e:4f:71:68:99:
                    4e:a8:e5:4d:f8:9e:15:1a:58:a3:e4:52:dc:ba:3e:
                    5a:d9:30:05:d2:6f:b0:3f:9e:e9:48:b1:c5:76:3c:
                    e1:4e:f0:3e:9b:7b:b5:39:1b:3d:ba:5a:51:2a:1d:
                    b4:8c:b5:14:4e:5f:ae:0e:00:49:4e:47:17:98:1f:
                    6b:69:e0:16:26:04:50:78:96:08:56:a7:b9:dc:f1:
                    b9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CD:BB:BC:2C:E3:E4:FC:67:D0:8B:BB:05:E3:C4:8B:59:4C:73:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30c98f17-19ab-3a4c-85e4-c14b4ff67b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:49e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ea:4a:a1:be:4f:54:c6:f5:38:69:41:0c:12:6c:b0:9b:ad:
         fd:dd:c3:0a:71:36:dd:88:33:80:3f:43:fa:82:fd:7c:86:bf:
         57:9e:eb:46:5e:73:af:85:ac:4a:bc:f8:07:13:50:63:9a:01:
         44:cf:b5:d7:77:2f:ce:79:57:88:17:c1:8b:49:d7:8f:b2:56:
         34:04:d6:5c:5b:f1:7a:d5:57:44:0c:fb:3c:05:fa:73:7d:06:
         3f:a6:12:0a:ae:56:88:b7:ae:b1:a6:74:2b:3b:cc:64:e8:a0:
         f8:6b:d2:41:8b:5c:36:e5:4d:31:83:27:79:cf:b7:a0:9f:b8:
         3c:8a:33:d8:15:9b:76:79:b8:3c:70:ea:48:fd:c6:0e:2b:31:
         1f:45:6a:a2:7e:36:63:c6:62:c9:b0:48:ba:a2:81:66:46:be:
         5c:5f:39:19:3c:cd:6d:6a:7a:20:61:e3:b2:72:18:96:fa:32:
         82:59:cc:5e:0b:be:93:5e:f0:21:cd:25:dc:94:bf:d4:c9:72:
         0e:89:60:a0:ee:4d:c7:c4:c7:92:1d:60:a4:8a:b4:d6:53:0e:
         5b:85:17:d1:60:fc:2e:ef:42:12:5f:07:1f:99:20:64:32:29:
         65:17:8f:cd:18:64:9b:5a:fc:9a:60:d7:c7:39:26:c4:ce:70:
         6d:4b:bc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:40:30 2025 by rpki-client