Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/35cffa10-d341-3b6e-a5a1-81a58922eb8e.roa
File:                     35cffa10-d341-3b6e-a5a1-81a58922eb8e.roa (raw, json)
Hash identifier:          6/R0GyAHHhKxLHOU0otCux1Kltf26LKzmxTWMUTJuqo=
Subject key identifier:   5E:FB:C3:70:2E:EB:86:A5:20:F5:16:93:D8:6B:FE:E6:5C:AE:3D:36
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F90358ADB0744EC3A7B5480
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/35cffa10-d341-3b6e-a5a1-81a58922eb8e.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:5c90::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:35:8a:db:07:44:ec:3a:7b:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=51e4af0d-df35-4ec4-ada7-0385029719e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:73:02:9d:ac:32:ba:1e:5f:45:dc:47:4f:34:
                    60:cb:31:5f:24:8c:b5:e8:9a:25:53:ea:bf:0a:b8:
                    a3:9f:12:9f:53:e5:93:d6:6e:bf:8f:b8:d3:65:6a:
                    f0:72:1f:d8:89:e2:d0:13:6c:fb:59:36:c9:77:94:
                    9a:13:2e:a2:6b:aa:cb:45:a5:f8:e7:32:de:ee:dc:
                    8e:c8:d2:73:c3:f2:b9:ce:08:43:ae:cf:8f:92:bb:
                    01:d6:58:9a:2a:7e:8a:88:cc:ae:b5:32:4d:08:2d:
                    81:71:ef:f4:fa:4e:94:ba:66:61:fb:22:59:66:2a:
                    a5:28:7f:ca:6c:d5:f2:e3:63:35:27:44:c0:f6:7b:
                    52:d8:b3:aa:89:b6:08:13:67:5f:37:bd:92:cf:f1:
                    77:dc:f9:70:92:74:95:58:35:77:4c:7b:8e:28:94:
                    03:5c:85:ee:ce:d5:97:c2:e7:3f:50:5c:1a:fe:9c:
                    6e:6f:ee:a4:49:0f:97:b4:79:d2:90:cc:89:00:5d:
                    0c:54:f2:18:27:5e:1c:2b:c7:a4:13:f1:9d:85:c8:
                    29:2d:1c:0d:3e:fb:38:25:76:54:9d:4f:2b:4a:09:
                    2a:28:76:02:85:5a:07:30:17:e5:ce:fe:73:e8:fe:
                    24:ec:4d:0b:e8:7a:2c:60:8f:3b:3e:e7:a3:5c:07:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FB:C3:70:2E:EB:86:A5:20:F5:16:93:D8:6B:FE:E6:5C:AE:3D:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/35cffa10-d341-3b6e-a5a1-81a58922eb8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5c90::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:39:08:8d:17:24:8d:b5:55:ed:9c:ee:11:76:78:8a:78:9c:
         4f:fc:73:1b:51:bd:cf:db:46:d4:d2:31:ef:33:8d:54:ed:57:
         c4:98:ac:0a:18:b0:e5:bb:32:10:3d:d1:3a:0d:bf:80:87:a7:
         86:72:ab:94:b6:97:e4:5d:57:8e:73:6f:08:9a:1d:09:33:47:
         a8:f3:b4:5e:6c:d7:65:7d:e3:9c:c0:c8:91:1f:d2:76:5b:1f:
         95:5d:88:60:2e:a5:2a:38:eb:d5:84:44:42:f0:66:4f:3d:04:
         14:42:1a:ec:f2:b8:c0:0a:23:76:a6:31:b2:09:55:94:8b:0e:
         1a:4f:32:50:c7:af:ff:af:1e:6b:e8:21:01:67:90:fe:23:f4:
         b6:79:34:77:63:f3:65:75:e8:f3:f6:49:1f:84:d8:41:3d:64:
         23:5c:9f:96:0b:af:e0:c8:ae:c3:64:ce:f3:f6:2d:78:7a:93:
         15:f4:bf:e1:40:b9:b8:c1:5a:e9:49:a5:09:84:68:c7:3d:78:
         ee:b8:5c:b4:dd:26:07:d9:34:27:76:80:3f:69:7a:f0:f8:d8:
         0b:8e:8c:a5:19:73:24:b5:c4:43:c6:28:bb:00:dd:c8:2a:c7:
         3b:88:c6:38:a9:8a:df:83:91:24:cc:89:db:74:b9:e9:6b:ee:
         f5:84:e9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:41:34 2025 by rpki-client