Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3cacdbd3-d705-3430-ba14-3e45b4062840.roa
File:                     3cacdbd3-d705-3430-ba14-3e45b4062840.roa (raw, json)
Hash identifier:          ADJ2CIhM2Aa2fDX3QZZZgfgPrJ3C6T/SHPt4VfePWNU=
Subject key identifier:   47:27:6E:CD:FF:19:A4:0C:F2:49:93:C2:1E:3B:89:93:43:60:63:FF
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F9046F0390B9F109C7B0180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3cacdbd3-d705-3430-ba14-3e45b4062840.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:5a30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:46:f0:39:0b:9f:10:9c:7b:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=ca9435df-40b5-4a7d-9bd2-9b484ea4d944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:56:b8:1e:7e:00:09:fe:fd:bb:86:f3:c1:
                    7f:65:33:ae:8c:78:72:c3:3d:5b:58:b9:47:e3:04:
                    49:46:21:36:1f:d4:49:61:a0:2a:c5:88:26:09:58:
                    79:26:e4:c8:6f:a1:91:e3:50:ef:4c:3a:e8:24:31:
                    8d:6c:11:72:99:70:36:5e:e6:d3:81:e3:53:64:7a:
                    c4:e4:06:85:64:ec:15:58:f6:c1:75:01:25:0f:23:
                    50:e2:f6:fe:80:c4:15:a2:d5:67:ef:f9:4c:ed:96:
                    b1:21:f5:94:75:09:c3:a0:aa:38:f5:5d:be:ff:8b:
                    af:4c:eb:15:36:9f:94:52:1b:e4:fa:a5:e6:cf:da:
                    8e:29:8f:33:3c:97:57:1e:89:3b:74:73:28:17:6e:
                    e0:59:04:bd:89:c5:3b:74:d0:36:cf:44:22:22:37:
                    1c:40:7e:74:77:20:03:87:25:b2:b8:f5:88:5d:25:
                    2f:29:f7:87:93:e8:9d:12:c1:ff:23:8b:35:b8:50:
                    31:9b:7a:e2:c2:c8:52:8e:04:22:fe:00:9c:c2:81:
                    a5:71:73:1e:6b:e5:72:59:5c:88:a4:17:c0:4f:ac:
                    86:42:a8:2f:0b:0c:0b:3d:75:b0:37:00:b9:8c:f2:
                    79:66:f4:83:06:84:0e:00:d1:e4:b8:31:25:c0:fa:
                    a8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:27:6E:CD:FF:19:A4:0C:F2:49:93:C2:1E:3B:89:93:43:60:63:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3cacdbd3-d705-3430-ba14-3e45b4062840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5a30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ae:ce:42:76:f6:6f:9e:83:95:6e:85:79:db:5f:a4:2d:99:
         0e:f3:cc:79:81:4d:76:42:a0:1c:52:61:88:d5:6a:18:e4:b0:
         e9:15:fa:b2:f6:b5:d2:fc:b2:cb:ed:a5:87:67:47:fe:09:87:
         b1:c0:9b:e9:f1:65:b9:a6:da:a8:a4:14:f1:bd:c8:eb:38:10:
         e7:4f:57:f5:60:a4:fa:0f:12:02:79:8e:c5:a7:20:7a:3f:44:
         03:f5:83:b0:16:8c:1a:16:f3:de:a8:15:df:c0:73:0f:88:02:
         e5:ce:8f:39:fd:b9:4f:f5:ee:79:02:a7:7f:f5:e6:23:e9:d0:
         d8:6b:a6:dd:02:c3:9e:4c:ff:bc:2a:c3:8a:85:35:54:1d:df:
         67:0c:d4:81:07:e4:d0:d7:2d:00:08:99:74:e0:8d:b3:96:bf:
         98:3e:ff:1a:bf:ea:a0:ea:41:7f:43:b8:12:3a:14:06:e7:a0:
         8d:7c:d3:68:f8:da:9c:75:3d:e1:e6:5a:94:af:34:c0:92:78:
         dc:07:38:b0:1e:27:28:44:54:c7:ab:11:f3:b3:7b:db:24:c5:
         07:72:3a:69:8d:fe:e5:2d:01:0e:e6:3f:b4:3d:41:9e:9d:fd:
         f0:92:34:7d:f2:6f:c8:38:4f:5b:ae:08:68:2a:2e:45:25:88:
         b9:b4:b6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:01:27 2025 by rpki-client