Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4c6891d0-f4ac-3b18-8e9b-e9a6e778d5ad.roa
File:                     4c6891d0-f4ac-3b18-8e9b-e9a6e778d5ad.roa (raw, json)
Hash identifier:          Gin7U+lyrAdUHF3cluh9+dQbvmbombmYBb0E8URyrU4=
Subject key identifier:   88:0D:6F:4F:AC:E4:E9:2A:A8:2A:4E:B8:1D:46:C4:C4:CA:45:59:82
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F9035B7D7533BD2D3342910
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4c6891d0-f4ac-3b18-8e9b-e9a6e778d5ad.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:5090::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:35:b7:d7:53:3b:d2:d3:34:29:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=d0eb3d00-82bb-47e6-9f48-29a7af89bb37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:b2:89:39:9e:2f:ab:14:96:73:cd:2b:3c:
                    c0:3b:a4:b6:9d:de:80:06:e7:3e:1f:b7:9a:37:8b:
                    00:d9:05:6d:62:6f:8f:3d:4f:b6:03:c7:ad:4e:0c:
                    ac:45:9f:7c:cb:5b:4d:3d:54:5c:c7:97:d2:62:8d:
                    98:cf:f6:8c:83:5f:20:15:d7:ac:c8:54:24:65:21:
                    b2:8b:36:72:15:44:a8:f2:3b:63:cb:6b:b2:ff:a4:
                    46:31:27:bc:0b:8b:8d:b7:ef:fe:a2:ed:5a:9c:16:
                    da:f8:75:d9:75:3d:70:09:0b:38:38:3a:ce:14:0a:
                    45:6b:2d:66:bb:39:c0:8d:d9:d2:bb:d6:a6:ca:2b:
                    f2:a8:73:f5:37:33:9d:ad:ca:09:97:4e:a0:9b:5d:
                    58:65:0b:0d:e9:ac:82:35:14:3f:86:29:55:aa:b7:
                    44:28:dc:e4:8f:a6:b7:cb:c0:94:d4:da:73:8e:a1:
                    53:7f:44:77:3a:eb:97:8a:ea:07:46:6a:15:11:9a:
                    eb:96:a7:f3:19:cd:80:1a:ad:d3:98:a5:89:25:bf:
                    01:34:04:cf:57:78:c0:3d:10:c9:d4:c8:bc:32:15:
                    16:e1:27:cb:bc:cc:4b:a2:91:70:e8:7e:aa:4e:cf:
                    7c:3f:70:7b:ad:0e:e0:17:32:22:2c:ee:49:5d:ee:
                    43:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0D:6F:4F:AC:E4:E9:2A:A8:2A:4E:B8:1D:46:C4:C4:CA:45:59:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4c6891d0-f4ac-3b18-8e9b-e9a6e778d5ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:6f:d6:1c:f8:97:b4:79:3a:70:e0:f0:b5:b0:d6:d4:27:06:
         60:1a:07:69:75:50:9e:43:e0:81:17:cb:f9:6e:3e:46:ac:66:
         f0:8b:3d:ae:02:a1:50:b3:67:a5:5b:d2:2b:4f:17:1c:6d:6b:
         c7:88:8c:f8:4f:bd:cf:9d:4d:da:c9:30:8e:29:03:38:98:29:
         6d:19:e9:d4:7d:83:fd:63:ca:6c:41:4f:d8:a1:f2:b7:9b:8d:
         e8:ca:da:e8:60:a3:73:ba:2b:a9:7d:bf:fd:ff:c1:a2:ba:9c:
         13:c3:96:c7:be:a3:f2:a4:40:e7:e3:0b:95:93:e5:e2:0b:54:
         6d:15:82:62:86:c3:f5:52:93:5e:ad:33:e6:31:31:c7:f0:70:
         38:05:51:c9:1b:45:60:3d:44:48:16:da:da:1c:76:9a:5a:1f:
         1b:8b:5b:a2:8b:ff:00:c9:b7:74:ac:80:88:78:9a:87:f5:56:
         f6:e1:c5:81:a1:3a:3e:83:a6:fe:03:28:05:42:29:b6:41:cb:
         eb:5b:c9:66:c7:32:eb:ac:3c:37:79:00:92:85:70:d0:86:bf:
         51:af:a9:5e:3c:9a:ba:04:73:58:3f:ba:44:30:6c:9c:fa:2f:
         cb:34:69:ca:dd:c6:50:a0:0a:6a:0a:56:66:40:77:cd:84:38:
         a9:7b:2a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:42:55 2025 by rpki-client