Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5120efc7-4ed4-3cf9-893e-3e2ea25b12b0.roa
File:                     5120efc7-4ed4-3cf9-893e-3e2ea25b12b0.roa (raw, json)
Hash identifier:          JRJFvSArOq3dJ9fTJpjf2auJGR798ZfmCl1VgkBcOf8=
Subject key identifier:   6E:19:E9:DD:66:B2:BB:75:14:23:2E:44:97:CC:34:AE:06:CB:ED:A1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F90323E3FB9F633A89121F8
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5120efc7-4ed4-3cf9-893e-3e2ea25b12b0.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:40e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:32:3e:3f:b9:f6:33:a8:91:21:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=d909f210-21ce-4690-bb0f-ba1dd251a4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:7e:2b:f3:f1:51:b2:52:bc:f4:ea:65:44:
                    ec:77:ba:0d:4a:eb:2e:62:66:57:33:7c:97:dc:52:
                    65:e7:22:ec:a4:7f:26:04:96:78:1c:a7:e6:dd:3d:
                    ab:3c:58:b3:db:d1:db:8b:5d:e5:59:36:3c:1a:d3:
                    bb:59:31:85:ff:f9:ab:a0:36:2c:3b:2f:ed:d7:99:
                    96:90:05:e1:a6:1c:03:33:b8:f9:0a:54:84:b9:e0:
                    28:82:1f:88:d6:c8:9d:10:2d:44:4c:a5:03:48:7c:
                    d2:13:e6:02:e9:8d:bb:eb:95:b6:ea:c5:4e:80:89:
                    56:23:0b:b2:27:30:2f:20:27:0b:63:30:fc:01:05:
                    14:8c:ab:75:c1:97:f7:8e:f6:26:53:a2:b8:2f:a7:
                    1d:2f:69:05:b4:6d:09:2a:f3:9e:83:0b:6b:48:e5:
                    b2:3e:13:53:31:23:b8:32:fe:43:09:64:df:8e:27:
                    f9:09:45:0d:3d:bd:44:2d:70:67:fa:91:66:37:22:
                    7a:49:54:b0:e0:16:6e:fc:37:1e:41:50:e6:39:2b:
                    4f:22:51:70:80:4c:df:dd:a3:f1:ec:25:3d:d3:0a:
                    ca:3b:ae:a9:d1:93:65:46:c5:e0:80:ab:14:42:bd:
                    94:ba:72:95:b3:f1:1f:01:39:26:3e:8c:0b:7b:03:
                    70:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:19:E9:DD:66:B2:BB:75:14:23:2E:44:97:CC:34:AE:06:CB:ED:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5120efc7-4ed4-3cf9-893e-3e2ea25b12b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:40e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f5:61:14:b0:1c:54:0a:4d:bf:42:1c:41:de:27:60:f4:94:
         94:07:01:8b:b6:79:95:90:d5:fb:28:4e:3a:1d:22:45:aa:8f:
         b2:d2:dc:7a:66:62:45:2e:9e:40:35:1f:cb:e1:b7:e2:07:68:
         61:85:e4:e7:00:b5:ac:47:6b:e7:98:6c:01:db:7c:55:98:e3:
         c0:16:a3:db:60:52:7e:21:29:55:59:e3:79:04:77:8b:a6:d3:
         aa:cd:0c:a8:0f:08:aa:f1:1a:1c:36:51:98:4c:3a:d8:4d:93:
         1c:fa:d3:4a:a9:59:ba:22:e5:91:70:42:37:cd:dc:71:98:2c:
         28:e1:f3:df:80:49:00:f7:34:47:b1:58:34:a2:17:cb:84:80:
         15:23:8f:d3:43:05:8e:70:7c:50:cf:e5:ab:0f:54:e5:bd:a5:
         4f:bc:1c:c5:86:c7:da:cc:33:35:6d:e8:80:b3:c0:83:23:04:
         57:a4:3f:ac:49:cd:44:d7:a8:56:a6:ae:13:1e:c1:7c:09:5b:
         9f:5f:74:e5:10:a6:73:a7:3b:85:83:62:35:09:13:8c:70:2c:
         53:03:21:e2:88:39:14:bd:02:8e:6c:54:32:7e:8a:a3:70:32:
         1c:38:52:d1:a0:3e:1d:4e:6d:f2:9f:48:04:42:cc:b5:a1:95:
         44:35:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:48:59 2025 by rpki-client