Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/630e0f61-b914-38d5-a150-69733d5cb6c3.roa
File:                     630e0f61-b914-38d5-a150-69733d5cb6c3.roa (raw, json)
Hash identifier:          cTKRqVKiUOeF/B25bZtsOHu+95GXcHSN3WonW7gynGc=
Subject key identifier:   B1:3D:FE:4E:6C:19:D3:21:2D:8F:40:D8:32:D4:A2:AC:7B:41:1D:FF
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858494039689F3F0E327A4D199500
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/630e0f61-b914-38d5-a150-69733d5cb6c3.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:52a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:68:9f:3f:0e:32:7a:4d:19:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=85c169dd-919e-464e-a182-914b891e1e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:03:8a:d0:ed:71:ff:16:bf:a5:98:30:03:
                    4e:38:ed:c2:e0:ea:cf:19:ae:95:ca:1d:34:ad:bd:
                    3d:14:69:e7:b3:d5:f2:6f:74:ab:64:7d:47:0b:af:
                    16:8f:86:b0:40:d3:bf:c0:20:de:42:64:b4:10:01:
                    be:2c:fa:08:36:d3:4c:23:34:8b:6f:8d:c6:54:f0:
                    68:b4:71:07:08:25:66:96:26:00:c3:9c:7b:69:41:
                    88:64:34:c6:91:9a:cd:77:cb:be:dc:26:5f:f6:3f:
                    a2:9b:28:be:11:60:26:15:25:20:90:03:22:43:cf:
                    c3:1b:26:89:cf:af:74:aa:e1:f3:be:65:fd:16:ba:
                    fd:f9:95:8d:e8:05:21:d7:78:6a:61:af:2e:36:d7:
                    db:d6:41:08:dc:78:70:97:fc:69:ac:f3:b5:ac:01:
                    7e:5e:3d:16:11:0b:98:3b:86:85:57:e7:de:03:0b:
                    9f:9c:92:d7:0f:01:b8:4c:b7:9b:9d:b8:61:62:65:
                    54:89:34:23:74:b5:9f:4b:b5:b3:be:90:3e:8b:a4:
                    20:c7:fa:5d:81:3a:b6:6c:85:47:8f:e8:44:81:46:
                    4f:28:d1:6b:9d:ba:30:cb:74:fe:b0:d2:ec:1f:f4:
                    a7:b6:fa:f7:bd:50:77:4b:c3:7b:c5:74:34:07:47:
                    b1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3D:FE:4E:6C:19:D3:21:2D:8F:40:D8:32:D4:A2:AC:7B:41:1D:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/630e0f61-b914-38d5-a150-69733d5cb6c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:52a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d9:18:43:50:45:db:be:46:80:27:18:ca:a7:77:3e:69:82:
         44:2a:b9:98:e2:8e:34:68:7b:85:dd:f5:dd:25:16:30:bf:74:
         b8:6f:4f:57:0a:4d:24:69:9d:6d:cf:e1:f3:7f:83:d0:49:fc:
         28:21:fe:96:4c:fe:31:90:5c:46:ff:9a:d5:19:d2:cf:2b:eb:
         91:c8:d0:10:81:33:f2:6d:59:b4:fd:a7:89:46:df:42:c1:37:
         d6:5f:36:3d:8a:b1:59:79:14:6f:28:2a:ca:45:0d:00:62:ed:
         90:bf:c4:e8:62:fa:32:46:c0:cc:27:ec:40:3e:57:56:2f:2b:
         fa:79:16:32:9f:16:ab:ef:a8:4a:47:8d:f1:35:01:84:60:af:
         0e:18:c3:79:a3:f5:9b:23:94:1a:50:9b:77:b4:6c:27:d9:1f:
         c1:72:d8:4c:7c:0f:9c:fb:65:0c:88:46:a1:1e:85:4a:15:0b:
         f3:ad:a7:df:15:47:05:f1:a2:c0:46:03:76:a7:f3:3a:b2:09:
         26:e4:92:1c:ad:8c:51:36:5d:5c:b2:4d:06:d0:7c:b8:d8:b8:
         39:77:4f:0a:b7:9d:b9:2a:1d:e2:3b:30:42:b8:90:41:ba:10:
         26:7c:f9:48:be:64:13:4b:47:19:06:7d:a5:67:b6:f3:b9:d2:
         5f:cb:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:14:30 2025 by rpki-client