Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/63b6e79f-a791-32da-a8e7-6d5a37d9644a.roa
File:                     63b6e79f-a791-32da-a8e7-6d5a37d9644a.roa (raw, json)
Hash identifier:          MSwJg3+AixfIwC9iDhHBs93+j4PBpCIt1g9yCaRju7o=
Subject key identifier:   6B:E6:C1:4F:36:CA:41:A0:21:0B:E2:7C:BD:89:18:D6:AF:C9:73:46
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F9033BE1B360F4C62582500
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/63b6e79f-a791-32da-a8e7-6d5a37d9644a.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:5970::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:33:be:1b:36:0f:4c:62:58:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=52c96461-37e1-4ea4-9ecf-99c3459f5f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:67:9c:39:52:a0:71:4c:9e:a1:d1:00:85:56:
                    d9:01:40:1f:3d:44:8a:27:14:99:f3:30:88:2e:71:
                    e3:5c:48:2c:0c:50:04:80:37:b3:bc:69:69:68:c4:
                    2b:6d:63:7b:65:9d:71:47:4d:ca:bb:fe:c8:5e:04:
                    62:ca:36:6b:ca:30:72:08:f2:71:6b:78:bc:20:cc:
                    ef:f2:a3:f4:26:0f:1c:c4:91:63:b8:db:8d:2b:3f:
                    65:3f:e4:e6:b9:51:62:29:d7:83:5e:63:04:11:c6:
                    80:bb:53:70:f2:ef:5c:35:6d:51:3d:ec:a0:48:78:
                    7d:06:65:cf:04:b1:9e:69:23:ae:32:d6:41:d6:78:
                    fa:bd:3f:21:6b:34:53:4c:71:d7:95:63:f6:9a:ce:
                    35:fe:21:b8:05:2c:2d:ff:50:8b:f1:0e:a2:14:bf:
                    e8:d2:d8:b0:cb:22:61:ff:ac:4d:ef:48:68:a4:a9:
                    61:de:f4:fd:fd:bc:84:b2:98:a7:7b:e0:84:5a:5c:
                    28:d2:db:cd:ad:40:26:12:01:2d:98:5f:c0:80:38:
                    5a:de:2e:6e:3c:ba:8c:9e:0c:ac:88:e0:d0:98:c6:
                    8b:6c:d2:24:29:93:81:98:9a:0d:00:4d:df:7e:b1:
                    09:fe:cd:8d:ef:d4:3c:2a:3e:01:fc:8e:af:cb:dc:
                    68:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E6:C1:4F:36:CA:41:A0:21:0B:E2:7C:BD:89:18:D6:AF:C9:73:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/63b6e79f-a791-32da-a8e7-6d5a37d9644a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5970::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:78:2b:6c:b3:0c:dc:34:3c:43:db:ae:8d:1a:c5:27:79:f3:
         da:2c:63:ec:b1:92:5c:a2:3f:27:3f:86:31:70:a0:63:9f:ee:
         8b:7d:b9:08:1e:2d:b8:d0:ee:2b:1f:2c:46:91:ca:65:6c:3f:
         b9:fa:34:59:c7:eb:b8:c9:55:3d:b3:b0:40:15:c8:a6:c3:1e:
         a3:fc:bd:09:26:ab:bb:12:99:4e:35:ef:e3:ea:58:63:c7:e4:
         0a:96:2b:86:25:19:0c:23:70:a4:04:85:eb:2b:ee:8e:cb:4e:
         58:02:30:45:ee:c8:7c:34:03:e6:d5:52:6f:49:a5:3f:a2:36:
         65:51:23:31:18:9e:54:3c:39:f3:bb:71:11:f4:43:f6:74:58:
         18:30:ee:32:5c:f6:93:1b:4e:3c:18:27:13:e4:de:9b:b1:28:
         d0:ae:3d:60:ac:be:20:ae:7f:f7:11:c2:89:d1:fe:c6:57:5a:
         74:a4:c9:df:fe:ec:2d:a6:b1:05:2d:f9:28:24:2f:a9:d6:04:
         59:1d:90:b2:cc:20:24:05:71:53:c0:75:21:74:79:1a:af:8c:
         93:b6:1a:cb:bd:81:9b:d1:90:ce:68:78:d2:f7:25:bd:e5:8c:
         ed:ee:b0:36:5b:0d:df:bd:ff:86:fa:ec:30:c2:7e:c0:d4:9f:
         4f:3a:77:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:48:30 2025 by rpki-client