Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8ea0a336-c5ee-365d-afa4-b570e27d7e96.roa
File:                     8ea0a336-c5ee-365d-afa4-b570e27d7e96.roa (raw, json)
Hash identifier:          1anPAw6BW8wKxUyxGYZrdFwWJtU5wl/Ah3137TxtAwk=
Subject key identifier:   53:A3:8B:51:B0:7C:0A:D2:C1:45:67:65:4F:C5:0F:36:67:C2:9A:41
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F903D3314F1B7079803A750
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8ea0a336-c5ee-365d-afa4-b570e27d7e96.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:41a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:3d:33:14:f1:b7:07:98:03:a7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=dbdba6f1-80a3-4255-b2f6-361d7b8e1659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:da:85:2e:25:65:33:95:fa:03:de:30:b9:2a:
                    7c:26:f9:df:64:4d:51:12:60:c0:45:41:eb:f8:0d:
                    d7:63:15:22:d2:54:15:50:b0:4e:c2:e8:72:a9:1c:
                    bc:26:08:ca:a0:dd:2a:dd:ad:6e:3a:9d:02:2f:da:
                    32:1f:6c:b2:62:0a:5e:fc:40:e8:9e:4f:63:0e:b7:
                    a9:30:56:84:a7:2a:71:f7:cb:99:ae:41:f3:33:ec:
                    16:70:9b:02:cb:cf:05:50:4c:a7:7b:69:52:74:74:
                    66:16:a3:d3:04:77:e6:ff:04:e4:b6:eb:f6:f4:0c:
                    e6:74:76:cd:b3:5a:0b:0b:47:b9:75:bc:82:a4:6e:
                    82:42:7e:2d:97:21:78:7a:26:4b:ca:3b:79:01:27:
                    fb:1d:f8:2d:39:56:38:53:d8:29:b0:c6:72:6b:4c:
                    e4:84:34:aa:dc:d0:60:d5:e5:25:2f:b7:9c:8f:4a:
                    b2:18:9d:04:fc:6a:78:8f:63:df:f9:71:19:81:95:
                    14:7d:78:4a:3d:9e:f0:c4:2e:3a:96:9a:65:cb:7b:
                    45:c1:ab:de:76:fb:4b:a7:3c:76:ab:97:20:2f:a4:
                    e3:54:e6:21:d8:e5:4e:fc:d4:02:f0:9a:cd:07:63:
                    3a:ec:3c:ee:2e:d5:6d:eb:d3:33:89:0f:32:81:03:
                    83:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A3:8B:51:B0:7C:0A:D2:C1:45:67:65:4F:C5:0F:36:67:C2:9A:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8ea0a336-c5ee-365d-afa4-b570e27d7e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:41a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:14:13:a3:94:d6:d2:15:63:2a:08:31:c8:91:e0:e5:64:8c:
         56:e3:15:a2:34:3f:57:c4:2c:c1:29:d3:2e:04:ba:79:ff:bf:
         99:94:8e:07:37:18:7f:8d:13:24:b5:98:19:de:39:8c:ce:71:
         ed:6d:e6:ba:cd:ca:68:c3:f9:8c:f9:38:75:d4:ab:79:d8:f0:
         de:9e:bb:34:79:8e:03:c3:ee:97:00:66:f8:57:32:98:3b:98:
         31:54:a1:8a:d4:e4:49:8a:fc:66:45:ed:dc:4b:30:ce:50:ea:
         8b:06:3c:b3:39:2b:01:4e:b3:65:02:21:0b:81:e0:93:56:b4:
         64:17:62:1b:94:cb:cf:4c:c1:7b:fa:8c:01:2a:a2:0b:d9:0c:
         4e:28:bd:6e:b1:be:20:ff:85:82:4b:34:d5:06:16:b8:ec:f7:
         3f:3b:db:f7:31:79:22:3f:5e:09:52:ed:d5:56:a8:0a:6a:96:
         a9:45:b9:a5:19:a3:6a:39:28:89:fd:fa:96:73:65:e8:ec:fb:
         ea:70:d9:14:55:49:6b:23:99:59:9d:06:32:26:0b:2a:b4:46:
         a1:20:62:f9:e3:62:d5:dc:7d:5d:50:12:f6:2b:a9:29:72:1e:
         1f:cb:88:0d:01:f7:97:96:fe:53:6a:33:dd:09:8b:e1:fd:7e:
         45:48:74:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:36:05 2025 by rpki-client