Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/984814c1-accd-3500-a3df-f7f9ea656d23.roa
File:                     984814c1-accd-3500-a3df-f7f9ea656d23.roa (raw, json)
Hash identifier:          i6C5FGH+JHEdfIGNju5xFLAOBy6VAFtNyr2Wl/jS9mQ=
Subject key identifier:   C9:A4:8C:09:C7:A1:37:CE:7E:39:8F:14:87:5C:7F:44:A2:8F:D7:0B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F9035EA4504A077764FF140
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/984814c1-accd-3500-a3df-f7f9ea656d23.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:5870::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:35:ea:45:04:a0:77:76:4f:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=bbbeacb0-264f-4279-ade5-f5885356eec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bf:06:5d:fb:f6:f9:7d:54:cc:59:f0:5c:86:
                    59:e3:d2:74:68:e7:81:5f:03:ab:8b:b0:4c:da:ce:
                    da:27:a9:d7:31:fd:64:04:f8:51:f2:15:b9:89:f8:
                    7f:65:31:5c:93:f5:18:44:aa:3c:ca:e0:fd:4c:5d:
                    20:7f:34:43:58:25:a2:30:09:1c:b3:48:2f:93:65:
                    4c:15:82:4f:2b:71:55:cd:4c:ff:01:c8:1c:bf:cb:
                    6a:8f:47:b5:c9:2e:9b:9d:46:7c:36:5e:e4:3f:69:
                    bc:2e:2f:e8:50:17:52:d9:de:7c:65:b3:91:9e:f2:
                    5b:64:d3:a5:ae:ef:77:e8:fd:ea:99:c2:2f:d9:de:
                    e2:85:6a:c0:ce:24:d5:fe:92:1d:a7:50:6e:34:fb:
                    de:11:2a:d7:cb:06:5c:0c:c0:45:98:26:b8:e1:b6:
                    11:89:6c:6b:0b:12:39:35:6b:9f:d5:83:7a:80:ac:
                    be:6f:03:65:1c:94:90:fb:1a:e3:ca:bf:e3:55:8e:
                    22:67:ee:af:ee:6c:9b:1d:4f:47:cd:f6:72:10:1e:
                    d8:67:e1:6c:d0:2f:c8:29:62:f8:bf:04:d2:52:83:
                    40:95:0e:65:98:83:5f:c0:33:9c:40:ae:ea:df:c9:
                    23:a8:fd:4b:d9:2c:dd:62:cd:f4:f6:a1:0e:05:07:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A4:8C:09:C7:A1:37:CE:7E:39:8F:14:87:5C:7F:44:A2:8F:D7:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/984814c1-accd-3500-a3df-f7f9ea656d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5870::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d9:18:f8:3a:93:5c:99:55:f3:cc:bd:03:f8:72:09:a6:da:
         fb:c4:29:08:c8:32:6f:71:bd:d8:a5:e0:0e:a1:58:95:79:65:
         9b:1d:05:fe:42:16:3c:5f:0f:71:e7:4a:36:59:b0:da:b8:57:
         29:4b:89:34:79:43:41:b0:0a:cc:2f:8b:2e:85:58:d9:32:a5:
         e5:24:21:26:b8:f3:46:c7:37:fb:ff:4d:69:30:aa:e7:32:b0:
         42:dc:3c:41:a3:27:cd:65:04:55:7b:b7:99:2a:dc:12:7d:dd:
         d8:ce:2f:b9:5f:ed:ba:a7:71:6c:9a:c7:69:c5:12:50:19:6e:
         1b:ae:93:db:d1:37:b9:b7:6b:27:d6:cb:e8:e5:a6:8f:c6:c7:
         db:85:91:47:f6:ae:e2:6e:fb:89:5c:7e:99:22:1e:fe:93:b4:
         6f:07:47:f9:c4:05:5b:a7:06:bc:7d:80:38:cc:01:b1:20:66:
         16:22:a2:81:76:5f:3a:eb:03:66:bc:82:aa:de:29:a9:06:d1:
         b1:c2:22:e4:16:56:64:43:d6:d4:96:66:40:08:42:73:27:41:
         90:2d:e4:eb:1e:b2:2a:f8:4c:b0:90:9d:c0:5a:2f:19:97:70:
         76:9a:ac:00:f5:30:0c:22:84:28:c9:49:ac:c7:e8:75:b5:ed:
         ca:0c:95:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:22:28 2025 by rpki-client