Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9db0b486-468f-3751-b791-a82bf7394505.roa
File:                     9db0b486-468f-3751-b791-a82bf7394505.roa (raw, json)
Hash identifier:          qtW4UuxckgW32GXllobDRZfVbIbJikz/zWj3eA0azwI=
Subject key identifier:   19:5D:F0:F3:A5:66:72:B3:90:CE:EC:85:C4:F1:12:BA:C2:53:CA:CE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F902DB8E26F068FE220DF00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9db0b486-468f-3751-b791-a82bf7394505.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:46c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:2d:b8:e2:6f:06:8f:e2:20:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=de7dd86c-ea16-4a94-8d59-3e13babb82b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fd:6f:98:03:41:99:0d:c5:05:a6:f8:7e:ab:
                    62:bc:74:e1:86:1e:4f:70:3a:5f:e2:9b:dc:b7:c3:
                    b8:eb:32:a8:76:66:7e:4a:70:29:ae:0c:73:3d:7c:
                    36:f3:b5:a6:90:0a:69:e8:97:2b:a7:70:7b:2f:24:
                    29:9d:e7:67:d6:46:19:e3:1c:30:f8:b2:7e:3d:d5:
                    00:d0:1a:e0:52:0a:11:74:3f:bd:81:77:0e:6b:9a:
                    75:2c:e0:2b:75:65:05:50:4d:3d:76:d8:c5:96:39:
                    6d:2c:0d:aa:a7:7f:4d:16:a8:81:47:2a:8e:42:3b:
                    9b:7e:7c:9a:6f:ec:a2:89:72:1c:d3:bb:e6:b3:28:
                    1f:95:e6:5e:f5:c3:9c:c7:7f:26:4f:d5:cd:10:23:
                    a7:62:1a:88:9d:7e:6b:18:b0:9b:db:63:a5:07:d3:
                    3f:bb:9a:59:70:0a:28:9f:e9:f9:cb:e1:d8:8a:b4:
                    91:8c:5c:d3:35:c3:00:16:6c:8f:27:b3:eb:c8:8f:
                    16:23:83:63:b9:38:b3:f5:2b:6f:d6:6e:cf:63:c3:
                    b0:34:0b:dc:69:1b:6a:b3:a0:19:7e:6a:d9:b8:c2:
                    13:8e:72:e4:1c:bc:ba:05:c4:d7:0c:5e:ff:dc:2c:
                    f6:76:d2:78:6b:5e:02:4f:79:a8:f5:dd:8e:6e:2a:
                    81:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5D:F0:F3:A5:66:72:B3:90:CE:EC:85:C4:F1:12:BA:C2:53:CA:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9db0b486-468f-3751-b791-a82bf7394505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:46c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:fc:af:23:42:27:69:cf:e1:65:05:a6:0b:f5:17:f0:fb:71:
         48:3e:cd:13:dd:ed:83:10:82:dc:fc:a9:93:60:a1:1e:35:54:
         e7:4e:4e:90:34:56:90:d9:bc:50:83:7d:59:19:ae:46:01:63:
         3d:75:a4:66:e3:99:25:fd:ff:fd:30:c5:73:ef:f5:a6:c4:19:
         bf:09:df:ce:60:35:8f:e6:6d:b3:6a:df:25:72:4c:2b:37:4d:
         aa:68:88:9c:0e:26:ca:f3:a4:ca:03:12:22:01:79:51:02:97:
         1f:1f:83:c8:bc:bb:b8:61:15:fd:a2:6b:d8:8c:2d:2b:84:38:
         bb:66:d3:bc:8a:5a:a2:57:20:d5:69:b5:a4:b8:16:43:8e:7c:
         df:b9:ec:b8:03:f6:8d:26:48:37:c3:f7:52:8a:1e:98:c4:6e:
         94:de:ff:65:fc:84:58:c2:4f:57:f6:e1:f6:fa:4e:89:6d:c1:
         eb:fa:96:bc:15:7a:f7:3f:56:21:63:50:8a:eb:07:73:2d:55:
         e4:df:1e:5d:17:4e:63:15:c6:cb:78:00:7c:8d:93:12:d4:d3:
         89:e9:6c:52:e4:bd:31:ce:3e:be:3d:82:f3:d9:1d:d6:3a:18:
         ce:ee:01:98:9e:2d:cc:5e:81:ef:29:69:f5:0e:a4:6c:0c:59:
         bf:1b:86:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:35:25 2025 by rpki-client