Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f0ac017-0777-3c6f-a720-542813987a34.roa
File:                     9f0ac017-0777-3c6f-a720-542813987a34.roa (raw, json)
Hash identifier:          6u3+u7o54lhCgDdrR4DRJM0YiTIt5fBQb9rW8FFq54c=
Subject key identifier:   C7:7B:90:E0:51:14:CE:31:62:05:4D:B5:98:CF:7E:18:00:44:97:5A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F903B7E27950704E0122200
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f0ac017-0777-3c6f-a720-542813987a34.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:59e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:3b:7e:27:95:07:04:e0:12:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=c2899ce3-ee5f-491d-9306-cf6ae6116c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:8b:b4:45:a4:6d:34:57:7a:59:4b:1f:ad:
                    47:97:f2:5e:89:96:72:fb:ef:e4:c5:b5:61:52:e1:
                    c2:ce:8e:26:b6:f5:e4:34:fe:39:2d:b2:64:5c:02:
                    ff:d0:d8:05:82:41:e9:55:82:b0:85:0c:8c:47:62:
                    ac:8e:96:8c:e8:87:53:72:66:44:6b:ac:d0:fb:dd:
                    9b:b0:3f:3d:a2:a2:cb:4b:4e:57:8e:b1:c6:8a:4e:
                    a0:f6:68:59:02:10:8d:a0:d6:c8:af:7f:cc:ed:5f:
                    ed:e9:ea:67:67:94:1a:6b:12:e6:39:e4:0a:ac:94:
                    7d:08:8e:9b:dc:5e:28:28:7a:1a:a8:ac:e9:c5:20:
                    93:3f:b9:84:a0:5c:8a:1e:df:62:6e:8f:e5:3e:3f:
                    9d:94:95:92:09:65:a8:56:57:8a:e5:bb:63:fb:d5:
                    9a:ab:c9:40:b0:3b:6f:8c:a6:37:26:2c:ed:c7:79:
                    f1:c6:7f:d9:e8:b5:ed:b0:c9:9e:eb:68:b3:73:2a:
                    3b:89:eb:a3:f2:12:8d:1a:36:53:76:9d:14:d3:77:
                    c3:f1:ee:5f:04:5e:4a:47:7c:71:2e:5f:2c:f3:d1:
                    30:d1:2f:67:96:30:e4:4a:e6:88:8a:30:57:af:af:
                    07:e3:ed:b6:2d:fe:56:08:d8:8e:a8:9b:d1:99:61:
                    ff:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7B:90:E0:51:14:CE:31:62:05:4D:B5:98:CF:7E:18:00:44:97:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f0ac017-0777-3c6f-a720-542813987a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:59e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:45:10:27:3c:20:e4:63:9c:a0:c9:af:04:0c:d6:4e:91:0f:
         ec:88:db:00:c3:e4:cb:95:3c:1b:61:93:53:92:a0:a7:10:49:
         79:aa:44:45:60:cc:71:2a:60:4e:1e:6c:08:2f:3f:41:ef:37:
         55:dc:cb:1d:51:74:95:a9:5a:82:82:b2:04:dc:5d:06:6c:13:
         10:08:ba:65:d5:b3:8e:2c:bb:36:2c:16:5c:63:f4:22:bd:2b:
         1f:4d:7c:e7:b5:44:72:4d:eb:7a:4f:6f:13:de:88:b6:62:c7:
         3d:78:e4:d2:81:04:67:9c:63:f5:f7:99:d2:f2:0a:85:18:a5:
         87:92:2b:a1:ca:63:bc:63:49:76:f2:87:8c:99:2a:51:7d:35:
         9c:22:31:42:ac:d5:90:33:7f:6e:65:16:43:a2:64:b5:44:63:
         e1:23:14:fd:f9:53:61:fc:1e:b0:51:0c:f2:3e:2c:31:20:f7:
         8a:75:70:17:80:d6:06:a2:33:ba:78:c2:48:9b:5c:73:d9:2f:
         a0:8d:b2:0a:6f:2f:8f:23:76:73:73:ea:a7:bc:cb:1b:0c:16:
         c2:fa:9b:4f:00:9b:97:43:a9:fd:37:5b:ab:30:9f:2d:0e:2c:
         a1:6e:e5:e7:0b:92:41:c1:2d:fe:cf:8b:45:47:b3:2e:92:9c:
         07:ef:25:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:31:49 2025 by rpki-client