Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a2202de2-2aea-3fb9-8c47-c0d09ba47560.roa
File:                     a2202de2-2aea-3fb9-8c47-c0d09ba47560.roa (raw, json)
Hash identifier:          bErKyT7h4wOjehrppkPARUMLQO0faGPV3Hzb1947+Xw=
Subject key identifier:   FD:91:6E:64:19:06:FE:CF:6E:DE:69:24:52:EF:7C:ED:4E:62:23:60
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F90390EBF15D0E0C4322280
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a2202de2-2aea-3fb9-8c47-c0d09ba47560.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:5ce0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:39:0e:bf:15:d0:e0:c4:32:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=2fd7af39-98c4-4636-8979-914b3bf80da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4f:1d:7e:43:5b:ee:a2:09:1b:21:c1:6c:be:
                    38:2c:b3:bd:80:7a:09:d9:99:67:78:93:b1:5b:10:
                    75:03:b1:16:c5:19:64:c8:9e:d8:60:4b:9e:7d:35:
                    ae:13:d7:a5:ca:b4:1f:30:19:bd:ad:4f:a8:36:92:
                    69:45:db:1e:1d:6d:95:38:b5:c6:8b:c2:e7:e9:95:
                    b1:a4:98:37:99:88:8c:39:54:a8:3e:0b:82:20:22:
                    2c:79:9e:61:94:84:8b:db:76:d1:06:16:3e:46:d1:
                    4a:ea:23:21:72:f5:4d:7b:27:bf:cb:93:f7:03:79:
                    a1:f1:9b:38:7d:45:05:bb:06:76:67:e9:d7:09:b8:
                    c7:76:97:55:36:82:03:e9:71:6a:4a:4f:25:89:3e:
                    45:9c:67:e0:64:59:fc:c6:a6:49:cb:8b:e1:a5:38:
                    4f:f2:8c:fb:3e:9f:d1:72:62:13:61:67:ff:65:9a:
                    a6:0a:74:11:84:3d:dc:a1:3c:1b:8a:de:23:56:c6:
                    3e:f6:9b:d5:b2:38:ba:c9:4e:8f:77:82:ee:4c:d5:
                    75:b9:5d:8a:5b:23:3b:7c:d9:d5:19:1d:43:ed:1d:
                    d6:2d:1b:29:cb:08:bc:a6:2e:ff:4d:ed:8a:65:78:
                    01:b4:e7:aa:ad:06:d2:1f:76:00:84:f6:44:69:ba:
                    b7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:91:6E:64:19:06:FE:CF:6E:DE:69:24:52:EF:7C:ED:4E:62:23:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a2202de2-2aea-3fb9-8c47-c0d09ba47560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5ce0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:7d:5c:59:c1:77:27:43:ab:69:b0:3f:bf:0d:ad:c5:d3:3a:
         6e:b6:ee:57:80:fb:db:02:4f:2f:ae:23:cd:43:34:8f:8e:32:
         fa:b2:59:b3:37:57:ab:37:dc:67:c7:01:60:8f:ca:1e:71:5c:
         4b:0d:e6:3b:a1:09:6a:e4:28:1b:5a:bc:90:e1:10:7f:4c:7d:
         fd:4a:03:ed:c1:39:f5:db:e8:a6:29:de:78:c5:b3:a6:54:2f:
         d3:e8:ab:63:1e:0d:3e:c3:ba:ae:ba:ca:1c:39:d7:84:9a:f6:
         11:b9:eb:5a:f7:e7:28:c5:bf:1f:d8:8b:6e:92:88:f5:cd:ce:
         71:76:2c:32:fe:14:7f:5d:6c:92:32:fb:fc:ff:e1:85:dc:ff:
         71:ca:45:75:f5:36:a2:4b:95:a9:22:be:8e:71:ae:77:c7:11:
         e8:df:95:e3:cc:21:45:74:aa:d9:f2:20:10:48:e7:c0:91:6c:
         70:04:7f:b5:19:ee:d0:1d:8a:a4:de:34:7f:b4:dc:55:1b:c1:
         d5:e0:f5:0a:47:a8:fd:52:14:f5:19:93:20:19:10:0b:9e:97:
         6c:87:e1:04:9b:71:94:12:61:d3:b1:58:5d:ac:14:3b:07:2e:
         57:41:21:52:a6:90:57:5a:88:af:4a:0f:eb:c4:f5:93:a3:58:
         71:cb:75:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:24:06 2025 by rpki-client