Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b1d77ec0-b144-37ca-ae89-ec35678126ad.roa
File:                     b1d77ec0-b144-37ca-ae89-ec35678126ad.roa (raw, json)
Hash identifier:          kFYmERJptFFBJNqm0gz1CRPNOGTKZSgoH1qM1LQCgJw=
Subject key identifier:   27:2F:3F:4C:1C:5B:B5:FB:77:4D:A1:C2:A2:F0:0F:D1:99:AF:12:BE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F90392E369C51EFB5492780
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b1d77ec0-b144-37ca-ae89-ec35678126ad.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:5d70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:39:2e:36:9c:51:ef:b5:49:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=81bc2041-ce44-45b1-bf37-f401bafce569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d9:04:1a:b4:57:5d:0b:39:0e:aa:61:02:c6:
                    71:7d:4b:f0:78:28:ff:38:28:39:2d:06:49:36:da:
                    9e:36:d3:bd:2d:34:58:ee:51:be:6b:42:63:02:7e:
                    7e:a3:0c:e0:70:fd:3d:c9:d8:f4:36:65:9f:fb:e4:
                    c1:90:a9:d4:ed:bc:8c:97:4e:ee:f7:30:65:65:7e:
                    9c:a5:41:fa:76:10:96:90:7f:3c:a1:51:9f:33:10:
                    d6:f6:f9:8d:bc:e9:b3:52:9d:3b:7e:c0:b7:41:6c:
                    11:61:cc:3a:07:4e:40:81:0a:c2:8b:4b:0d:a2:4c:
                    02:26:b2:79:e8:8c:4f:9b:30:95:49:68:e6:d0:c8:
                    35:36:3b:ca:45:d5:90:d2:a8:cf:46:c8:62:3e:b2:
                    20:40:f3:a7:8c:78:a6:40:71:ca:b5:72:bf:13:3b:
                    a4:18:07:ff:fe:8a:d6:2e:34:05:63:df:6d:eb:c6:
                    30:52:f1:fc:f0:65:2d:47:14:8c:b9:a3:de:fb:b5:
                    0e:ba:0b:b7:08:8f:0a:2f:28:c6:5c:0d:00:82:b5:
                    5b:4a:1b:ed:7d:8e:37:8f:7d:b5:07:ed:08:7b:1d:
                    a6:7b:66:3c:b1:c4:5e:92:66:a7:8a:25:47:c1:24:
                    8e:0c:8e:49:99:5d:c2:0b:33:e5:61:b8:e9:88:ee:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2F:3F:4C:1C:5B:B5:FB:77:4D:A1:C2:A2:F0:0F:D1:99:AF:12:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b1d77ec0-b144-37ca-ae89-ec35678126ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5d70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:bd:2b:78:2e:10:bd:5d:1b:f0:80:1f:8f:24:9b:d8:d8:e3:
         f8:e0:1a:bd:f9:8a:73:3e:6d:db:6a:ef:32:b6:53:44:4c:00:
         b8:6c:f9:47:89:53:32:67:3d:34:de:09:8b:5a:4d:54:b5:11:
         c0:10:58:da:7d:34:99:b8:c5:46:5c:99:84:25:21:37:d5:6d:
         76:7e:c6:4e:de:cf:f3:59:47:b8:0d:f9:8c:d1:3e:2d:d1:0d:
         32:7b:04:d7:52:d4:39:5c:b1:da:eb:e6:a8:a8:90:32:e1:a3:
         48:a0:ae:76:2a:f8:5e:a0:a8:f7:cd:4f:43:c0:22:ae:8c:16:
         82:6a:c2:1a:56:76:d5:dd:9f:dd:85:31:51:cf:ee:31:10:fa:
         8c:d6:ce:d2:e7:7e:70:86:e9:b8:92:c8:d9:c0:65:a1:e3:07:
         40:24:e2:51:f6:f8:4f:29:33:42:58:f3:47:b8:d9:27:38:93:
         31:5a:50:28:85:21:b4:71:ff:02:80:b1:c5:3c:9b:a6:6e:96:
         3b:c2:a4:36:ec:ce:14:d4:84:f4:cd:eb:95:31:01:18:cf:f5:
         2a:65:d5:fa:9c:cb:54:21:95:dc:c3:11:af:14:59:88:bc:13:
         0e:0f:98:33:13:1a:5e:cb:88:25:78:3f:c1:2a:55:86:44:60:
         9f:43:e7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:08:30 2025 by rpki-client