Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bdf0c36b-7fce-3201-b4ee-22ba0b749904.roa
File:                     bdf0c36b-7fce-3201-b4ee-22ba0b749904.roa (raw, json)
Hash identifier:          FpEs1Aic1jL7XUCkM4wkFoFv7K0ePR1GR0mqfXEcv5o=
Subject key identifier:   6C:9F:81:EE:85:AD:2C:26:78:7F:94:6D:12:91:E8:19:50:9D:8B:29
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F90389A2E4E359CF07C45C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bdf0c36b-7fce-3201-b4ee-22ba0b749904.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:57f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:38:9a:2e:4e:35:9c:f0:7c:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=1cc78584-5224-4c83-8a88-bde6b1b9e090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:53:34:32:c0:46:80:b1:f1:8f:02:7e:c8:f9:
                    a7:bc:2e:1b:d5:44:14:4f:c3:17:d3:92:90:35:94:
                    1a:1e:bc:34:91:73:4a:70:ff:44:d2:56:3a:20:29:
                    0b:34:40:ed:87:b9:57:ae:d0:55:3f:a2:ee:c0:57:
                    d8:79:05:9f:7b:3b:ba:31:cb:02:75:1e:23:9f:66:
                    ee:f7:2d:47:77:89:22:b0:5b:4d:3e:bc:5b:e9:34:
                    96:49:37:a2:82:e7:7e:94:06:17:fd:61:cf:83:4e:
                    ff:e5:fb:f8:75:08:4a:85:43:9f:03:75:66:33:ce:
                    1d:31:be:72:48:06:71:92:c6:7a:b0:b3:2e:a8:3e:
                    87:d4:66:6a:bd:28:21:86:35:20:10:20:57:30:a4:
                    99:82:a7:a3:2d:68:f7:f6:fd:d0:2a:31:50:11:30:
                    23:99:f4:40:d1:4a:0e:08:f7:42:ee:52:9b:ef:82:
                    dc:6d:80:dc:62:af:8a:63:24:09:36:d2:29:8b:42:
                    9c:b7:f4:fd:e5:62:ba:6e:80:cd:df:2d:5a:79:17:
                    76:ae:a1:71:80:e9:66:b7:8e:47:58:a9:42:84:a5:
                    84:44:8c:f4:72:9b:5e:88:3e:e8:3a:d5:4b:27:07:
                    d8:0a:bc:07:e1:1a:6e:38:68:cc:81:78:a5:58:63:
                    fd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9F:81:EE:85:AD:2C:26:78:7F:94:6D:12:91:E8:19:50:9D:8B:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bdf0c36b-7fce-3201-b4ee-22ba0b749904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:57f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:54:65:2e:96:b7:58:1d:45:ec:99:b4:8e:0c:01:34:34:ef:
         24:75:a5:a9:28:2a:e5:e9:89:8d:3c:23:11:40:6f:e3:c9:62:
         89:96:1d:20:48:c0:2f:df:c8:01:a8:1c:f8:f8:e3:8a:e3:16:
         5d:3a:93:31:c5:67:f9:12:aa:f5:fb:3f:a9:29:bd:f1:68:cb:
         93:3b:16:f4:93:38:99:b3:15:8a:fe:c6:1b:2b:4e:03:1e:31:
         82:ea:9f:03:6e:01:78:26:fd:5a:41:88:a3:83:a8:12:db:a5:
         5a:a4:df:a3:4e:94:ac:c0:ba:a3:a5:d4:fb:35:1e:f8:fd:1b:
         15:b6:ce:92:fd:86:a0:70:4f:07:16:b2:e1:5e:38:62:21:91:
         45:6f:03:7f:87:5d:5a:60:65:80:78:72:56:d9:b1:12:d8:ef:
         5f:a5:37:fd:90:ed:06:16:65:a6:32:c5:cf:64:6d:67:46:99:
         c6:8e:57:2d:af:67:b6:ce:50:6c:94:41:4c:1e:63:28:fc:f2:
         2c:1d:c7:ca:3e:49:ca:58:8c:10:ee:0b:6c:7d:be:11:9b:20:
         6d:54:a2:f7:65:ff:39:e9:8a:e5:7c:b7:0c:db:c8:a7:e3:8e:
         f9:63:c6:75:88:14:a9:a0:8d:fc:f5:05:d3:fa:53:ca:89:a0:
         75:c4:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:19:57 2025 by rpki-client