Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfe7aad6-45ee-357a-b2c2-a35535fa6947.roa
File:                     bfe7aad6-45ee-357a-b2c2-a35535fa6947.roa (raw, json)
Hash identifier:          hi/MYzLM6fopy7nO3Ykd2uh/r1Bciuh0zqenIok2lyE=
Subject key identifier:   4D:3E:C9:AA:51:25:C8:50:84:D2:4A:23:1B:D9:3B:D8:10:8C:BD:2A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F90481F48F7DBEF0A6D1F00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfe7aad6-45ee-357a-b2c2-a35535fa6947.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:5560::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:48:1f:48:f7:db:ef:0a:6d:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=09191b8e-7207-495a-9c1c-79eb07c12bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:91:a0:4b:88:51:85:17:9e:4f:f0:86:65:
                    5b:5e:7d:76:44:3f:91:39:5a:88:69:a6:ae:bf:51:
                    67:33:5a:bb:35:79:aa:f8:29:78:24:5d:12:ab:ae:
                    2a:b1:75:26:b0:4e:d4:e9:70:16:60:01:4d:eb:11:
                    3c:3e:16:1e:22:5f:da:84:92:6b:83:67:e2:dd:3e:
                    52:2b:b3:b8:ef:7d:b8:4c:61:86:dd:a0:75:8c:00:
                    3a:42:c6:eb:90:0d:b4:31:ef:cb:42:e2:06:c5:b3:
                    55:5d:e4:b2:02:84:47:c8:25:02:ac:ec:a7:07:52:
                    51:c7:2b:b6:66:a4:82:97:90:c5:97:36:2a:a9:b8:
                    95:ef:bc:cf:63:8b:53:d0:60:ad:1d:4e:e3:c1:76:
                    24:2a:54:e1:bd:37:43:88:0b:ab:a1:3f:42:d5:9d:
                    ab:4c:d1:03:88:2b:f9:2f:b5:fb:f1:72:a9:9f:f7:
                    74:3c:6a:c4:17:a1:5a:d4:b0:74:ab:3b:0b:5e:22:
                    64:73:76:d2:23:6e:84:01:36:c5:3e:e2:53:cb:0f:
                    41:0f:3e:97:2f:0d:ec:91:2c:e1:86:78:58:46:9a:
                    fd:83:51:c9:bb:61:12:f6:b2:42:a8:f1:0f:16:46:
                    98:af:6e:1e:35:2a:3a:94:19:9b:a2:7b:44:47:73:
                    ca:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3E:C9:AA:51:25:C8:50:84:D2:4A:23:1B:D9:3B:D8:10:8C:BD:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfe7aad6-45ee-357a-b2c2-a35535fa6947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5560::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:45:e4:89:e2:45:1e:88:52:7e:57:2f:77:2b:fe:39:d8:ad:
         f6:8e:20:78:37:b5:34:63:62:a9:cb:0f:2a:76:d9:cc:49:be:
         67:13:4c:11:1b:5a:be:a5:6f:dc:d2:fe:fd:3e:4f:73:b0:1e:
         98:d3:8a:8e:5e:d1:15:1d:e7:80:e6:55:89:ae:c0:60:e9:76:
         de:05:96:b4:43:9b:77:5c:ff:cd:e5:67:c2:96:50:6e:65:78:
         7a:26:0b:fc:82:fc:4c:18:3d:42:50:47:05:2a:40:fe:b0:db:
         5b:77:fd:3a:cc:98:f6:24:25:c2:0e:76:7b:c4:ec:fc:cc:15:
         4e:ff:de:64:0a:71:b6:80:ee:e8:ea:1a:5b:47:25:0f:fe:30:
         a5:24:1b:a8:15:ae:70:6b:30:62:e7:c6:9e:00:1c:17:07:57:
         c7:8d:f1:80:ea:b4:51:3f:f0:32:62:2e:86:b1:c7:8b:6a:c5:
         3c:fd:d8:da:d4:ca:0b:21:56:b3:4b:7a:02:49:5f:78:5c:8c:
         46:14:b2:81:11:3b:83:7f:4d:23:48:1e:d6:2e:e9:b3:35:5d:
         53:22:f6:c1:5b:11:e6:11:1f:be:37:a6:db:25:58:96:2c:83:
         29:c7:a3:6b:d6:fd:7d:cd:12:72:13:a4:dd:9a:d6:9a:48:e0:
         9b:65:d7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:24:16 2025 by rpki-client