Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c2edbca4-def2-3c08-96ab-8fcf024b8009.roa
File:                     c2edbca4-def2-3c08-96ab-8fcf024b8009.roa (raw, json)
Hash identifier:          4xUhP37XNJAy3xEi8K1VGIJfTfA8hcx2eh/0/0/sNEg=
Subject key identifier:   78:EC:BC:72:9A:22:E5:5A:AC:E7:65:F1:43:84:AF:3C:F7:75:C1:FB
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F90447567B7FB2BA2B20410
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c2edbca4-def2-3c08-96ab-8fcf024b8009.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:4360::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:44:75:67:b7:fb:2b:a2:b2:04:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=7340caaf-2b53-4977-8c4f-ee92cd5f645f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:85:b0:d6:5f:7c:d0:2a:13:3e:4d:de:6f:24:
                    28:96:72:42:d9:15:70:1a:77:3f:7f:13:9b:56:6a:
                    e1:fc:5a:8b:27:f4:91:b5:09:29:5e:04:a6:88:7b:
                    58:fc:40:6c:1f:78:dc:76:7c:33:d1:81:4d:d5:7d:
                    e7:f5:af:88:29:ab:bd:d9:3f:c0:1b:96:d0:79:69:
                    9a:9f:49:ec:ea:f1:58:ca:78:6c:3b:d4:da:c9:37:
                    da:18:a2:5c:8e:56:6b:ee:7b:a5:89:0b:24:79:ab:
                    4a:11:82:62:05:b5:8f:0a:e0:65:eb:75:e5:df:35:
                    a9:00:55:e0:39:25:b8:fc:62:0a:28:6c:1f:27:f7:
                    ab:7e:ae:e7:11:eb:6b:ad:9c:c2:d7:e6:02:60:ca:
                    fe:5e:c5:d4:42:ca:9c:fd:66:fe:14:8d:30:27:e1:
                    49:22:16:3b:6d:03:a9:14:17:21:ac:d9:fc:67:07:
                    eb:fa:03:bf:f0:c5:b4:37:c8:93:a7:10:08:46:24:
                    0d:98:10:89:80:83:6c:13:20:32:16:b4:ed:99:03:
                    70:a9:e7:1f:71:2e:10:61:8c:53:0d:c8:8f:b2:f8:
                    cd:09:0d:e7:f1:c9:03:f4:33:52:5a:aa:8b:79:2e:
                    0b:e3:99:69:ec:4b:af:87:52:01:c8:4e:12:fe:25:
                    c0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EC:BC:72:9A:22:E5:5A:AC:E7:65:F1:43:84:AF:3C:F7:75:C1:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c2edbca4-def2-3c08-96ab-8fcf024b8009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4360::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:19:ad:cc:32:f6:0a:4a:ce:97:ab:19:de:56:d0:2b:2b:ce:
         3d:ca:00:d6:a8:b0:c9:78:37:24:c2:c9:c2:99:84:de:47:22:
         91:1d:9b:ed:d8:f0:35:8d:06:d5:ef:03:b6:20:87:23:4c:d4:
         e9:d0:22:66:8b:fc:e4:b8:50:a2:ab:95:dd:b3:c6:3d:85:3b:
         28:40:ef:a8:03:75:3f:17:3a:43:ed:24:f2:3b:ff:0f:17:70:
         e2:12:b4:cc:f9:84:5b:f3:48:24:b9:d0:c4:bf:1b:4e:c9:9a:
         c6:4d:68:75:99:78:85:f8:7b:a6:de:58:50:0f:90:c0:c6:3b:
         aa:c8:6f:60:b1:35:a9:76:52:0d:9c:aa:d1:4c:7d:f8:db:26:
         34:4e:42:0f:ee:42:c0:a2:ff:76:f8:d0:86:f5:39:ed:36:43:
         60:0a:b3:cb:09:24:16:be:a9:93:92:31:d1:4a:f7:28:48:6b:
         9d:5f:be:ca:85:30:98:a6:d7:f3:71:ae:45:a9:3d:2a:3f:d4:
         0c:c3:d1:ed:63:9c:53:a4:2d:c8:e6:27:b5:3b:54:40:f4:e1:
         81:45:4f:89:0d:3b:0c:c4:3a:02:f0:cb:60:f9:ea:eb:c1:cf:
         f0:9d:f7:04:ef:07:b4:23:ae:bf:7a:0c:97:f8:05:b4:5e:3e:
         b5:79:0e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:22:39 2025 by rpki-client