Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c754d84d-1b10-34ac-8ba3-2088f89c3706.roa
File:                     c754d84d-1b10-34ac-8ba3-2088f89c3706.roa (raw, json)
Hash identifier:          b51l+YAvykRBiTOLqfGuuIS/RpVhZhAKrIwzaa1VTKw=
Subject key identifier:   88:3B:DD:84:82:F8:3C:98:AB:3E:B8:05:90:ED:FF:9E:52:D2:CC:87
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849DF5A78A14C343631B8FB1E62
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c754d84d-1b10-34ac-8ba3-2088f89c3706.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     13335
IP address blocks:        2607:8940:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:78:a1:4c:34:36:31:b8:fb:1e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=fdb0f666-3e11-48bb-bff4-4bcea2db2509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fb:e5:b5:03:af:21:82:94:c3:17:d5:8e:19:
                    c2:b8:85:b3:da:c9:1f:5b:cc:09:48:5c:c3:f7:02:
                    87:3f:39:ee:3e:76:b8:8e:b8:56:73:3a:6d:74:f5:
                    70:fc:60:97:f2:e2:bc:be:33:bc:7a:de:f8:dd:77:
                    7f:7d:c3:75:0d:ed:2b:1a:20:7f:8a:39:fb:f8:50:
                    7e:2c:0f:cb:6c:f5:c9:0e:42:93:03:95:fb:d1:68:
                    65:4c:2a:63:bc:00:65:9c:f0:20:94:2f:91:0e:c9:
                    1d:ac:18:73:48:4d:1f:44:66:8f:d3:ad:92:99:09:
                    97:76:54:df:ee:07:f4:12:47:42:0b:10:39:7f:0b:
                    d1:e6:bf:80:de:d4:cc:75:be:47:d9:6e:17:54:d6:
                    1f:09:59:5d:69:6b:7a:c6:63:dc:4c:e0:c3:0d:f0:
                    54:33:0b:f1:bb:f0:b8:cd:3e:84:09:ce:6f:01:3e:
                    26:6f:e3:b4:2f:d7:d1:09:51:52:fb:c2:15:7a:97:
                    f8:cc:3c:36:ff:35:ea:84:3d:50:2d:c1:a4:c7:ea:
                    1a:74:e9:a2:94:2c:b7:55:a4:d2:a1:47:fa:3c:d0:
                    e4:d6:48:cb:3a:f8:58:30:ac:ee:ff:83:e2:5d:91:
                    98:7e:91:66:71:c5:7a:dc:a8:6a:30:da:8b:a0:29:
                    f2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3B:DD:84:82:F8:3C:98:AB:3E:B8:05:90:ED:FF:9E:52:D2:CC:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c754d84d-1b10-34ac-8ba3-2088f89c3706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e0:9b:5c:e3:54:8d:ff:7e:53:15:54:75:a4:ec:21:5d:13:
         f5:2b:0a:60:e1:13:fe:34:d3:d2:62:94:ae:91:0f:cf:28:d1:
         0a:d6:fe:cc:7c:fa:bb:d2:91:d5:7f:3b:0d:e2:98:58:93:14:
         6f:e4:02:40:be:1a:11:4e:13:56:16:9c:43:07:9a:37:96:c2:
         8d:ad:38:e0:90:82:84:5a:b2:36:c4:98:e6:ae:f3:08:01:c0:
         d9:cf:e8:98:92:9c:9a:5c:49:74:6a:51:85:a0:a0:38:86:e1:
         d9:04:e1:c9:9c:86:b1:2f:21:77:72:0e:9e:ee:db:2c:d3:b5:
         ba:57:1c:b1:35:b0:80:84:29:b9:b2:6d:bc:ef:6f:bc:b8:a8:
         2a:ae:0c:0c:7e:c0:e9:ec:14:b4:b1:74:bb:ff:15:c4:95:62:
         86:79:b5:3a:0f:2b:4e:ca:e5:3b:42:60:a0:b5:da:ba:fd:9e:
         b6:4e:b9:8f:4d:8b:75:de:35:d3:4a:ae:87:16:d4:de:92:21:
         b8:37:e4:d4:f6:71:3b:68:40:39:75:c4:5b:a8:0a:62:f1:3d:
         19:10:3d:9e:1b:5c:eb:c3:9c:de:b1:bb:92:ed:d1:ac:c7:6f:
         c5:67:3d:12:6e:7a:e6:9b:06:2f:1e:cc:fb:7e:37:c6:f2:88:
         c5:0a:03:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:00:10 2025 by rpki-client