Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d39d4fb6-6b30-3d36-827e-d1da454f43fb.roa
File:                     d39d4fb6-6b30-3d36-827e-d1da454f43fb.roa (raw, json)
Hash identifier:          evgIWdOKxSBR/d9rrIg7AAJqGJEt1NFKbl6sn3HnWMM=
Subject key identifier:   13:A0:3D:02:75:A3:2C:78:D6:D8:AD:BE:FC:7E:B4:49:F4:03:28:35
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F9033DBE5120172AA438D40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d39d4fb6-6b30-3d36-827e-d1da454f43fb.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:5af0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:33:db:e5:12:01:72:aa:43:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=98280fe1-bb19-428f-9de4-c24fbbeb3637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:69:fa:ed:98:6f:ad:23:37:f9:f9:22:3d:08:
                    1f:74:de:d2:5f:44:30:25:66:72:bd:c8:13:99:7e:
                    e0:e1:9a:9a:88:ec:bf:e8:87:66:1d:eb:df:a1:3d:
                    99:79:e7:65:ec:50:c7:a9:99:f2:66:97:3f:e6:e7:
                    5b:93:25:67:8b:1f:b8:0e:3f:ed:d1:12:7b:e7:ef:
                    6b:60:18:73:24:25:7a:24:15:b6:30:5d:0c:d9:37:
                    f8:8a:51:63:2d:95:ca:21:b4:44:36:e1:99:20:61:
                    d4:cd:f2:d0:ab:d4:ae:25:f8:cb:46:eb:97:3e:7d:
                    54:8b:1a:a1:c7:ef:92:c5:13:c5:29:b1:28:f1:3e:
                    ad:10:f1:dd:ea:3b:13:d8:2d:10:88:16:10:89:4c:
                    85:6d:3d:d1:30:86:89:b4:a3:b3:da:2a:bc:28:25:
                    40:6f:d5:d6:76:9a:e7:58:08:3b:21:82:15:6b:ba:
                    3c:2c:42:7a:8d:a5:8b:2d:ae:86:46:71:ff:d4:f3:
                    1e:25:b1:81:63:27:c5:10:39:51:a7:21:5f:7d:23:
                    29:12:44:4e:e6:13:98:9d:49:00:2d:45:26:84:f9:
                    ec:67:18:83:49:d8:0c:e8:76:fd:f6:a7:9f:1b:d5:
                    3a:bc:a9:fd:d8:69:1b:e9:1f:bd:e8:3c:e5:54:6c:
                    d3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A0:3D:02:75:A3:2C:78:D6:D8:AD:BE:FC:7E:B4:49:F4:03:28:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d39d4fb6-6b30-3d36-827e-d1da454f43fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5af0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:f4:ba:5c:e9:40:90:d8:cc:1e:f4:d5:8d:90:66:0e:f5:f6:
         e8:44:78:d1:a2:fd:e1:6e:9c:f8:e8:ad:a7:e2:ec:c6:42:61:
         93:c3:f8:18:b3:58:ef:3e:c2:d5:9f:cd:7f:b2:1a:c0:15:4e:
         e1:62:f4:5a:5b:a8:df:43:c3:06:cf:ab:4f:59:bb:47:08:61:
         d6:15:05:0b:9b:07:c8:c9:e1:6d:db:65:77:6b:20:61:8f:a0:
         17:d5:6d:75:d6:ef:ca:0d:c5:31:b8:83:9f:3e:14:c5:48:43:
         53:4f:e0:cc:24:2d:37:01:fd:a6:38:88:92:8d:61:b5:f1:7c:
         a2:b7:81:dd:bc:9c:d1:aa:3a:a7:04:46:84:63:cb:d7:84:f1:
         18:52:b4:36:52:ac:49:10:b3:c4:c1:d2:f2:1d:20:c8:3f:85:
         82:70:6d:d5:4c:57:dd:a3:5e:6d:1a:92:7c:a3:e5:c2:d6:e5:
         72:18:cb:fd:86:8d:37:7c:4b:d2:f2:6f:39:67:56:68:76:3a:
         27:b0:3e:ab:c9:f2:4c:0e:0f:53:2f:f0:d6:27:51:d7:72:1a:
         6c:f3:70:f7:9d:82:b7:bd:64:e8:57:5b:fd:01:bf:43:7b:65:
         0b:31:81:f2:e4:13:05:9e:7e:a7:30:79:3e:b9:18:ea:6c:4e:
         d0:e4:8f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:30:32 2025 by rpki-client