Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d3da5cb6-a987-365e-afaa-3e638cedde55.roa
File:                     d3da5cb6-a987-365e-afaa-3e638cedde55.roa (raw, json)
Hash identifier:          MTMnIfJhT0BAfLIwoMkAcQLhuF9vxy4Up+qZZUCuZ7Q=
Subject key identifier:   A8:FC:B0:62:9A:98:3B:96:C4:2C:09:0B:B7:01:15:9E:AD:C0:C1:0D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F902DAA3B55A866161110E0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d3da5cb6-a987-365e-afaa-3e638cedde55.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:4630::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:2d:aa:3b:55:a8:66:16:11:10:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=00ac7d9d-9f06-47ca-8b23-79363e2edc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:99:f2:e9:a5:ab:56:4f:ea:be:18:de:1c:
                    a7:e8:19:19:fe:17:69:93:b5:4a:80:a4:33:24:83:
                    31:4c:79:92:15:00:d6:23:dc:13:22:2b:d1:11:c2:
                    cb:c0:cf:0a:67:5b:6c:d2:4c:18:21:92:be:1c:a4:
                    f9:d5:ee:2c:1b:7c:cd:25:5e:c9:fe:5e:fc:95:67:
                    89:c5:e5:78:67:a9:ab:ef:e5:39:1d:1d:b5:9d:f9:
                    23:c9:1d:fb:54:27:e4:e2:e6:d2:11:b9:5c:cc:0c:
                    1b:a7:d5:6d:e6:26:d9:6e:4f:38:c9:4c:c4:bb:aa:
                    49:47:4e:26:7c:71:03:2f:8b:c1:6a:d4:c3:cd:c1:
                    f6:9a:41:1d:24:2f:93:eb:74:1f:af:52:81:6c:95:
                    7e:c4:ce:41:7c:4b:9e:2d:34:c2:8b:68:aa:04:1b:
                    15:58:c2:69:65:a1:bd:e2:14:42:45:11:60:8d:de:
                    16:ac:4a:19:85:cd:7d:aa:cc:01:2a:a4:09:8c:31:
                    3e:b8:c6:5f:cf:1c:7d:78:7d:36:b1:b8:24:c4:fb:
                    8c:9c:b8:62:75:8b:41:b3:22:c9:e4:b9:75:cc:07:
                    83:c7:40:c9:fe:cc:c1:59:15:05:3c:6c:45:81:d9:
                    84:ba:ee:5d:8b:f7:fd:1a:27:98:ad:82:35:1c:17:
                    0f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FC:B0:62:9A:98:3B:96:C4:2C:09:0B:B7:01:15:9E:AD:C0:C1:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d3da5cb6-a987-365e-afaa-3e638cedde55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4630::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:1d:5f:6b:de:58:f9:c5:9c:d8:41:29:51:0f:7e:16:1c:74:
         6e:b3:79:2b:27:27:27:61:6d:3e:0c:26:2c:4e:e1:77:cc:4b:
         96:39:8b:f8:b0:3f:25:fd:6b:af:d5:c9:17:5e:cf:67:05:81:
         7c:96:28:3a:b2:24:fa:9e:8a:58:f1:55:45:2e:49:c3:24:8b:
         1b:9c:81:1f:f3:97:76:11:64:63:9e:86:6e:d8:16:67:cc:43:
         c7:b6:d6:e1:93:77:00:f0:87:3b:30:d8:36:02:e7:2e:8b:29:
         1a:0d:3d:8c:8b:4a:42:bd:27:49:12:77:08:76:96:68:a8:fc:
         01:ec:88:3a:7b:b1:5e:ff:5e:6f:13:b5:70:88:8b:67:44:69:
         7e:a1:c7:11:b3:a1:57:eb:33:2e:7c:a6:85:76:9b:13:7d:9e:
         cd:61:8c:36:9e:cd:40:c6:73:7f:5a:ef:6c:e1:d6:c3:79:bf:
         01:40:12:28:f9:d4:7c:88:49:4b:50:a4:8b:70:5b:e9:ab:e4:
         a3:5a:b2:c0:92:97:57:54:60:11:9e:b4:e8:1c:cc:8e:08:09:
         59:ee:82:7b:6c:a8:56:5d:bc:2d:ec:e2:a2:8f:c2:13:c3:f1:
         a4:e8:5c:f1:80:d1:2e:26:b2:03:61:c6:ff:e5:5d:e5:92:c8:
         1a:dd:cb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:17:57 2025 by rpki-client