Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e2d9b155-cb69-3fb9-889e-efdaa475f920.roa
File:                     e2d9b155-cb69-3fb9-889e-efdaa475f920.roa (raw, json)
Hash identifier:          cbeaFQaHYvVYsZZZ+wsMuIIEE4QAKB77/Yb7AtmKZfo=
Subject key identifier:   98:32:E9:85:C0:60:6C:43:31:75:2C:BD:07:EF:BE:4A:AE:5E:04:7F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858494039700E92C1383130560880
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e2d9b155-cb69-3fb9-889e-efdaa475f920.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     54113
IP address blocks:        2607:8940:48c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:70:0e:92:c1:38:31:30:56:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=4711e860-3084-4d08-81e3-899b2bed11b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e8:d0:b0:7c:a9:56:1a:b0:51:77:c8:c9:88:
                    82:bb:e6:67:39:54:f4:ba:70:89:07:f7:1f:76:75:
                    7f:18:01:09:2a:c9:f3:19:9f:96:0b:81:0e:53:f7:
                    a3:37:34:36:12:44:52:1e:4f:55:b7:b7:6e:aa:8c:
                    ec:7e:5a:f5:64:55:50:80:e4:14:5b:fe:d4:9a:1c:
                    02:b9:29:b0:45:36:3c:e8:0f:9b:ec:98:10:a0:48:
                    44:bf:e6:14:c6:cc:85:e3:d6:fe:59:aa:07:d5:dc:
                    d9:10:e9:c3:26:4a:53:9a:b7:47:6e:38:4e:f2:ad:
                    b3:8b:3a:ad:72:d6:99:4b:57:0f:c7:f9:60:a1:cb:
                    62:d2:5e:cc:a6:e3:7d:ed:cf:60:2b:6d:cd:ec:ba:
                    c8:f6:d0:f1:b1:23:39:6f:1f:71:fa:64:ed:3f:eb:
                    6f:34:19:a4:bf:31:7d:f7:80:ec:ab:d3:7b:10:82:
                    09:c9:4d:bd:f0:30:60:a2:2b:82:d9:2b:0c:75:ca:
                    c5:46:59:96:0d:92:7b:97:bf:2d:c0:ef:b1:70:81:
                    12:a5:47:4f:45:39:85:cf:25:3d:f3:92:87:16:cb:
                    c6:ef:e6:c8:1c:19:b6:e0:1d:8d:64:13:93:7e:6c:
                    7e:8c:c5:12:04:4a:f7:81:47:d6:31:b9:dd:d3:f0:
                    86:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:32:E9:85:C0:60:6C:43:31:75:2C:BD:07:EF:BE:4A:AE:5E:04:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e2d9b155-cb69-3fb9-889e-efdaa475f920.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:48c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:27:9e:2e:17:51:67:d9:bd:ab:d6:bc:d3:6f:e0:06:8a:3a:
         28:53:f7:36:0c:57:bf:6f:86:4d:d9:57:b0:ef:37:a0:8b:c8:
         63:ee:c2:d4:66:5f:0f:10:96:b5:52:29:83:a8:da:a1:8c:f1:
         f9:eb:38:2b:a8:89:7b:50:f5:db:d4:80:f3:50:31:ac:b0:68:
         18:04:39:94:8c:88:a3:66:9d:62:27:d2:fe:3c:6e:3d:85:5d:
         b0:ac:35:f4:d5:f4:2f:2b:03:e7:31:9b:03:a3:cf:32:2e:74:
         2e:cf:4a:8c:7f:c3:da:5c:13:7b:33:06:ab:e9:db:fa:4b:d5:
         a2:bb:30:40:e8:1f:fc:38:e6:2b:e2:e9:fb:2f:8b:1f:15:ea:
         7d:c2:2e:fc:0d:7e:e3:75:b6:28:68:97:bd:2e:48:ed:7d:25:
         92:e8:8e:f7:5f:1f:46:3b:ba:43:2f:e4:39:c4:c8:60:86:7f:
         59:95:47:09:18:45:c0:b0:df:e4:4d:5f:12:c2:80:73:2f:5e:
         ae:86:f7:a9:e6:7f:19:77:36:2c:9a:f8:e0:0a:9a:96:f3:d3:
         06:9c:ba:ad:4d:ad:c4:78:8a:cc:9b:72:28:92:e3:64:44:fc:
         c0:2b:15:6d:b4:6f:95:50:26:bf:38:1f:3d:f7:fc:97:9d:b6:
         95:60:25:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:18:14 2025 by rpki-client