Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa
File:                     4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa (raw, json)
Hash identifier:          op8vXjSFn+2fv2DUng/Nj+6iLbu2jLTBL9WM2FNO7Zg=
Subject key identifier:   22:9E:21:28:26:59:75:D1:B9:D0:31:FC:F6:84:52:FB:8A:E4:95:04
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F902C3C52C51A52C84530C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:4890::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:2c:3c:52:c5:1a:52:c8:45:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=99f8c469-3f5e-43fa-b448-e86c862c60bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:18:b8:9e:80:e1:4b:14:74:0e:29:df:69:c4:
                    80:65:9c:e6:cf:25:d9:52:18:b9:b0:10:28:69:33:
                    34:61:6a:c7:a6:57:07:be:53:76:2d:5a:f1:db:ad:
                    50:d0:8c:16:28:5c:ad:8c:0c:6a:7b:26:33:a3:fc:
                    50:1c:02:44:96:0b:72:3c:c6:47:1a:a7:0f:1c:28:
                    47:d5:dd:f4:e0:71:c8:f7:07:34:45:02:61:68:15:
                    6d:cf:69:b2:17:43:83:a3:33:24:42:ed:32:4e:db:
                    97:30:69:c6:22:2d:29:0f:f3:6d:f6:86:c1:3f:b9:
                    0f:ea:5a:63:a9:3f:14:5a:04:87:6b:74:45:47:60:
                    de:d1:5d:3c:5a:bc:86:9f:de:68:70:92:2f:01:0d:
                    29:5c:d7:5e:d9:40:d0:27:cc:45:4c:e4:d1:d7:28:
                    18:9e:9c:ef:30:b3:91:eb:75:5e:d2:4a:7a:e4:eb:
                    47:b7:41:9a:3c:60:55:d4:4e:3c:48:69:b6:b8:18:
                    30:2c:65:59:4d:98:c0:f8:12:b3:e9:8b:8c:d0:bd:
                    ff:1b:7f:a3:cf:28:26:6c:80:e8:aa:c2:a7:ed:49:
                    dd:11:a2:dc:6a:45:b3:20:e2:3d:6d:d6:12:49:43:
                    63:f8:67:f2:dc:a1:86:55:1c:0c:30:e1:c9:c3:3d:
                    82:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9E:21:28:26:59:75:D1:B9:D0:31:FC:F6:84:52:FB:8A:E4:95:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4890::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:2d:2a:de:ac:58:ce:87:7e:a7:5a:c5:a7:ac:bc:b0:75:2b:
         7c:64:32:a1:92:9f:89:e8:36:25:f2:7b:04:21:0f:54:39:1d:
         de:77:f3:8b:c6:30:e5:27:f9:70:37:9a:38:c8:c6:fa:aa:0b:
         a6:a4:de:89:43:2e:92:8c:24:b6:35:6e:88:5c:f6:a3:b8:0e:
         c7:fa:f4:3b:62:1f:47:fd:1c:0a:c2:65:a0:a0:1f:af:ad:fb:
         75:7d:f5:ba:d8:1b:8a:cf:ff:35:e7:09:6d:6a:1a:fc:7e:13:
         90:5e:8f:e0:55:cd:5b:9b:0d:06:f4:6f:e2:87:6e:11:3f:70:
         37:b0:27:08:b8:97:5c:52:19:f1:2e:56:1d:52:1f:46:7a:1a:
         f4:14:d8:85:28:bf:00:7a:d0:d7:0a:fd:42:5e:b5:e6:4d:07:
         ee:70:d3:6d:97:3c:24:76:88:37:01:08:14:97:79:59:a2:d3:
         47:68:75:f2:ae:ba:04:29:8a:dd:36:0c:ab:75:21:61:ec:a4:
         53:db:4b:67:22:94:11:10:45:fc:94:06:51:a5:b3:5d:8e:de:
         b0:25:54:d8:00:ff:81:81:58:f9:c9:40:f0:56:cb:de:49:5f:
         67:26:87:5f:87:ad:cf:a9:c9:2e:28:08:86:49:05:d6:0c:77:
         65:fe:4c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:39:35 2025 by rpki-client