Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5235497c-5bd3-33af-b5f2-694ae5c778e3.roa
File:                     5235497c-5bd3-33af-b5f2-694ae5c778e3.roa (raw, json)
Hash identifier:          wSGuJcQs/q6Slgpyb06ZdJEKBs5gg7OUkbYJ69v4WQU=
Subject key identifier:   D4:EF:63:11:C9:1E:6D:40:7E:78:F7:28:AB:90:02:DB:8F:E1:92:BD
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F90271E0F01AEC8E0752CC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5235497c-5bd3-33af-b5f2-694ae5c778e3.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:5650::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:27:1e:0f:01:ae:c8:e0:75:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=9952946f-d991-450a-8ee6-15837a3a0fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:48:33:f0:08:d9:c0:64:5e:6c:58:92:47:c6:
                    ab:45:f9:03:0b:ec:29:d2:b7:e3:9c:81:69:62:04:
                    a3:03:69:04:8b:85:97:c0:11:e4:7e:c2:90:54:c1:
                    df:20:c8:b8:33:d6:d6:1d:00:1d:be:0c:91:1d:9f:
                    5e:5d:98:b1:24:f0:d1:e9:02:93:18:ff:49:8e:92:
                    31:e2:3c:0c:2e:5f:b0:c6:67:a7:1a:d2:c2:9f:a4:
                    1b:c7:e0:b2:58:b4:f7:dc:fa:65:e7:4e:ea:08:ec:
                    a4:84:5e:22:db:31:23:c2:dd:fa:89:1d:28:23:9c:
                    bd:13:bb:18:06:8c:bf:5f:01:c2:b6:bf:ca:93:ef:
                    38:53:9b:08:60:3e:06:54:40:a1:52:ed:ae:41:c0:
                    44:ec:3a:dd:ab:4f:85:06:54:e2:c1:7a:d6:d6:3d:
                    ed:f0:80:56:5e:35:40:52:49:3b:29:43:7f:74:bc:
                    a6:e4:c2:50:cd:03:84:10:24:f3:b5:97:9b:99:65:
                    97:24:d2:03:34:6c:6a:f0:79:48:c9:b0:59:45:94:
                    6b:ba:cb:30:6e:70:4b:eb:5d:83:de:73:45:f0:8f:
                    08:cd:f2:26:5f:1b:62:a8:5e:9e:08:fe:17:20:ee:
                    02:ca:72:a6:b7:5a:9e:7b:81:4a:29:83:1a:8e:04:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EF:63:11:C9:1E:6D:40:7E:78:F7:28:AB:90:02:DB:8F:E1:92:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5235497c-5bd3-33af-b5f2-694ae5c778e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5650::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:08:a1:27:17:6f:b6:67:47:e8:0e:5d:1f:68:9e:9f:73:0a:
         e9:7f:7b:8f:4b:4d:da:3a:e0:08:8f:54:e2:46:fe:00:33:ac:
         06:66:16:d4:e6:71:7c:a6:3d:b5:38:27:57:18:c2:ca:86:5a:
         2f:85:ff:09:3e:6d:8b:6a:a5:ef:77:98:da:91:f7:e0:8a:e3:
         b6:a2:00:6e:63:ce:4c:47:5f:37:9b:c9:8f:1d:83:30:e6:66:
         4f:b2:ba:49:27:f0:49:b1:6f:3d:33:c8:7f:50:30:86:28:81:
         c1:65:77:65:f1:64:2e:47:eb:5a:76:8a:90:3b:d5:3b:07:97:
         72:e8:bb:71:f2:4f:34:3a:b4:90:d6:a2:cb:29:97:d4:6a:ca:
         9d:1c:89:be:bf:d8:36:33:3a:8b:1a:6f:16:26:47:b7:46:97:
         56:42:94:4f:aa:23:6a:ea:56:ff:59:b4:02:2f:ee:1e:68:04:
         58:b4:ad:a9:40:09:96:8a:2e:9a:bf:3c:21:7b:30:13:f6:81:
         5f:bb:c8:f9:1e:08:c0:a0:0f:9b:15:af:d1:59:f4:65:67:88:
         6a:87:b5:31:1a:96:70:90:3d:fe:65:2c:64:10:51:5b:a3:a3:
         42:01:4b:0b:48:df:d0:67:13:0b:4a:d4:71:ab:c7:37:79:b5:
         7c:05:12:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 04:16:00 2025 by rpki-client