Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/63be276a-f236-3e0e-8030-c75791d606a5.roa
File:                     63be276a-f236-3e0e-8030-c75791d606a5.roa (raw, json)
Hash identifier:          q/QzmAoSPy5B33ERH7c1xO3PcSeyy1lRwjzQioPoaTI=
Subject key identifier:   2D:56:99:AC:51:FC:F2:10:1E:CC:C9:F9:C2:43:77:85:E4:17:2F:00
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584A1F903EC4CA4137E15D602380
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/63be276a-f236-3e0e-8030-c75791d606a5.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     54113
IP address blocks:        2607:8940:5390::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:3e:c4:ca:41:37:e1:5d:60:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=6ebd985e-587a-4ed9-9cfa-97dfd8518ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f1:6f:7d:46:af:4c:55:50:ad:43:3f:9f:13:
                    6b:0b:1e:ec:02:b6:e6:68:61:6f:2a:15:60:cb:7b:
                    14:e6:1c:31:d4:5d:69:fe:e8:fe:3c:2b:3e:b7:d6:
                    47:68:10:5b:57:8e:9f:eb:3e:65:fa:b7:2f:33:d9:
                    da:43:06:6c:48:8d:a3:50:ca:db:43:99:80:c6:00:
                    8d:7b:7a:3d:64:3a:fa:97:5b:2d:49:ff:7c:8b:73:
                    4e:09:84:0f:61:46:79:a5:e4:30:42:05:fa:e0:6a:
                    9e:c0:f4:b9:26:2f:dd:64:a9:c6:6b:28:3c:06:e1:
                    b5:89:0d:f3:22:19:b3:fb:b2:98:42:23:8c:73:00:
                    b4:ae:55:ff:2f:35:5d:07:b8:4b:09:89:02:6e:f1:
                    d0:17:76:f8:f9:09:90:3e:29:ee:cc:c9:03:30:f3:
                    28:37:30:45:8d:f1:92:f1:75:28:6a:5d:a3:c4:e3:
                    ca:bd:6b:c2:2e:27:2f:f1:85:80:04:4e:97:94:70:
                    7b:81:62:c0:32:57:72:4b:1a:f8:fc:79:cb:8b:32:
                    9e:f6:02:35:38:38:96:af:be:2d:c0:f5:67:81:19:
                    ed:6d:40:97:12:b5:1a:ea:9c:ee:8c:32:78:61:48:
                    78:b1:19:6f:76:02:ff:95:ff:db:53:52:47:dc:f2:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:56:99:AC:51:FC:F2:10:1E:CC:C9:F9:C2:43:77:85:E4:17:2F:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/63be276a-f236-3e0e-8030-c75791d606a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5390::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ff:86:cc:7f:51:80:a2:fd:19:b4:0c:d8:1a:7a:b4:93:f8:
         50:dc:a7:a8:1f:20:d9:a0:29:79:d0:13:81:67:67:c6:17:94:
         9a:3d:dc:7e:5c:a6:f0:11:fa:d7:2e:94:8b:6b:bb:c4:8c:ff:
         ac:75:e6:8c:29:e8:e1:a2:ca:c7:8a:8a:76:c1:15:cd:6d:85:
         9e:04:19:c1:32:5c:d3:ae:a8:0b:81:c0:85:85:47:66:e0:df:
         e2:3d:3e:e0:8a:c2:0e:fe:bb:96:6f:ec:c1:ce:69:59:ac:9a:
         39:5a:48:37:dc:b9:04:a1:91:e7:64:89:e4:c2:ef:15:d7:5c:
         b4:55:77:95:57:c1:9f:0c:59:92:b2:f9:2c:b8:84:86:04:3a:
         d1:bf:60:b7:63:bd:ba:93:6a:18:7a:83:2b:2e:c8:56:3f:f6:
         58:75:c9:ce:0a:5b:6d:8e:4b:be:da:0d:29:18:77:c0:b3:5f:
         b0:e3:39:7a:07:1d:eb:f6:31:6e:d3:21:da:cb:d7:7a:d3:9d:
         96:5c:3d:c0:57:41:ef:59:97:26:ea:9c:33:8b:21:b1:10:11:
         97:1e:df:50:a6:bc:7b:20:ff:41:b7:99:2d:90:01:5e:d6:2e:
         37:20:a8:e7:9b:11:40:6b:96:18:cd:38:7c:2f:8a:83:ff:0b:
         c7:87:fd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:14:52 2025 by rpki-client