Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/18b89b3d-6094-3c7d-b4c4-b1260d112bed.roa
File:                     18b89b3d-6094-3c7d-b4c4-b1260d112bed.roa (raw, json)
Hash identifier:          NRW2l5+6ox5sXyLEUCZM1Fk6aXEiVDBIXrjtfrPy2XE=
Subject key identifier:   D1:3B:96:CD:62:EC:30:EB:58:D6:8B:E4:27:33:16:A9:A3:C3:21:B6
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11ACCE2A68B5D40509173CC
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/18b89b3d-6094-3c7d-b4c4-b1260d112bed.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:54e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:cc:e2:a6:8b:5d:40:50:91:73:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=c77a8f85-ddb1-4dee-bd3b-1e5717293d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:50:ae:b6:31:2a:99:52:b0:74:f4:d8:a7:89:
                    ca:6d:4e:69:69:88:74:59:df:45:b4:17:b0:ef:b3:
                    1b:88:77:52:12:68:38:a2:6a:78:d6:d4:f2:08:64:
                    de:b4:65:97:fa:aa:bf:40:09:30:11:5a:0b:e3:41:
                    70:11:ff:33:65:f8:76:9f:6f:a4:79:b2:e9:41:5d:
                    b2:41:33:a5:2c:e0:9e:30:a6:7b:95:14:dd:67:9e:
                    48:cb:57:a5:63:59:a2:58:23:ec:16:39:81:88:c8:
                    3e:21:ca:fa:ee:af:e4:d9:15:2b:40:cd:3a:72:d9:
                    8a:9b:0e:29:ae:9f:69:a6:ac:e6:b3:e2:a6:b0:8c:
                    9d:13:f1:f9:e7:08:c3:f2:c4:e0:43:c9:2d:32:1c:
                    75:46:61:5f:cd:c0:53:c1:8e:24:d0:ef:c6:7f:c1:
                    b0:42:37:a9:57:19:75:52:69:ae:b4:c0:c9:7e:30:
                    bf:1e:ef:e5:73:d4:10:8c:71:8c:21:58:49:9c:31:
                    33:9e:af:5e:54:23:19:c4:9b:1f:84:f1:72:04:69:
                    40:f4:7b:78:cc:5d:ed:12:29:6d:44:e8:0d:d1:28:
                    49:ab:c6:df:1b:d7:5e:8e:ba:52:52:e5:ea:63:37:
                    75:78:78:74:fc:03:fe:bc:56:56:ee:e4:b3:6d:5f:
                    8a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3B:96:CD:62:EC:30:EB:58:D6:8B:E4:27:33:16:A9:A3:C3:21:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/18b89b3d-6094-3c7d-b4c4-b1260d112bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:54e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:5f:52:ee:ec:cc:8f:55:dd:56:ce:57:37:53:47:e6:d2:9a:
         54:49:05:8b:5b:ec:52:b0:02:1b:f1:8c:06:01:37:fb:37:75:
         f8:fd:c6:7c:ec:ba:e0:2b:d5:d8:1d:b8:b1:cb:54:f4:4b:79:
         4e:81:7b:b7:46:03:c0:57:03:85:bb:e6:30:3c:ef:61:fb:14:
         3f:2a:a0:d5:65:20:7f:52:b9:cc:90:28:b7:54:45:4f:5b:ee:
         3c:bb:14:70:d6:40:63:86:2b:c2:36:12:ac:ac:93:f3:ff:60:
         dd:69:61:0e:13:47:bd:24:33:83:d4:d8:08:04:b2:29:07:6e:
         e5:f6:c7:34:1b:bb:c3:73:1a:d4:3d:cb:2c:b7:a6:fe:90:e7:
         7a:fa:99:2f:65:f5:a6:35:10:67:16:d2:a6:ed:17:64:13:f7:
         a0:7e:75:4c:04:1e:17:13:ef:b4:7b:9b:c7:83:a0:76:eb:9b:
         e7:7b:85:63:5a:c9:f7:e4:b6:58:22:24:48:a2:e7:6b:01:ad:
         95:41:a4:76:96:20:46:28:b3:6a:7f:93:ac:9a:1a:0a:3c:22:
         ac:b2:a5:8c:3e:ca:0f:85:a4:e1:6a:c2:d1:a0:62:a7:10:c3:
         9e:0e:0b:a2:a9:7d:cb:6f:14:5f:d1:2a:8b:b0:24:a7:55:2e:
         11:94:3c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:45:23 2026 by rpki-client