Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/24b573c7-74d0-3139-9833-b0e402409050.roa
File:                     24b573c7-74d0-3139-9833-b0e402409050.roa (raw, json)
Hash identifier:          5lV6T/fwdR6sHGnabJnpXGGqb70e2zldi0cKb+t7/O0=
Subject key identifier:   EF:EC:70:D2:93:DF:7E:48:84:14:4F:6F:08:BC:DF:5D:EB:3E:60:25
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11AD1DEC5FA55A3A5B6E5C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/24b573c7-74d0-3139-9833-b0e402409050.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:4330::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:d1:de:c5:fa:55:a3:a5:b6:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=33da87a1-9f28-4c49-9b8e-d0dbb77a6ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:b4:21:e5:2b:a4:21:fc:7f:15:42:3e:f6:
                    41:db:96:ff:c6:d7:a2:83:a1:94:31:b5:36:66:b1:
                    3c:61:8a:be:cc:de:20:42:2b:4f:2a:92:96:b1:ab:
                    19:e5:e8:75:03:d8:90:16:64:03:ee:62:4e:49:e1:
                    cf:4d:c6:38:f9:6f:d3:c7:bb:4b:a1:fa:68:db:19:
                    c4:2f:c5:cd:5d:c1:a6:14:91:21:7f:9d:3b:1d:c8:
                    02:5f:df:10:89:f1:90:a5:32:f3:6e:38:2b:6d:9a:
                    09:8d:03:97:09:b6:53:77:8c:c4:a6:3b:03:36:3a:
                    03:c1:a6:20:32:88:ed:e0:99:1b:89:61:1c:ff:84:
                    0a:08:53:c9:8a:e7:64:4a:32:ca:a1:a3:a4:d6:19:
                    02:34:2f:ed:a4:2a:de:7d:a6:37:75:78:ce:50:3f:
                    a8:f1:d1:69:f0:23:e0:a4:a9:e6:48:b6:62:2e:af:
                    f3:61:f0:ca:8a:c1:eb:9c:4a:88:16:65:c4:86:a6:
                    14:bf:76:c9:9a:ab:04:6d:27:ff:57:00:81:ae:5f:
                    92:ac:3b:b7:b4:3d:51:1f:1e:c1:b0:f6:77:33:45:
                    05:43:e9:e8:da:fc:41:b2:13:7b:01:cc:71:d6:d7:
                    17:b0:44:73:e9:9d:6a:2b:a7:b7:0f:5e:3e:a0:f2:
                    47:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EC:70:D2:93:DF:7E:48:84:14:4F:6F:08:BC:DF:5D:EB:3E:60:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/24b573c7-74d0-3139-9833-b0e402409050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4330::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:42:43:d8:01:e0:56:84:b2:f0:ff:02:c7:3b:70:b6:9b:17:
         3a:88:da:f5:d3:2e:cf:e3:7e:8a:00:82:13:c9:74:ab:98:8e:
         9c:e3:67:65:11:36:2f:ae:65:b5:eb:e7:a9:82:f6:a8:96:b1:
         7a:4c:5a:43:79:fc:8f:72:a4:39:fd:36:8c:f2:dc:6e:03:0c:
         c8:20:71:ab:15:e1:c9:86:39:88:cf:bc:59:e5:6b:2e:55:49:
         0e:f4:24:23:8a:98:bc:22:03:64:fd:ff:7e:40:71:0e:dd:be:
         9a:f1:5b:12:4f:7a:3d:19:30:0f:f7:12:34:f4:cd:7b:42:b1:
         7c:63:f0:08:ac:63:ba:fc:5d:b6:97:6b:91:f7:49:a2:e7:e8:
         40:e2:76:4c:e2:d7:81:78:f4:05:29:fd:e5:16:1d:f2:0b:02:
         ac:d9:f2:ac:24:9b:ff:3a:a6:45:d1:9d:a3:df:d8:10:c2:47:
         ec:c3:a2:e5:78:85:3d:14:3f:b5:c6:68:11:aa:46:cc:bd:9c:
         ad:37:d0:34:63:26:5b:bf:33:c6:81:58:07:80:b3:4a:95:50:
         f7:4d:13:e3:b5:71:21:3a:dd:33:b6:53:1d:68:3c:8c:1d:94:
         69:97:b6:f8:56:d6:bf:68:30:97:94:62:fe:8b:cd:b8:fc:0b:
         29:41:d6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:03:20 2026 by rpki-client