Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40aff6cd-96da-3329-bfba-5b89cba791e5.roa
File:                     40aff6cd-96da-3329-bfba-5b89cba791e5.roa (raw, json)
Hash identifier:          9h2ZEvf2IAC59JwiFmWknmhlu6trqEHToyQNHYSCk1U=
Subject key identifier:   02:1E:68:53:AC:42:A4:DA:27:7D:B8:EE:00:5A:EF:A6:AB:05:7B:A5
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11ACD125D4D38EDB8E97320
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40aff6cd-96da-3329-bfba-5b89cba791e5.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:5490::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:cd:12:5d:4d:38:ed:b8:e9:73:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=27b1a5f7-8b0e-4c12-b1ea-287a4843ec24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:72:98:c5:96:96:12:68:20:67:f6:2f:44:92:
                    ed:80:91:31:b5:cc:1c:d4:f9:9a:28:66:07:5d:6f:
                    9f:d4:6a:bf:d7:c7:d2:c0:e2:f6:69:fc:cb:39:38:
                    29:78:b4:94:a4:65:5a:e1:52:a5:fb:8e:7c:24:ec:
                    91:7d:51:e6:c9:88:7d:04:82:c0:de:5c:98:03:52:
                    e7:e3:72:7b:37:60:01:7f:e4:3e:5b:7b:44:69:b8:
                    c5:38:b6:92:97:3f:3f:6d:92:68:33:6e:57:d7:14:
                    b4:dc:bc:5f:b7:54:3e:ff:00:5f:1c:fe:40:90:f1:
                    f6:fb:da:92:d9:20:80:f6:89:40:5f:1d:f9:e4:56:
                    3d:7c:2c:b4:0b:80:33:b8:7d:63:ca:8f:63:3a:d2:
                    3e:67:46:a9:72:5b:c4:33:7b:ce:06:ac:f8:c9:60:
                    a4:df:0e:8b:c2:2a:e3:04:22:cf:f7:36:7f:84:86:
                    b5:f0:bb:7b:b7:df:4d:82:39:bd:ff:81:49:0a:ec:
                    b6:e1:1f:7b:84:cb:86:5e:d4:69:d5:42:df:21:73:
                    54:0d:c4:99:c9:b4:8e:76:5c:a1:11:df:f0:4a:d6:
                    42:41:73:54:26:d4:28:3e:49:61:d6:ea:5f:61:2e:
                    d9:55:c3:75:3b:02:83:b0:7d:8c:ce:4d:48:9b:ea:
                    af:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1E:68:53:AC:42:A4:DA:27:7D:B8:EE:00:5A:EF:A6:AB:05:7B:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40aff6cd-96da-3329-bfba-5b89cba791e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5490::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:fd:0a:74:dc:ac:b2:91:98:91:5b:a6:36:9a:5c:69:96:ac:
         18:33:ae:0a:2e:87:c2:48:da:05:ab:61:03:29:3a:23:46:bb:
         5a:cd:93:96:57:c3:db:a2:33:f9:9e:b6:12:54:a9:4d:ce:20:
         57:74:e8:1c:27:3f:af:a1:53:d3:82:f9:e1:d8:d7:6d:60:cc:
         19:26:19:90:1a:f2:90:f5:61:37:98:c7:9f:9b:02:5e:73:65:
         99:ee:98:a2:5f:83:96:e7:08:ed:0a:b8:6b:20:1f:a9:7e:6e:
         2d:9d:32:9f:fa:4b:6e:a1:c3:b0:c7:6b:31:3f:7e:37:49:6f:
         0f:3d:0d:ae:d7:f0:c4:cf:f6:24:a3:5d:90:dd:69:bb:f0:30:
         02:fd:9e:1b:9b:f0:b4:e8:07:13:6b:2c:3a:c9:07:0c:9b:34:
         b2:c7:b5:4d:63:ef:2f:83:9c:50:ae:52:bc:2f:03:52:a6:f8:
         d6:8b:4d:83:ec:7d:52:a3:d6:c9:d0:32:56:5f:75:8f:14:27:
         24:db:98:a1:74:d2:97:26:15:aa:42:61:84:bc:7f:67:8b:29:
         cf:19:88:c5:7e:af:21:cc:93:2a:b8:98:71:4f:ed:d3:7e:79:
         3e:ae:9b:bf:06:e2:5e:0a:63:5b:ba:af:dd:87:c0:1f:97:ad:
         55:c2:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:48 2026 by rpki-client