Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40d11d89-9022-3c13-ab02-4d286fb7a11d.roa
File:                     40d11d89-9022-3c13-ab02-4d286fb7a11d.roa (raw, json)
Hash identifier:          Ll2C8JbWbM1TWsOxQzZC7f1OjqQXqNo32hts2PkPpk0=
Subject key identifier:   A4:69:A3:5D:F3:09:DA:B6:A2:29:CD:ED:53:A2:CD:96:A4:F1:58:6F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11AC9CBBD314254EE8C5260
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40d11d89-9022-3c13-ab02-4d286fb7a11d.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:5840::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:c9:cb:bd:31:42:54:ee:8c:52:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=10fb47da-98ec-4f19-ad6d-be0b19ca93d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e2:da:fd:46:dc:6c:5e:95:17:c5:ef:5f:0e:
                    d4:c4:95:fd:96:59:a5:a4:df:ce:d5:05:7b:6c:1c:
                    40:ab:e2:97:3a:42:b3:46:8f:6a:da:2a:7e:fa:c4:
                    76:ea:71:11:1b:92:08:dc:f6:f2:c4:60:0d:f7:9f:
                    07:aa:eb:22:4d:d7:36:a4:9f:e2:58:4f:1e:15:7b:
                    c7:03:c5:b3:4e:28:4d:f1:a4:2e:fa:80:2e:b1:11:
                    28:ea:36:ab:38:85:48:00:cd:84:1b:8d:0b:94:09:
                    96:32:65:6d:5f:3b:8d:41:71:23:dd:31:47:6a:35:
                    cf:7b:63:b5:e1:f4:d2:ae:68:b5:cc:77:f7:85:9c:
                    3f:18:6a:f4:80:91:8d:ea:0c:24:c1:f4:15:1a:fd:
                    92:82:d4:d3:da:0e:82:a7:43:c2:6e:7f:a1:dc:0b:
                    be:69:0a:0c:a2:a3:87:fb:e3:73:78:9e:22:5d:de:
                    7c:de:f6:35:b2:b0:e6:2b:cd:3f:43:ac:69:b6:43:
                    0e:b7:2e:a9:6b:a9:ae:b1:7b:c4:76:2c:33:d1:4d:
                    3f:02:1c:7e:29:2c:04:34:64:05:11:fa:b6:9f:4c:
                    fb:ac:c5:21:15:c5:1e:40:39:f2:13:3a:24:0f:a8:
                    ae:a8:9f:0d:6d:62:70:ff:67:ff:0b:cc:8a:89:ac:
                    eb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:69:A3:5D:F3:09:DA:B6:A2:29:CD:ED:53:A2:CD:96:A4:F1:58:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/40d11d89-9022-3c13-ab02-4d286fb7a11d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5840::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:5b:27:85:0f:64:1f:d0:7b:62:74:b9:d0:8f:5a:5d:c0:c5:
         9c:c7:da:3b:3f:e7:b4:bd:e9:b7:37:ed:7b:b9:a1:8a:e4:6e:
         00:82:46:be:55:d5:c1:e6:89:01:87:72:27:35:04:a0:cd:56:
         9c:ea:94:ea:6c:ba:05:90:e7:19:c2:c4:61:33:6e:df:c6:d2:
         82:f7:7a:cc:90:f2:c4:dc:81:f4:9c:f5:76:cd:3c:1b:34:c8:
         11:2e:ee:89:3d:61:c3:9a:87:99:08:34:b9:31:51:95:92:69:
         3f:2a:0e:e6:ac:1f:8a:26:bf:56:19:5d:5d:14:5f:47:56:86:
         64:5e:4f:25:d6:23:61:1e:db:da:70:20:70:57:30:c0:67:1f:
         d3:ee:6a:f3:99:b7:68:48:91:3f:97:fb:06:5f:5d:de:86:96:
         cd:4d:a6:42:16:10:31:60:31:30:01:30:83:e4:3f:6d:b1:4c:
         21:31:38:a6:e2:1c:ce:77:20:b0:61:35:76:ef:6c:a2:5f:82:
         8e:15:ed:52:b4:b3:f8:ab:17:23:f4:5a:34:50:9f:d9:33:a4:
         92:81:db:84:f2:fc:e2:6c:36:96:5b:87:b5:f6:72:72:c1:ff:
         e9:ed:db:56:6c:d6:f6:4d:85:05:ed:f2:e4:84:34:1d:f6:34:
         c5:32:94:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:29 2026 by rpki-client