Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/46689b91-27b0-3d8e-885a-deb070de8607.roa
File:                     46689b91-27b0-3d8e-885a-deb070de8607.roa (raw, json)
Hash identifier:          Ou6sAQYp22zGDTqaGI0FHw8OpXcfeEFp1Re1n0Toqa8=
Subject key identifier:   87:1D:0F:04:70:56:2B:DE:0D:3D:1F:1A:C3:57:88:7E:6D:31:C7:71
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11AD7E59C78D84D4C206B80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/46689b91-27b0-3d8e-885a-deb070de8607.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:5120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:d7:e5:9c:78:d8:4d:4c:20:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=db9e79c2-5ad5-4e55-859e-7de32a6db400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cc:0a:15:60:cc:67:43:2f:bf:ca:09:52:31:
                    56:61:a4:89:bc:2a:9a:6f:e5:13:ea:f2:40:a0:91:
                    01:dc:86:be:c9:0b:35:cf:89:97:b4:bb:e7:5f:b8:
                    e6:63:67:02:2a:cd:76:ce:a6:6e:d4:eb:58:1b:25:
                    05:a8:39:3c:1e:a2:5e:48:bb:b3:93:7a:95:d1:1a:
                    12:06:21:44:8c:92:04:1e:03:bb:8f:a2:4c:2a:f9:
                    bc:29:9a:89:dd:10:a6:bf:d9:fb:e3:cb:95:6e:09:
                    09:41:92:26:45:93:2e:32:78:6e:5f:34:00:49:08:
                    f7:67:8a:c2:27:bb:f5:07:d9:fc:40:e1:ea:6d:10:
                    43:c5:b6:43:c0:b6:1b:3e:a8:c6:c3:ea:72:54:58:
                    7e:33:ae:51:67:98:c3:c0:a4:ba:eb:9f:0d:e0:e9:
                    ad:30:ed:f4:05:73:1c:59:0b:81:f1:0b:c6:12:d1:
                    e9:b3:77:d9:4c:f7:63:23:00:1c:da:84:da:77:61:
                    f4:eb:73:64:6b:2d:bf:98:ac:b7:9d:67:df:8d:43:
                    11:c3:2b:12:68:93:f6:79:e8:1d:82:14:bc:69:7b:
                    35:ff:a8:46:48:48:a6:44:2a:ea:ec:90:67:5d:18:
                    2f:a0:73:ff:8a:b3:d1:5b:92:8a:12:e0:1f:fc:84:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1D:0F:04:70:56:2B:DE:0D:3D:1F:1A:C3:57:88:7E:6D:31:C7:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/46689b91-27b0-3d8e-885a-deb070de8607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:7d:b6:43:02:7c:c9:20:14:ec:84:a4:07:7e:8d:05:f8:34:
         76:bb:a9:8b:f5:3d:f1:6b:72:a4:71:c5:e9:74:e4:48:ee:ca:
         f5:19:fd:78:9b:a2:4e:d0:d0:cf:cd:43:98:bd:53:95:05:b9:
         ef:32:b6:4b:72:92:ba:ac:74:66:cf:1e:7e:9d:6a:c0:e7:05:
         05:4d:49:2e:49:4d:d9:99:c6:3d:fd:09:c1:59:81:6d:d6:26:
         05:25:f6:10:38:0b:d6:19:28:5c:ee:45:5c:f9:1b:38:39:cc:
         96:70:b6:0e:4f:16:e1:dc:d3:b1:a8:9f:4e:cb:d1:fc:bd:77:
         b5:ef:06:6f:e1:04:0f:9f:54:1e:29:51:66:c8:d8:5e:35:72:
         03:a8:0e:ba:52:c7:16:67:cf:52:c4:15:8e:7b:e6:fe:b0:26:
         c1:30:52:51:5c:35:82:f4:5c:a0:e1:89:18:37:6e:8a:dc:04:
         f9:eb:d2:44:dd:62:f2:bc:d2:47:8d:a0:11:c1:8e:a0:25:90:
         e6:52:a7:fb:68:35:dd:9a:09:4a:0e:d7:b3:1e:a3:86:aa:38:
         0a:29:bd:72:ee:44:83:d6:6e:2c:84:af:9b:78:bc:bf:3c:50:
         88:7d:db:46:f7:89:d5:d2:db:1b:e7:3f:ef:df:e0:28:51:ba:
         f0:b5:d6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:51 2026 by rpki-client