Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5235497c-5bd3-33af-b5f2-694ae5c778e3.roa
File:                     5235497c-5bd3-33af-b5f2-694ae5c778e3.roa (raw, json)
Hash identifier:          m1A9NgJucJByd1zjLRcm6cm++3YmB7tCcfqOYg1zCnI=
Subject key identifier:   58:32:53:A9:1B:72:C8:68:09:41:A5:45:9D:6E:1C:2D:03:0C:20:31
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11AC23B60BEC9D670B40F00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5235497c-5bd3-33af-b5f2-694ae5c778e3.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:5650::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:c2:3b:60:be:c9:d6:70:b4:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=dbadc4c6-f581-4150-86ce-e7215dc9ca6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6f:e9:2a:81:a2:69:e2:15:18:a6:af:27:a8:
                    1c:d7:31:db:bf:4d:d3:09:d4:ff:29:6e:cf:08:f2:
                    54:92:ec:e0:df:54:eb:b5:80:3f:a1:8d:84:e3:4d:
                    b0:e5:e4:a5:49:41:3f:08:e6:db:ac:e5:e2:82:a5:
                    c2:c6:0a:2a:41:a8:f3:ba:08:56:c1:41:bd:f0:90:
                    b6:34:13:61:ed:25:a8:62:bb:ca:ec:9a:4d:9c:7b:
                    06:ab:c4:f4:af:cf:ac:35:10:f3:7c:fe:8b:b8:f0:
                    44:12:d1:fd:eb:99:dc:22:ac:2e:cb:50:05:42:1b:
                    d0:f3:57:0a:2b:47:76:1b:f2:e5:39:cb:d3:b9:f7:
                    50:c8:9f:3a:ee:40:e0:ab:78:de:67:98:82:1a:93:
                    82:c1:1e:db:31:32:bd:1d:81:1a:a9:53:3d:5b:e5:
                    bc:1a:b1:5f:5d:82:59:dd:c2:6d:3a:ab:80:07:6f:
                    ff:4d:86:be:c7:31:0b:ad:57:55:90:62:1c:f7:15:
                    29:17:eb:30:46:ec:96:03:78:1f:1e:b9:fe:c4:ab:
                    ac:54:ab:c8:1e:a3:be:a2:0c:16:1d:5f:3e:86:aa:
                    3e:83:ff:0b:81:9a:0c:fc:3e:13:7e:80:95:b5:28:
                    64:85:d5:df:bf:a7:83:24:09:8f:10:8b:41:c9:ea:
                    7f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:32:53:A9:1B:72:C8:68:09:41:A5:45:9D:6E:1C:2D:03:0C:20:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5235497c-5bd3-33af-b5f2-694ae5c778e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5650::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:62:84:56:c8:72:ac:da:96:46:6d:45:bc:fe:96:63:50:cd:
         65:e2:29:4d:69:d3:4c:3d:45:7f:22:1f:aa:a3:0e:e8:8b:f1:
         7d:b4:7f:67:fc:a3:28:79:55:54:bf:de:8a:23:97:7f:ed:58:
         f1:e1:7f:95:fb:d0:3f:5e:ca:76:51:a8:74:bc:28:51:ae:91:
         69:6e:ae:f8:62:5b:e2:84:c7:74:8b:e8:9e:ef:ec:28:78:09:
         3c:c2:ba:af:cf:2e:4c:d1:0e:64:72:ff:e3:6c:96:45:86:01:
         30:b7:ae:84:ce:ce:01:74:9e:b1:a8:c7:dd:54:ce:17:80:c6:
         84:b2:93:f4:b5:d6:2b:ce:13:5d:6b:8e:c8:83:9c:a5:3c:c3:
         9f:ec:2d:ee:2e:b5:c3:83:53:b1:eb:f6:d1:8b:d9:66:f6:0c:
         7e:bf:f2:40:66:52:de:f1:04:86:da:1a:3e:d6:29:16:a9:86:
         ff:28:89:12:fc:2a:12:09:5a:b5:90:8e:c5:54:c9:1d:78:04:
         01:b6:cb:d7:09:59:93:1a:b1:c3:03:01:9f:1d:b4:60:29:b5:
         a1:d0:95:9d:2a:45:46:f1:6c:fa:cd:2c:c6:2d:5c:f5:4a:12:
         6a:54:50:8f:24:ed:4d:a1:ad:40:39:9f:73:6c:5b:f4:8a:12:
         87:59:d7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:49 2026 by rpki-client