Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/55f87819-54be-3af8-93dc-3517da4309b4.roa
File:                     55f87819-54be-3af8-93dc-3517da4309b4.roa (raw, json)
Hash identifier:          zA3MXIJMSVgF5XJQJ/NbtHSFlaFuQpWnYBgZbJyYosE=
Subject key identifier:   95:76:61:26:23:92:A9:BE:7C:AC:2F:4C:B8:5F:FC:5F:AA:82:3C:43
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11AD86C09A3DF2E5ABC8E80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/55f87819-54be-3af8-93dc-3517da4309b4.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:40c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:d8:6c:09:a3:df:2e:5a:bc:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=310c28b8-49a1-4d7b-9e40-a020d420cbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:57:c9:17:b4:0b:4f:f1:29:09:94:e6:fd:
                    68:ce:1b:0b:57:c6:bf:b1:8f:8f:e3:e1:74:42:83:
                    ad:15:46:96:96:24:cd:e0:85:90:82:93:da:44:82:
                    87:6a:25:59:22:39:5d:46:ff:0a:0b:4b:f1:54:80:
                    36:da:da:5d:f0:fe:a6:dc:23:a7:32:29:9c:b2:91:
                    da:d5:df:62:9b:ac:95:20:05:5e:80:09:eb:f9:a7:
                    97:62:3f:b1:94:3e:51:d0:af:62:25:1a:63:2e:3c:
                    84:06:e4:c2:8c:ab:eb:47:81:06:80:9c:ae:d0:cb:
                    f3:56:82:44:bf:e4:57:52:bd:c5:2b:87:c6:bf:2b:
                    7b:15:df:d7:69:5e:63:a8:46:34:ab:aa:d5:5c:ff:
                    ef:4d:67:d6:bc:03:56:ee:5c:34:7a:d4:b1:e8:6e:
                    55:79:10:b0:3e:3b:6d:65:a3:9d:ce:e2:86:e3:e1:
                    ad:28:62:d4:ee:e7:22:01:38:4c:87:8d:5e:2b:ee:
                    9a:4b:15:49:be:7b:12:fa:ad:12:94:7a:5b:f0:fb:
                    cf:63:7f:68:b7:52:65:2b:29:61:69:c8:ed:8f:27:
                    2c:a1:9c:d9:4c:e1:7e:7a:79:bc:d0:87:38:11:17:
                    57:b9:79:ce:4a:d7:ed:ab:db:0a:31:3d:a3:4a:1d:
                    4c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:76:61:26:23:92:A9:BE:7C:AC:2F:4C:B8:5F:FC:5F:AA:82:3C:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/55f87819-54be-3af8-93dc-3517da4309b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:40c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:17:f7:83:2b:b5:ce:e7:f5:ab:01:70:f9:14:7d:95:05:d1:
         d3:60:04:45:66:7a:94:83:b7:e8:fc:3d:62:53:a5:5e:bf:77:
         28:69:6d:6e:ff:4d:e1:93:35:da:8b:7f:65:53:d5:8c:47:6c:
         a5:cc:26:eb:57:d8:df:4f:97:46:95:fa:41:ed:31:e2:b2:c5:
         21:7b:1e:0d:40:c1:08:5e:4e:1a:72:fa:71:3e:05:bb:0b:e8:
         50:49:02:89:59:03:09:bf:6d:4e:8e:6e:2e:79:83:96:cc:02:
         bd:61:b7:8c:a5:91:fe:98:23:bc:a9:53:b9:78:b5:52:a5:21:
         71:0a:e1:be:10:79:b6:78:66:d4:1f:1c:ec:49:82:96:88:79:
         2f:3a:e1:81:f1:16:eb:a4:ed:f5:bb:5f:94:5b:4d:c7:ae:de:
         e8:a7:04:4d:9f:d4:78:71:73:a8:28:c3:34:28:0d:65:ca:db:
         eb:4a:9b:ad:80:d4:8f:ce:7f:1e:4b:5d:59:91:37:5f:ea:3d:
         5e:a1:c1:d9:9a:52:a3:72:70:bc:1d:e1:db:9f:14:5f:88:de:
         27:f2:dd:20:60:b7:22:d9:3f:50:36:46:49:c8:e7:3d:cd:69:
         9c:34:64:49:05:e1:d4:27:90:13:f8:67:93:47:91:d5:8b:6b:
         87:c4:34:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:20 2026 by rpki-client