Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/591601d9-25d1-378e-af90-4670e95bbb4d.roa
File:                     591601d9-25d1-378e-af90-4670e95bbb4d.roa (raw, json)
Hash identifier:          44TSjMOPKEohxaWRyail0iBUL0cw2LU6btnuek+F86I=
Subject key identifier:   C5:C3:B9:F3:04:D9:09:01:30:6F:E1:89:06:84:9A:8A:5F:A8:D5:FB
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11ACD4D733BB542F4EC3790
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/591601d9-25d1-378e-af90-4670e95bbb4d.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:4d50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:cd:4d:73:3b:b5:42:f4:ec:37:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=e154a0d3-c8e9-42ca-95c0-4c0b7f7fb7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:af:c0:27:a6:dd:4f:b9:5e:e8:25:db:71:
                    2a:1d:47:a3:e3:03:46:32:a0:b7:5a:e9:9e:29:20:
                    e9:b4:0d:f2:9b:c0:c7:98:90:09:37:0b:a8:c2:5d:
                    3f:6d:43:6d:f2:7b:e1:44:05:80:73:ed:0a:9e:22:
                    0f:a7:89:47:c4:d9:d8:1e:f5:a7:16:4c:0b:34:4f:
                    7e:eb:9d:0d:18:33:9a:17:93:b7:81:29:fe:bc:f5:
                    f6:78:8f:22:48:2d:99:6c:cf:eb:bb:37:9e:cb:23:
                    f1:e5:71:a6:16:a9:4d:a4:29:f9:3e:c1:30:41:5a:
                    b9:22:bb:0b:7c:55:8f:aa:30:4d:85:b4:dd:5a:fa:
                    e9:12:a2:e0:1c:f7:7a:cb:71:00:84:7b:6f:59:92:
                    ee:dd:bd:ef:a6:52:46:02:cb:1d:8e:03:f7:4f:90:
                    d6:1f:f6:74:44:fe:df:4b:83:69:5f:6a:b9:83:1e:
                    75:85:ff:fb:14:94:40:d7:8a:d6:2a:8d:7f:fc:e5:
                    30:86:2d:56:fa:a0:34:93:ec:35:b3:03:d4:0a:80:
                    45:7d:fe:95:ef:e8:76:77:bd:73:fb:1c:6c:ba:8c:
                    9b:95:84:ea:8c:ca:7b:a6:b8:94:02:d1:2a:60:b4:
                    8a:df:fc:d4:ae:cb:48:64:55:7c:8c:29:b6:05:d2:
                    a5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C3:B9:F3:04:D9:09:01:30:6F:E1:89:06:84:9A:8A:5F:A8:D5:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/591601d9-25d1-378e-af90-4670e95bbb4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4d50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:cc:a9:9d:f3:ed:a3:e4:f1:55:b0:5d:4d:97:7e:a4:f6:87:
         02:7d:0c:d7:6b:88:b6:1a:39:cb:c4:bc:4d:b7:d8:08:95:8c:
         b7:f7:65:79:ad:be:f5:d8:eb:2b:0a:68:06:56:6a:62:3d:dc:
         fb:a9:4b:6b:cf:c6:13:3d:59:5c:8f:ab:93:80:a8:63:1b:ff:
         e4:b5:de:87:8b:72:8e:9d:80:5d:24:5f:5c:f8:59:4f:e6:15:
         3d:4f:39:3a:3c:fb:e6:4d:96:55:40:f5:a4:a8:29:b1:3f:a2:
         45:10:a7:cb:4a:ec:c7:4f:b9:f1:5c:b7:19:c3:e4:43:c9:69:
         b3:c3:af:11:36:85:17:8c:64:19:ca:0f:54:c0:3c:fb:41:01:
         88:db:4d:ec:a4:1a:55:08:a9:d8:72:24:8c:86:d2:2e:3d:b2:
         45:af:90:ec:b7:bd:86:23:ef:84:74:0c:85:b7:72:c0:9c:f8:
         b2:d3:b8:2c:85:04:67:5c:43:6e:71:71:53:58:cf:f2:9f:bd:
         f0:c9:c2:da:38:7b:21:86:cd:fe:44:bb:7c:5b:7e:bf:5b:43:
         f8:80:85:0f:13:7c:b9:63:e2:40:f4:79:99:88:fb:6f:22:bd:
         d3:23:d4:c5:9a:27:02:6a:ad:98:c1:b2:56:3d:f5:f2:f2:13:
         d7:6b:48:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:13 2026 by rpki-client