Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5c8d0f8b-80cb-3964-9992-ba3a5b4fe5e3.roa
File:                     5c8d0f8b-80cb-3964-9992-ba3a5b4fe5e3.roa (raw, json)
Hash identifier:          EdKge0lT/XWDY/Q/af6GaNmeWZvCP3anMtCd14SHhFI=
Subject key identifier:   9F:91:92:81:9C:2B:0F:AA:87:B8:DB:2D:BA:BE:67:6B:3A:7F:52:3F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11AC6EB97F4164DB8452500
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5c8d0f8b-80cb-3964-9992-ba3a5b4fe5e3.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:5d00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:c6:eb:97:f4:16:4d:b8:45:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=0de57cfc-55ec-4c65-bcbc-05f47ef7d5c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:4e:2e:ac:ca:02:ef:1c:b8:2f:e6:19:01:
                    7c:b1:1d:72:e3:e9:5a:39:78:f0:a3:49:b5:e2:15:
                    66:79:06:36:65:62:9a:49:86:4b:09:f2:e8:16:bd:
                    c1:61:8a:cf:9d:12:39:fd:65:52:ac:65:7f:f9:b6:
                    dd:5e:aa:79:46:91:2b:f0:c2:da:46:d7:70:ee:21:
                    54:31:ec:f8:e0:b2:4c:40:90:ed:f7:52:d1:42:3c:
                    ed:85:99:ed:4b:5d:ce:d8:57:fc:24:8d:60:08:fd:
                    6c:a8:a2:cc:62:57:25:0f:2c:db:34:76:44:d7:2a:
                    1f:ae:95:46:2c:1e:0f:48:8f:64:72:dd:15:8f:d3:
                    50:b8:21:a7:d2:56:d2:ca:cb:be:9c:69:84:78:9f:
                    c3:de:48:f4:92:c8:6d:bb:dd:4c:21:ec:93:04:c6:
                    b7:60:56:c6:27:b7:db:e7:78:53:1d:2b:f9:7c:f1:
                    d0:97:06:9e:85:a4:74:09:66:87:56:b9:78:13:a5:
                    ad:c1:1b:7a:18:d9:78:3f:40:95:b1:44:40:0a:fc:
                    9c:17:8d:1b:ac:16:cc:78:6d:45:1b:8c:19:e0:d9:
                    77:3a:08:70:4c:ca:b4:4d:ed:3f:ee:e5:a4:af:a7:
                    27:dc:6a:29:a6:78:3a:23:ce:c0:06:73:b1:31:55:
                    00:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:91:92:81:9C:2B:0F:AA:87:B8:DB:2D:BA:BE:67:6B:3A:7F:52:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5c8d0f8b-80cb-3964-9992-ba3a5b4fe5e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5d00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c7:65:c9:95:a9:2a:3e:f6:8c:0f:4c:3b:a7:ae:29:45:b5:
         2f:84:cc:02:28:cf:ab:d6:32:b1:2e:99:2c:da:c9:13:40:bd:
         f2:93:80:b0:27:2b:2a:b1:30:16:24:e4:42:12:f6:30:3a:ef:
         0e:05:19:32:66:f1:5d:d2:19:ef:44:33:01:84:75:04:42:84:
         c2:fe:bf:cd:f8:13:2e:d6:70:d8:7c:99:28:c9:a0:c6:cd:9e:
         4b:24:78:27:95:e1:13:5b:f1:b7:fb:be:9e:0a:c3:db:bf:59:
         cf:43:84:b2:dd:52:9d:21:60:ca:2a:a8:5b:bf:a2:8e:e9:4d:
         5b:08:db:7a:ef:ad:34:0e:74:84:f8:59:e7:f7:f0:74:ac:0e:
         80:dc:0a:e5:f7:91:20:32:c1:18:52:2b:57:32:66:eb:fd:8b:
         fd:dd:e3:4f:d2:7c:13:26:3b:17:d4:2e:91:8f:34:30:b9:c0:
         92:69:b6:41:19:84:5a:00:a9:4f:81:0b:f7:5f:bc:f4:af:a2:
         df:d5:e2:9c:5a:de:ac:87:25:09:d6:f1:b4:f8:e0:53:a6:72:
         db:4b:f6:74:d7:a3:f8:99:a7:16:53:6c:85:9a:d3:60:c4:73:
         29:1a:48:8a:bd:47:e8:94:f6:8d:fe:29:01:df:c5:24:64:97:
         49:be:15:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:29 2026 by rpki-client