Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/72cd7136-b20d-369c-ad1c-512706087b6d.roa
File:                     72cd7136-b20d-369c-ad1c-512706087b6d.roa (raw, json)
Hash identifier:          EYxryQP7gveW0c0DncDEC81AwtZFqXz8pHyP9xFbFF8=
Subject key identifier:   C6:1C:1B:25:0F:8B:AF:85:2B:69:A3:1E:B4:1B:7C:CF:77:90:95:23
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11ACC8E1A40BE1DB7E8E980
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/72cd7136-b20d-369c-ad1c-512706087b6d.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:59f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:cc:8e:1a:40:be:1d:b7:e8:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=d1bfac13-4d5d-4c5d-b617-bb98ffddf39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:85:9e:a5:72:c6:b8:57:ed:68:ec:26:70:3e:
                    4e:6d:27:6f:95:51:ab:df:61:12:ea:5e:ed:e1:d5:
                    18:f6:a2:71:21:23:d9:ea:90:04:0a:09:10:d8:fd:
                    af:17:92:89:1e:03:6d:9c:a1:0b:ff:2d:22:7e:d9:
                    59:73:9d:dd:14:40:0b:63:5a:fd:10:ed:e9:fd:91:
                    c2:6d:bb:1a:d6:fe:ba:31:7e:57:14:a0:25:14:62:
                    f1:1d:1b:48:80:51:ec:4b:ae:1b:89:94:fa:50:25:
                    7f:d9:03:84:c5:f1:f1:30:73:e3:8e:d1:94:62:68:
                    c7:5c:87:4d:95:9c:a9:45:6f:b1:40:60:e8:bf:a8:
                    bb:11:34:bf:8d:12:97:bc:a6:7e:89:3c:25:05:07:
                    28:6a:16:a7:75:d7:89:5f:60:b9:8d:0a:4d:b6:11:
                    b4:0b:46:ad:63:84:1e:b2:8c:0a:9e:3c:cf:85:bf:
                    1e:06:24:ab:15:6e:63:da:c4:f9:a6:8e:70:60:dd:
                    e5:82:c1:a8:cb:c6:2e:40:01:c5:bf:35:2d:ec:ce:
                    a3:65:23:bc:dd:f5:a1:e9:38:64:2e:92:55:55:ce:
                    11:e7:4a:53:64:5a:8b:47:46:66:47:52:7e:32:3b:
                    be:ac:c2:5a:20:cd:ce:c6:bb:81:09:f0:87:31:e5:
                    2b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1C:1B:25:0F:8B:AF:85:2B:69:A3:1E:B4:1B:7C:CF:77:90:95:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/72cd7136-b20d-369c-ad1c-512706087b6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:59f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:3d:a6:ac:b8:2f:da:a0:34:6d:08:7e:ff:1b:4e:b2:8b:fc:
         63:66:58:3d:47:7c:a1:ed:f7:18:ea:2a:59:43:65:4b:a5:04:
         59:3e:cc:34:4d:07:0c:4e:73:d8:69:72:17:ef:4c:0f:69:b5:
         cb:d3:07:c7:92:76:56:f4:6f:79:6a:0d:34:89:08:b6:4e:37:
         5b:06:9e:0b:cf:e4:e1:6d:12:0a:95:2c:0c:9d:9b:a9:c5:ac:
         1b:87:d3:e9:87:7a:e5:6b:19:c3:5e:5d:3d:96:8d:4c:b3:43:
         57:e8:1e:30:05:48:0a:dd:ea:c1:82:7c:56:ae:d1:f0:54:a7:
         f0:4d:97:9e:84:8f:b1:c4:fa:4e:27:90:94:45:62:2b:dc:62:
         5d:cb:a8:bd:93:7c:a9:59:ec:6f:7f:53:76:ea:bf:43:a9:07:
         85:8a:b5:7a:17:38:6a:ad:a2:fe:54:9b:15:2d:a8:a5:65:96:
         2c:c4:a1:b9:b1:a7:8f:a7:61:d9:f5:bf:86:1e:e9:ca:a6:6b:
         87:72:c6:1b:bd:d8:1e:d6:61:80:00:1e:91:df:4a:72:69:63:
         04:0d:12:67:8c:53:cc:10:04:37:91:b6:88:08:77:85:88:aa:
         db:34:97:3a:57:c2:89:6c:03:4b:da:f7:91:2f:5a:4d:a5:b3:
         49:92:85:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:02 2026 by rpki-client