Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad956084-a9df-3d78-815f-10f763562d24.roa
File:                     ad956084-a9df-3d78-815f-10f763562d24.roa (raw, json)
Hash identifier:          +ZR9Fum8HvtBANqGdh+Pm3+gPqxc9ala4+c9eXlDbEk=
Subject key identifier:   71:81:D2:90:3C:E3:1F:A3:58:BE:11:7E:38:1F:10:13:10:B4:12:20
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11AD449DA181B4526883FC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad956084-a9df-3d78-815f-10f763562d24.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:50a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:d4:49:da:18:1b:45:26:88:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=3eef06d9-0815-44bb-929e-35f12c631679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:58:ef:e3:ae:f7:62:48:93:81:14:cd:0c:
                    69:77:51:00:fa:a1:5b:55:c9:bd:0c:ac:fc:eb:81:
                    ed:12:55:20:d2:37:0c:d5:a2:f8:4e:89:25:66:2d:
                    c2:52:94:93:13:7f:ea:0e:00:0f:75:9b:43:42:b4:
                    1d:99:3f:a6:62:48:fa:e0:f8:dc:a4:43:00:60:22:
                    7c:24:83:8b:6d:c8:9c:d5:88:33:26:c2:0b:d2:cd:
                    16:11:23:90:20:02:c6:53:20:9f:40:26:c1:d8:1d:
                    fd:a3:60:c3:a2:82:e8:b4:34:4c:1b:4c:2d:34:dc:
                    87:ef:01:a5:83:88:b2:6b:2b:0f:a5:c0:b7:61:c1:
                    51:45:3a:36:f8:d9:cd:42:b3:87:94:26:33:20:92:
                    ec:ac:50:48:f4:b1:19:5b:75:78:84:d6:0c:fc:de:
                    31:51:b2:76:7a:59:c8:94:92:76:98:42:5f:0b:e1:
                    6e:3f:09:59:99:b1:c6:7a:91:19:19:ae:af:ad:a4:
                    d6:b6:77:e9:71:f7:3a:e5:ab:d4:04:2a:4e:67:eb:
                    bc:d3:ab:5d:f9:ee:40:71:6a:35:4b:c6:21:e4:15:
                    13:da:c9:c9:0a:4a:15:b0:6e:69:e6:05:fc:a0:a8:
                    ff:91:7a:1d:42:53:26:68:e1:50:21:fe:9d:14:66:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:81:D2:90:3C:E3:1F:A3:58:BE:11:7E:38:1F:10:13:10:B4:12:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad956084-a9df-3d78-815f-10f763562d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:50a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:fd:d3:44:0b:65:01:e7:b8:92:8e:01:3f:cd:91:63:16:ed:
         ab:df:40:a3:b2:b8:0a:19:c4:ea:c0:24:b5:fd:94:c8:c4:36:
         55:1a:a1:5c:8a:66:4e:8f:fd:86:b6:a5:c9:a5:d9:3c:ae:15:
         13:1a:6a:8b:2a:d1:c0:52:5e:c5:ed:53:3e:62:91:02:ac:2f:
         ca:f7:00:c5:20:7f:55:d7:cd:77:2e:9a:e0:8b:d8:58:c1:6f:
         bb:48:2f:70:0d:71:65:dc:ca:d6:d4:6d:08:1e:36:59:37:f4:
         82:9e:b2:5c:01:87:2c:e8:ee:be:a5:b1:86:5f:7a:09:dd:09:
         07:16:a6:4a:3b:d9:e9:7b:c7:b8:6d:cb:ed:4d:6f:f3:7a:d4:
         8a:d0:cb:f7:8f:12:1c:51:f8:ce:8a:77:e5:5b:49:a8:60:64:
         18:77:92:ce:a5:e7:27:8e:44:b7:d3:cb:68:99:02:cd:5f:c6:
         df:b9:f4:28:91:c8:61:e9:ff:bb:ce:02:36:5b:4e:74:38:a1:
         14:09:1e:e5:70:b2:95:d5:3b:e0:98:e4:0f:a0:03:24:ad:83:
         c6:d0:64:51:82:e6:ee:31:47:b5:d2:97:b5:0b:ac:36:cb:79:
         c0:33:9d:f2:b1:33:4b:e8:ee:55:55:40:fd:52:40:2b:da:f5:
         ef:a7:4d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:42 2026 by rpki-client