Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad9d2cde-81d6-3c77-a464-32f6b0c5e44c.roa
File:                     ad9d2cde-81d6-3c77-a464-32f6b0c5e44c.roa (raw, json)
Hash identifier:          V1NlXTqbS3zdCA9DE/Wfq8xuottTgY1SGKYFv888zB4=
Subject key identifier:   C0:17:3A:A5:65:7C:38:F6:12:E4:CA:99:F4:37:3B:B4:BD:C9:17:EC
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11AD3E737D9BDFB367F9580
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad9d2cde-81d6-3c77-a464-32f6b0c5e44c.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:4470::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:d3:e7:37:d9:bd:fb:36:7f:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=634c3e74-f8bd-4f56-a987-a5e651de7339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:44:03:60:9c:0d:30:36:b8:09:e1:9b:c2:b1:
                    45:49:d5:6e:91:ff:c5:7d:ed:4d:e8:ab:2c:2f:62:
                    de:d9:b9:d3:e6:b0:d8:7d:57:0f:5f:b9:2b:e4:66:
                    34:b2:f7:8e:f6:f5:59:bb:b3:26:3d:ac:65:c5:71:
                    27:33:92:a7:de:3e:79:99:54:a7:20:92:48:95:dd:
                    af:51:aa:b5:87:92:15:77:62:52:ba:e9:32:48:6b:
                    57:a2:29:17:17:11:8e:55:e3:7e:66:3b:a4:cd:cc:
                    a1:6e:b7:5a:fe:8b:85:ef:2c:28:41:d6:31:c1:ea:
                    05:76:23:d7:ea:11:d6:61:ff:01:c8:4c:98:b4:c3:
                    90:48:4b:fd:b3:0d:72:9e:d5:57:0f:de:bf:96:0f:
                    d2:c4:b6:a6:1f:9e:0d:7a:50:62:7a:55:95:55:25:
                    8f:68:9a:3b:f3:b9:28:64:fb:9d:82:bd:ec:5b:49:
                    25:17:68:d4:2b:52:3a:95:7e:92:08:e7:29:2d:f2:
                    2a:30:41:7c:89:06:7e:03:07:e8:2a:0b:6d:7f:9a:
                    49:9c:5f:d3:82:6b:7c:6d:ea:e0:79:f1:ec:fb:39:
                    2e:c5:e1:43:dc:7b:61:d4:1f:bd:2a:99:5d:67:b8:
                    ec:a2:1c:22:48:7f:6f:8e:97:91:a9:d0:07:7e:34:
                    ca:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:17:3A:A5:65:7C:38:F6:12:E4:CA:99:F4:37:3B:B4:BD:C9:17:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad9d2cde-81d6-3c77-a464-32f6b0c5e44c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4470::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8e:4d:a2:f7:57:c3:50:ca:6e:20:05:ae:7b:b0:cd:93:67:
         d4:a6:67:bb:0b:51:05:10:f4:f9:98:bd:ac:e3:dc:22:1d:3a:
         7a:17:67:33:42:07:22:c6:3b:e7:1d:03:12:20:15:30:9c:40:
         f3:f7:51:12:3a:af:43:36:38:ae:89:55:82:84:cf:93:c0:90:
         75:aa:17:f0:76:fc:89:41:48:c0:63:58:a7:70:da:44:1a:b3:
         dd:64:f1:0d:58:fd:cd:45:94:24:92:da:20:b0:0a:54:0d:3e:
         e3:0c:d5:30:52:bf:78:dc:52:8c:54:90:04:ef:0e:ca:f4:cf:
         46:df:b0:c8:d7:8d:46:8c:d6:48:0d:d3:b4:05:68:97:ab:f3:
         9c:78:89:ef:00:2b:98:fd:73:de:3b:28:d5:e2:a2:ff:e7:0b:
         b6:fa:96:ba:bf:13:1d:b8:6e:7c:64:6a:85:2e:ca:75:8b:26:
         b8:a2:54:05:05:f8:40:5a:a2:8a:cb:93:9d:7f:32:af:ca:09:
         a1:5a:41:a1:56:6b:55:51:e2:1c:86:83:a1:28:b5:ab:b1:d8:
         01:05:6d:39:14:3b:ea:0c:58:4d:23:e6:ff:62:eb:82:65:1d:
         8a:19:6e:59:71:11:7d:dc:83:56:bd:3f:ab:1d:42:9a:3f:28:
         d2:5d:f8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:15 2026 by rpki-client