Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca4dc7e3-1e46-30ea-85ba-006e4435bdd8.roa
File:                     ca4dc7e3-1e46-30ea-85ba-006e4435bdd8.roa (raw, json)
Hash identifier:          +4gsgu7voFFTLZqPHFuViaFDcQzfos9uu1DxvaInzI0=
Subject key identifier:   1A:44:48:C2:9D:8C:58:E5:FF:59:5B:3B:17:BB:6E:E2:66:F7:33:CA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11AD12ACB00C6DD0E8C3C00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca4dc7e3-1e46-30ea-85ba-006e4435bdd8.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:4880::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:d1:2a:cb:00:c6:dd:0e:8c:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=88732a28-6ef6-46cc-a3e0-c0631433b5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:22:69:a4:8f:e3:30:93:8c:15:a9:9b:2e:
                    d3:81:b0:19:dd:ad:ec:84:3f:bd:b6:60:d0:44:19:
                    2e:df:a5:94:9d:98:bb:47:32:0a:0d:fb:93:c1:21:
                    f4:fe:d7:24:81:ac:46:aa:de:be:cb:82:ca:8f:77:
                    8a:fd:46:6c:97:da:b5:ea:2d:8c:32:46:06:5f:0d:
                    09:99:00:50:dc:38:c2:44:b2:2a:57:52:f6:0e:a2:
                    07:2c:7c:76:71:e4:dd:1b:90:37:6b:bb:eb:e0:f8:
                    a5:80:4b:16:52:7e:80:93:2d:a8:c2:b5:4c:d7:b6:
                    21:0b:3b:cc:bf:1e:63:64:33:91:63:ef:81:49:45:
                    de:cf:b6:bb:2a:db:65:9d:ef:b6:79:20:02:20:07:
                    5d:25:07:21:fd:5b:11:b3:73:88:52:eb:80:44:d9:
                    58:95:b0:f3:56:f4:45:fd:9a:d2:d7:9b:64:9b:ea:
                    53:64:f1:d6:82:8c:f9:cf:3d:df:1d:52:75:97:9e:
                    36:99:9f:70:f1:a9:de:3e:8c:96:7a:b0:7d:43:73:
                    2f:f4:a2:b5:09:99:86:c7:5e:fd:b6:f7:57:48:48:
                    27:29:d9:f1:90:41:d0:4c:90:5d:f3:af:9b:fe:78:
                    76:0d:90:38:24:c5:69:9a:df:78:77:de:cc:1f:5f:
                    b5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:44:48:C2:9D:8C:58:E5:FF:59:5B:3B:17:BB:6E:E2:66:F7:33:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca4dc7e3-1e46-30ea-85ba-006e4435bdd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4880::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:2e:ac:2a:28:ef:50:f5:4f:b4:ec:0f:4b:4e:2f:f0:fc:b7:
         bc:25:d2:30:2c:b2:db:aa:23:0f:00:6d:13:5e:36:39:56:3b:
         04:03:1b:8a:f0:a1:27:65:9e:a9:f3:55:e7:d0:b2:e7:13:0c:
         72:e8:a1:e8:73:dd:cd:f3:b2:85:ba:9b:38:59:17:9f:9d:61:
         d3:60:d6:c2:db:6b:85:64:03:e5:27:84:e5:1a:6f:4d:30:2d:
         9c:b3:19:e4:93:3a:66:ad:79:1e:3a:65:b7:1d:56:07:82:d7:
         0f:fb:23:e5:0c:f0:d2:48:32:74:3c:21:f7:0d:db:f3:b0:b0:
         3e:17:21:1c:d0:19:55:48:44:9b:33:72:ce:8b:23:c7:58:8f:
         40:e1:57:44:aa:1d:35:a8:37:18:a0:31:98:00:39:27:92:df:
         6f:79:ab:fd:24:a1:c5:13:3b:74:bb:4a:6b:d7:07:71:77:8a:
         85:00:7a:df:d3:09:ef:21:b4:a6:96:ea:57:a5:80:94:70:6e:
         cf:52:4b:45:55:b7:9a:30:2c:a4:a9:d0:41:ad:b5:ab:a5:2f:
         cf:c3:aa:f8:71:f1:01:49:70:2b:8f:de:12:7d:fd:62:eb:70:
         f6:7c:ea:20:a1:e6:59:7d:b9:23:de:9f:5c:7a:11:cb:17:90:
         9e:56:2a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:20:34 2026 by rpki-client