Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1fa17bd-8c1a-38da-b792-8e84a9519368.roa
File:                     d1fa17bd-8c1a-38da-b792-8e84a9519368.roa (raw, json)
Hash identifier:          FPIEGs2C2rv3KWGNs+EeJ+LUhH/zOcjVpSwl2jSJQEM=
Subject key identifier:   FA:9B:9D:32:79:83:25:0E:22:6F:E8:F2:D7:A7:55:D5:BE:E8:FA:35
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11AD816F5D863F4B00BCA00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1fa17bd-8c1a-38da-b792-8e84a9519368.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:5c80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:d8:16:f5:d8:63:f4:b0:0b:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=5c7dd44e-8a94-447a-a06d-0e6d41a131ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:0b:b0:41:af:0c:70:3b:70:75:27:79:f0:
                    73:6b:25:22:62:0a:21:dd:f4:ee:f6:a2:3d:96:59:
                    b8:5b:81:04:91:2d:c1:3d:63:e7:91:1c:f5:d1:10:
                    a7:7a:3c:2c:b8:81:f0:bb:54:55:02:2b:63:b7:33:
                    f7:2c:69:60:fa:0d:a7:06:a2:48:01:46:a0:73:da:
                    57:3a:09:19:3b:08:1a:0a:96:47:ed:b7:5e:d4:04:
                    ea:b6:a8:ec:45:26:40:91:75:e3:65:85:7b:a4:1a:
                    44:97:60:f7:81:f2:2f:77:8b:53:74:2c:cc:e7:8e:
                    a5:7f:01:6c:74:ea:d7:be:64:86:95:7e:af:89:b0:
                    18:83:d2:fa:5c:bd:63:1c:41:42:12:dd:2f:26:0c:
                    7c:98:d1:c8:89:d8:4b:70:40:8c:2a:d0:38:4e:82:
                    27:64:2c:af:05:9d:41:9d:42:dc:15:3e:24:b6:f4:
                    f2:cb:6a:d8:35:97:77:99:bc:ed:5a:3f:22:6c:8b:
                    c3:75:5c:19:21:7f:e7:ac:09:75:7a:a8:00:b8:8c:
                    d8:37:7c:9d:be:87:a2:f1:e9:bd:f8:49:85:c3:61:
                    4e:64:94:e0:1a:09:70:ea:67:01:cb:ce:63:b6:e0:
                    17:1f:1c:39:c9:3b:65:91:e0:16:c4:34:27:6e:a8:
                    91:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9B:9D:32:79:83:25:0E:22:6F:E8:F2:D7:A7:55:D5:BE:E8:FA:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1fa17bd-8c1a-38da-b792-8e84a9519368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5c80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:87:af:3b:41:f2:be:11:4c:75:71:bd:88:7b:9a:49:6d:b5:
         5c:fa:1c:b3:6d:6d:13:6c:49:17:8c:6a:ce:27:fd:81:a3:92:
         5f:67:02:f6:42:af:09:c4:bb:54:89:90:0f:13:5f:b4:6e:d3:
         3a:1e:a1:35:a7:ab:20:99:ad:28:b3:39:da:eb:fa:47:67:3d:
         7a:fd:8b:11:5f:3e:e5:c6:6e:64:e8:a3:1b:9f:53:cf:33:19:
         39:59:5e:da:0b:fb:2d:7d:7b:f9:d9:ee:e5:27:a2:68:09:35:
         71:d0:71:ba:fc:40:70:83:91:f1:e6:a0:7d:d6:0d:73:39:80:
         e0:eb:a1:5b:0f:1d:d4:36:c7:58:5d:89:d9:ec:c0:c0:af:e8:
         cf:fe:32:cc:ee:13:ab:f7:f4:fe:e1:be:63:f2:a5:89:a7:64:
         03:93:4c:df:db:8a:98:03:0f:b2:f0:bf:d5:e4:81:8c:bd:8c:
         22:12:7e:ca:de:24:e9:3d:c5:13:50:cd:4c:38:8f:16:ee:18:
         05:30:80:cf:f0:7f:43:a5:e0:07:ce:f1:e3:89:34:e2:fd:33:
         84:76:fa:d7:b7:92:05:2a:8d:12:6e:b8:ad:b8:a2:28:9f:45:
         73:77:c4:a3:0f:7c:bc:21:96:78:78:88:74:8c:de:6f:ff:e9:
         dd:6e:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:08 2026 by rpki-client