Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d51bd86c-efd6-3387-b0db-87a97c143ba1.roa
File:                     d51bd86c-efd6-3387-b0db-87a97c143ba1.roa (raw, json)
Hash identifier:          kaPE3hv4pZg1g36xllmDAnyvb59LkSZUSj1AG1U8+ps=
Subject key identifier:   EC:9F:8E:86:9F:9D:4F:FF:75:7A:84:61:DD:36:5D:8F:4C:8A:AC:33
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11AD328EE019880BBC86000
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d51bd86c-efd6-3387-b0db-87a97c143ba1.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:58d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:d3:28:ee:01:98:80:bb:c8:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=1454a2e9-30d7-461a-8a8f-380c23df0943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:14:0b:73:70:22:5a:cd:9b:53:24:8d:f4:5f:
                    7e:b3:05:59:bd:43:4b:5a:a8:27:8f:18:a7:6d:8e:
                    2e:89:58:bb:ba:92:ba:f1:5c:bb:0e:32:7c:20:29:
                    49:90:b8:cf:01:db:0b:57:bd:84:4d:84:57:ef:80:
                    4d:f4:62:e7:22:c2:0a:28:6b:4b:02:99:de:39:bf:
                    a0:cf:be:d4:08:47:60:92:3f:0f:86:25:74:19:0a:
                    60:01:6c:1a:f9:00:27:7c:d4:b9:d3:85:59:ba:b3:
                    aa:b4:c0:8c:4e:d4:53:8e:e1:47:4a:9d:51:49:0d:
                    56:9d:28:d6:9f:ae:bf:01:29:c8:57:13:e3:24:60:
                    58:a6:75:a9:35:7d:ed:4c:32:19:ae:10:db:e0:08:
                    d5:22:5c:30:0e:f4:98:cf:c5:12:19:94:0f:35:76:
                    a1:5a:2c:dd:11:69:bb:7e:f8:8a:6c:77:dd:ba:74:
                    bb:d3:67:e5:2e:e2:54:27:73:f0:59:00:83:c3:7b:
                    6f:9c:4d:bb:2e:ec:b0:d0:b5:35:1e:d1:8a:9a:a0:
                    cd:d0:45:51:66:e7:e7:4e:74:ed:91:f8:78:99:5b:
                    36:12:9e:90:96:92:38:13:1b:56:e4:91:ad:b0:14:
                    69:c4:b1:fd:bd:a0:a7:3f:c9:0d:0f:45:ea:d7:4d:
                    85:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9F:8E:86:9F:9D:4F:FF:75:7A:84:61:DD:36:5D:8F:4C:8A:AC:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d51bd86c-efd6-3387-b0db-87a97c143ba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:58d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d5:b5:5e:1d:0b:a9:29:b1:83:52:30:ef:9d:ef:63:77:b2:
         b2:94:b8:58:61:c8:74:61:be:0f:f6:df:17:e8:a0:62:7d:13:
         d9:9e:af:b3:2f:be:ba:47:5d:17:28:b0:40:56:c9:54:1a:56:
         c1:b8:32:51:40:60:94:45:b6:c4:b9:6d:46:86:51:dd:b9:97:
         65:47:b7:43:d8:2f:7d:95:b1:aa:ef:11:e9:8f:25:90:f6:35:
         3e:2a:5d:d8:d2:42:ad:9f:e9:78:46:4e:7c:fd:ef:72:73:7b:
         18:b4:5c:38:85:01:0b:f5:fe:e5:18:b1:1e:17:b9:39:ec:62:
         44:84:70:75:ab:90:1f:bf:c9:21:b5:f2:36:1b:0a:2b:e6:96:
         51:16:3a:1b:9d:8b:fe:eb:bf:f5:02:de:5d:10:61:07:9d:d9:
         3e:bd:3d:52:ac:c8:b9:ce:89:7a:c7:e4:d1:ae:e1:7e:aa:5b:
         fd:37:23:c3:27:59:cd:d0:3a:af:94:ba:15:2e:5a:42:12:38:
         60:89:f9:7d:a5:95:70:c8:fa:96:b6:cd:c0:f0:ad:ba:b6:85:
         d8:35:6b:0f:c5:67:15:d3:ae:f9:ab:29:d4:64:2c:0a:2a:7b:
         df:91:5e:6b:13:85:8e:54:83:8c:c4:59:2a:39:da:69:f8:ca:
         5e:94:5a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:35 2026 by rpki-client