Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dc49366c-f542-309f-99df-012d92f62b5d.roa
File:                     dc49366c-f542-309f-99df-012d92f62b5d.roa (raw, json)
Hash identifier:          GDJFIZctrV8EoxvM/W0B298xZd6aBcwPyxjYXkPKfFA=
Subject key identifier:   0A:CA:EF:B7:41:1A:9D:B7:DD:F2:D0:7C:55:0F:D0:71:FE:F9:D1:00
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11AC92B4EF8637285AB6C00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dc49366c-f542-309f-99df-012d92f62b5d.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:5800::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:c9:2b:4e:f8:63:72:85:ab:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=2fd79569-5eea-40e0-8583-c6c44fe99d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c1:6c:3f:66:1b:a5:a4:c8:98:ba:2c:dd:d8:
                    19:df:67:47:04:b2:b0:82:fe:b5:90:30:13:cf:9e:
                    08:01:0a:ae:f7:ad:2b:28:98:72:01:bb:cf:2f:20:
                    f8:ba:cc:e0:78:f5:c5:9c:d8:75:72:e6:a0:e9:ed:
                    be:b2:ac:b8:90:3e:6f:e0:87:6c:3b:96:2a:8a:bb:
                    ae:91:26:49:19:de:0b:56:c9:95:74:3f:7b:21:87:
                    f0:11:c4:63:8e:6c:a8:02:18:f1:27:63:20:39:9a:
                    fb:c0:0d:df:f5:b0:5b:22:bc:d5:26:ce:06:27:91:
                    0a:11:90:9d:dd:14:67:7c:e9:d2:e2:7e:dc:d9:ff:
                    c0:e7:3c:8a:8b:f3:f3:7d:5b:dd:94:15:c7:06:f1:
                    34:0b:b3:5b:8e:74:ae:5f:86:2b:a6:43:84:4e:be:
                    8c:71:83:18:df:4c:30:22:89:be:8b:73:cc:2a:eb:
                    98:00:0c:8a:d9:8e:79:27:6f:c0:96:80:7c:26:73:
                    46:1a:a3:8d:70:b1:d4:d9:e5:48:b9:22:12:7b:e8:
                    fa:6b:36:c0:f6:ac:19:cb:90:c8:c3:b4:17:18:3b:
                    b3:c7:22:f0:e4:ef:47:2b:7d:ac:56:e9:9b:1b:64:
                    a0:57:e3:80:3e:62:09:7c:13:b1:0d:a5:27:7f:08:
                    fe:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CA:EF:B7:41:1A:9D:B7:DD:F2:D0:7C:55:0F:D0:71:FE:F9:D1:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dc49366c-f542-309f-99df-012d92f62b5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5800::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:30:5f:ea:13:15:d7:d3:37:77:4e:75:53:da:04:f2:8c:dc:
         a7:3a:4e:ab:7d:02:d9:db:d4:1f:37:ca:4c:3f:84:da:4c:d4:
         64:5c:c7:30:69:46:9a:7c:b7:1a:fb:18:16:d2:4d:51:01:83:
         62:99:3e:5b:9d:1c:a0:d2:a3:b6:fe:89:cf:43:2e:5d:7d:bb:
         d7:7f:69:2b:01:a9:05:1f:b6:bf:38:41:ff:58:cb:12:09:33:
         0b:e8:c6:48:a5:5b:d0:70:1d:e1:aa:62:a4:3c:08:21:a7:36:
         df:59:b4:b7:fe:ef:05:a2:1b:34:ac:b2:9f:bd:41:78:6c:93:
         53:ee:b5:2a:5a:39:b8:e8:f5:de:29:3e:3b:41:b9:9e:10:59:
         75:14:fb:e4:77:ec:58:de:7b:71:82:41:13:e7:8f:41:b4:c2:
         37:5e:d9:9e:da:9c:50:76:45:e1:15:3d:e9:3a:fc:91:28:ec:
         9a:07:af:17:4b:c6:6f:ac:40:13:6c:6c:96:89:76:26:b2:2d:
         6b:c0:4f:48:af:61:5c:88:97:46:32:6f:d4:d8:68:53:6b:e6:
         ed:8a:e6:03:9c:a3:f3:83:fa:e8:7f:c7:d6:2d:fb:99:64:63:
         71:e2:16:fe:ea:97:62:37:69:98:24:fa:a6:b4:bf:7c:15:6a:
         7b:7c:21:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:32:09 2026 by rpki-client