Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f38a706d-f7cc-35a3-83c2-1f7535910e40.roa
File:                     f38a706d-f7cc-35a3-83c2-1f7535910e40.roa (raw, json)
Hash identifier:          uUDi9E5n1n0bb1v4OFqmN4ZL+dLVQg01+memf2q3KeI=
Subject key identifier:   B7:C4:50:58:E4:4B:AA:11:48:85:0B:E7:56:68:6C:84:EE:36:1E:A6
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11ADAD7B0AF02D75CF3B000
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f38a706d-f7cc-35a3-83c2-1f7535910e40.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:5e70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:da:d7:b0:af:02:d7:5c:f3:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=58427186-001b-493d-91e0-227c666eebd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:7a:c9:6a:df:1a:5d:46:c7:bb:2a:c8:d3:
                    28:77:97:c8:f4:ec:42:30:cb:41:a3:00:0d:0c:10:
                    14:61:07:73:5b:c2:f6:fd:a9:c9:3d:f1:91:62:1f:
                    29:c7:12:16:80:42:e8:1e:39:e1:8b:2b:de:57:17:
                    23:3c:3f:46:5b:41:54:ef:8a:5c:b9:0c:61:95:ab:
                    3e:d9:2f:e8:d3:ca:82:7d:4a:67:f1:cd:fc:97:2a:
                    bb:88:7e:8f:26:8d:00:29:87:8a:8e:12:b5:b6:00:
                    d9:9a:cf:45:62:32:24:97:a7:a0:18:a4:3a:4f:24:
                    7c:b6:3f:ee:b9:d5:22:ae:49:0b:06:88:a8:99:e1:
                    f4:b5:ce:16:82:c4:51:75:72:01:56:a4:5a:09:bb:
                    45:c6:77:aa:44:68:03:ad:c8:6b:59:6f:f9:54:ef:
                    49:71:06:67:f9:e9:db:0a:f0:3a:c9:d8:d9:a5:61:
                    f9:86:68:b8:1f:26:e8:11:db:b3:1d:7a:60:a7:87:
                    0a:3c:01:f7:1c:4e:a1:e3:69:6a:e1:e4:df:5a:b2:
                    f1:52:2d:ce:de:df:d7:27:e5:e8:89:e2:ca:b0:c5:
                    24:de:87:d2:1c:52:35:75:4e:d1:be:3d:8d:40:09:
                    ed:6d:46:06:ff:e5:1a:95:a8:e5:d6:66:15:41:4f:
                    30:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C4:50:58:E4:4B:AA:11:48:85:0B:E7:56:68:6C:84:EE:36:1E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f38a706d-f7cc-35a3-83c2-1f7535910e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5e70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ee:e5:10:f2:c0:9c:10:a9:90:4d:69:36:75:95:13:17:55:
         dd:d3:26:93:7e:4d:7f:4c:e2:f7:0f:e6:d0:14:20:95:47:65:
         bb:8a:24:85:c8:38:99:66:ca:c9:7a:1a:f6:63:e4:2b:72:ac:
         34:c9:62:3a:49:26:8e:b4:f7:7d:4a:35:eb:e0:bc:1b:b3:da:
         7c:9e:c3:12:d1:2a:e0:3e:16:e9:ff:02:64:c3:6b:c6:0c:00:
         94:ac:cb:dd:19:4d:e0:f8:55:a0:ef:c8:c7:dd:c3:32:37:fa:
         bd:80:f8:8b:88:6c:44:d4:79:ea:f2:e0:e1:bd:7b:19:16:2b:
         b4:f0:f1:33:94:a3:9a:9b:4b:d9:a1:73:38:d9:95:82:4b:b4:
         e6:04:f0:df:1f:5a:75:6e:38:c3:d2:a1:65:70:38:29:fc:94:
         f4:dc:44:fa:ab:12:36:e1:8f:29:50:f3:01:dd:94:92:65:10:
         c9:1c:00:cb:d9:32:9b:3c:94:04:f4:22:3a:81:47:43:df:cd:
         0c:02:bf:69:a3:71:37:a4:cc:b5:4d:30:8f:72:76:82:13:82:
         9c:7f:4f:c9:f1:b0:2d:5a:e6:bf:11:53:34:8d:d7:48:39:98:
         7d:ca:54:68:67:7b:59:26:01:2e:97:bc:10:b2:d8:38:60:01:
         29:f9:ae:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:37:05 2026 by rpki-client