Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f545e7aa-8036-3360-bc8f-ae465cc07333.roa
File:                     f545e7aa-8036-3360-bc8f-ae465cc07333.roa (raw, json)
Hash identifier:          X4j/rF+mOGlXTANPCAmBSzxxF7wcMZ8mrsURCA09hRw=
Subject key identifier:   09:AB:59:16:97:DC:3C:5C:61:B5:13:E6:8C:FC:1C:3D:9B:84:36:91
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11AC30DB7DF0DDCE679AE00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f545e7aa-8036-3360-bc8f-ae465cc07333.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:5850::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:c3:0d:b7:df:0d:dc:e6:79:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=ab34ddef-1d3e-4542-aaa2-440925b8f82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3d:cf:e9:19:d0:82:4b:35:bb:09:0e:6c:45:
                    3c:8a:28:93:af:8d:b1:33:62:29:08:09:c1:25:dd:
                    ca:79:d9:ea:27:a5:1f:95:fc:ec:59:cd:7c:ca:26:
                    78:72:87:4d:19:3c:64:66:bc:57:55:d9:38:8b:81:
                    1b:9c:a6:5d:fe:08:b8:f4:33:3b:b5:47:5f:77:b4:
                    c9:c9:d1:6d:8b:74:c6:67:27:c3:5a:6b:46:46:96:
                    2b:69:86:6a:98:80:c0:a2:06:54:ab:22:77:cd:ce:
                    cd:3a:65:3b:be:3c:e6:69:c1:e3:25:20:1d:52:f7:
                    fe:32:ed:21:d2:67:9b:e6:be:eb:a5:9d:03:2c:f3:
                    9a:b5:10:ad:53:3a:d6:80:65:50:76:72:94:a6:ac:
                    b9:5e:b9:06:53:92:33:f6:6d:b6:2c:1d:bf:89:ec:
                    79:d0:3c:4d:a1:18:38:94:53:e0:54:11:85:ab:ab:
                    3f:18:56:f5:f8:5f:40:93:b7:f4:43:3b:86:51:d9:
                    97:20:3e:4f:60:dd:be:ea:88:dc:75:26:9d:85:8b:
                    d6:44:75:b4:cd:27:9d:11:71:c7:1d:62:ae:a1:06:
                    20:7f:17:fd:2d:c4:ca:13:24:34:c6:c9:1f:eb:c8:
                    37:39:1a:63:2f:ef:c0:da:ef:98:b4:2a:80:fa:21:
                    48:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AB:59:16:97:DC:3C:5C:61:B5:13:E6:8C:FC:1C:3D:9B:84:36:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f545e7aa-8036-3360-bc8f-ae465cc07333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5850::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:3d:18:d0:41:3c:ac:72:06:bc:ee:ee:e9:a6:23:3e:70:82:
         99:ab:8a:7e:cf:10:b7:6c:db:93:47:99:2c:32:85:93:48:99:
         7e:c5:d9:52:77:dd:3f:5e:ef:5f:fe:f0:d6:9f:16:a5:fd:c7:
         d4:49:6f:02:f3:1a:ea:e8:a1:29:3b:d3:56:7c:ee:91:1c:24:
         f7:e9:b4:50:02:c7:19:c8:23:39:7c:de:b0:82:bf:35:e3:f0:
         e8:cb:59:2d:90:59:6a:5a:42:d4:b1:b3:bd:43:cc:15:7c:2a:
         d9:77:34:ee:91:d4:48:f5:84:e3:0f:df:ce:d8:55:24:db:9c:
         e8:80:51:f2:0e:aa:9a:09:11:5e:c4:eb:93:8c:54:56:ac:e5:
         bb:21:af:a0:58:ba:19:ac:11:92:69:a6:65:60:98:c9:c8:e2:
         88:3b:d6:56:bb:27:61:b9:f0:a6:62:57:2d:e4:67:1f:f9:31:
         e8:de:10:fa:f7:ee:07:dd:e0:7e:6b:60:d4:4a:e2:eb:eb:13:
         1e:47:f3:66:be:2c:7f:f8:21:4e:d3:ba:9a:ab:84:87:66:77:
         1e:35:58:ff:77:2e:f7:53:01:73:51:05:ba:ca:2b:77:40:72:
         2d:16:d7:7e:de:4b:f9:0a:18:86:d3:6f:03:68:42:07:57:bf:
         4d:56:0d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:27 2026 by rpki-client