Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fbacbf1c-5920-3fb9-9bc9-8bfce7ad9227.roa
File:                     fbacbf1c-5920-3fb9-9bc9-8bfce7ad9227.roa (raw, json)
Hash identifier:          GnJhpPsxG8kM9OhnXfug6nhswVwQ+dmpWavhjAXoj+Q=
Subject key identifier:   1C:00:94:98:E6:AB:D0:99:93:48:7A:2E:C3:4B:F9:E5:39:61:3B:A0
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11AD26CD6019A325E332900
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fbacbf1c-5920-3fb9-9bc9-8bfce7ad9227.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:5be0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:d2:6c:d6:01:9a:32:5e:33:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=0e971aea-2477-4dc6-b411-64f4fcb9bb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:32:f5:15:72:a5:40:2f:cf:0c:50:b1:21:
                    1a:13:42:5a:6f:68:75:c3:35:c3:9c:ac:cf:aa:68:
                    05:5f:ee:cf:e1:06:b0:e5:fb:bd:a2:fe:cb:f9:25:
                    d1:a2:54:4a:f2:03:37:c8:d5:8c:c2:4a:c9:f1:d4:
                    9b:53:d0:6f:db:1c:c0:1b:68:63:a0:0c:e6:7f:73:
                    ab:68:bc:69:0b:f9:bd:c0:91:f3:99:51:48:19:f7:
                    8e:a9:57:65:89:28:ef:f9:10:6b:6c:e0:a2:1c:94:
                    a2:f1:eb:79:50:25:d5:e0:e6:9a:25:44:52:84:59:
                    a4:cd:e6:4d:06:2b:71:88:f6:01:0e:02:0b:43:17:
                    27:06:18:c7:6a:21:c5:6b:61:5f:de:84:93:49:ba:
                    fd:db:25:00:47:be:ae:b1:58:63:8f:e3:d5:9f:29:
                    a2:d3:0d:b4:2a:a7:db:87:da:14:22:98:c7:72:51:
                    b4:79:e4:47:b7:b1:20:92:0b:86:8a:5b:fa:b8:3c:
                    c3:28:51:0d:b6:4a:52:88:0d:61:ee:c7:bc:1c:99:
                    5a:28:57:da:da:bd:0f:c2:5f:f0:52:e4:34:b4:bc:
                    14:29:f9:7a:49:08:7f:73:e3:28:8c:d1:55:cd:1f:
                    6f:5e:30:61:b0:58:29:6a:10:06:cf:88:37:a4:e2:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:00:94:98:E6:AB:D0:99:93:48:7A:2E:C3:4B:F9:E5:39:61:3B:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fbacbf1c-5920-3fb9-9bc9-8bfce7ad9227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5be0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:29:0b:94:8d:f6:95:4a:41:d2:1e:59:2a:4c:a3:78:a5:4e:
         27:d1:25:75:fd:a5:c7:be:cb:85:72:38:c2:4a:20:eb:58:1e:
         5e:80:ae:e5:86:b8:d8:18:02:f8:20:6c:d8:ac:51:c6:95:97:
         8b:3f:e8:65:92:87:8c:67:d2:3d:01:a4:7d:e3:57:d0:a9:5c:
         47:dc:2e:f4:15:cd:cf:19:6e:bb:87:24:c2:fa:e5:69:db:58:
         2f:b8:98:4c:f3:cf:7e:c8:58:4c:36:3c:1f:21:17:90:da:44:
         40:14:41:80:57:79:b7:ad:d6:65:2c:53:7b:2e:05:b2:ad:6b:
         62:10:0f:d8:c7:06:b1:99:aa:87:db:93:57:d5:6f:82:e5:59:
         b0:11:66:c4:6c:62:08:7e:f8:1b:49:9e:6e:51:ac:3f:c6:5b:
         2d:61:38:4b:ea:3d:cd:96:e6:f8:b3:20:6a:73:1c:94:a3:3a:
         6b:68:9c:62:b2:a4:81:95:b6:e0:4a:4e:64:6e:02:36:34:28:
         9b:45:25:5a:dd:2c:0d:2a:1b:c8:03:4d:86:89:01:c0:bb:20:
         af:9a:13:ba:22:9c:d9:7d:b6:a2:22:9f:30:e5:5d:b8:ed:dc:
         d2:50:37:89:54:76:1c:a7:b6:1e:7f:5c:a6:56:d5:03:f3:69:
         e6:34:a0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:12 2026 by rpki-client