Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/00c5af8d-1f47-3b57-9ef5-7f235ae40355.roa
File:                     00c5af8d-1f47-3b57-9ef5-7f235ae40355.roa (raw, json)
Hash identifier:          pQRciJ/yI7B+cUOFpmaz6fLTGwbPgg5Abo/wybiZRKc=
Subject key identifier:   D7:9F:F4:DF:33:62:D4:80:F6:F9:CF:AD:4E:46:66:73:C8:39:62:71
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E815FA203C425A93D0756CF00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/00c5af8d-1f47-3b57-9ef5-7f235ae40355.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     54113
IP address blocks:        2607:8940:56e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:a2:03:c4:25:a9:3d:07:56:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=6e8b68c9-647a-4016-a68e-b4c52af8a53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:1c:4c:60:b0:c3:81:f0:a2:32:59:90:67:
                    62:ac:82:9e:b7:73:12:b4:e7:f9:95:c8:f1:c4:92:
                    ea:33:fa:4e:c4:90:e8:8f:01:48:03:23:8c:11:d5:
                    3d:3a:18:d0:e0:27:30:6d:a0:a5:e6:f1:50:81:a0:
                    33:d0:95:8c:59:31:31:ad:e2:57:94:38:5a:0a:23:
                    6f:68:66:62:51:42:cc:07:59:7e:57:94:5b:0e:b0:
                    84:48:82:f1:5a:fa:c9:45:94:36:88:98:cd:ee:ee:
                    59:ff:0f:0c:ec:d6:30:bf:2f:69:39:d2:d8:48:55:
                    ff:2c:22:ad:ca:7b:a6:7d:87:68:f0:b6:d6:a5:30:
                    28:fb:13:47:ea:6e:e9:5a:ea:0f:71:00:c2:db:16:
                    84:8d:3b:92:8f:82:59:a8:2a:7e:7d:11:da:50:3c:
                    d5:92:6a:9a:ad:1f:c1:ea:f3:bc:b4:6d:dc:8d:bd:
                    af:0b:7e:df:01:5f:3f:09:4d:46:ba:be:e5:67:dc:
                    7f:b0:96:e3:f2:76:e3:c8:b7:2c:89:dc:4c:55:0a:
                    7f:ef:26:17:3b:d4:e3:9b:ff:12:49:70:a2:53:2d:
                    63:a8:e0:c8:2a:f4:6c:e3:68:a7:a3:1e:9e:46:10:
                    f2:65:2b:fc:a0:55:56:64:b1:e8:71:49:1d:01:b7:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9F:F4:DF:33:62:D4:80:F6:F9:CF:AD:4E:46:66:73:C8:39:62:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/00c5af8d-1f47-3b57-9ef5-7f235ae40355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:56e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:37:51:1b:b1:81:47:56:35:51:fc:9e:93:b9:f9:23:11:cf:
         fd:d2:97:5f:5f:db:da:c4:bd:78:07:df:54:b0:0a:1c:c8:d2:
         da:8c:17:87:11:38:8f:0d:d4:af:74:5c:0e:f8:1d:7d:df:44:
         99:31:bc:09:0a:a7:38:06:51:b5:bf:87:39:34:e4:10:ff:ac:
         9b:44:36:57:95:23:b5:8b:2c:e4:6c:0b:5e:fb:43:2d:d9:9c:
         23:f4:c2:08:07:4a:a9:c2:73:69:57:b8:73:14:f1:b6:72:12:
         40:63:29:4d:a6:66:e1:a3:84:aa:f1:0a:78:bf:6c:5c:14:fd:
         f5:6f:5f:96:4b:9c:49:ce:63:a1:33:ce:2f:fb:67:f6:d2:5c:
         58:71:d1:bb:54:6f:7a:5c:85:e3:e3:3c:1d:36:8f:5c:ca:27:
         a5:51:9e:71:bd:fa:51:7a:94:2c:9a:c4:97:84:30:a8:80:ca:
         dc:d5:ef:3f:2f:d7:5b:ba:84:f3:16:05:d2:a5:a6:36:36:36:
         30:63:67:e4:ec:3e:9a:d7:d6:82:00:96:d7:5e:a5:7d:63:27:
         a4:e8:ab:10:7b:8c:64:fe:64:cb:de:8d:bc:95:53:01:a4:f6:
         27:a7:de:15:5a:db:d0:7d:5a:fb:ac:62:90:ae:54:76:ed:58:
         8a:4f:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:58:20 2026 by rpki-client