Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0cbf7607-cf57-3fe6-b44c-fcddbd36ad06.roa
File:                     0cbf7607-cf57-3fe6-b44c-fcddbd36ad06.roa (raw, json)
Hash identifier:          MGnG3groE+MDlX7mdNoys9W8nkHpK5mWwOnOl782oK8=
Subject key identifier:   2F:D4:AA:74:29:06:16:1F:F8:02:B1:10:83:F4:28:97:0D:55:93:40
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E815FA8EAFE39490AA4B44B60
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0cbf7607-cf57-3fe6-b44c-fcddbd36ad06.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     54113
IP address blocks:        2607:8940:4700::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:a8:ea:fe:39:49:0a:a4:b4:4b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=42bfe254-cf68-4df4-8704-7d0cd4c9fbcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:b2:90:dd:00:87:fd:6f:34:91:ca:e2:ed:
                    1b:32:4f:be:05:60:d3:56:a0:60:c4:29:fb:55:0f:
                    10:70:f1:31:81:03:f5:76:80:1f:35:79:e6:85:f9:
                    6b:8a:20:64:6a:b5:e6:92:a7:67:a8:b3:38:be:89:
                    8b:e5:21:fb:9e:31:10:78:f0:bd:5b:c0:85:58:b7:
                    b5:f6:0c:97:d6:6f:48:64:06:a4:12:37:31:0b:39:
                    6e:2d:4a:05:fa:31:89:6c:eb:a2:3f:d5:eb:20:a0:
                    e7:f1:54:70:d4:22:76:22:13:c7:60:c7:5b:f8:f5:
                    25:83:ce:cf:fa:87:8e:ce:7b:e9:e3:44:9a:99:12:
                    49:1f:87:19:1c:d8:81:ea:87:87:b8:4b:3d:10:04:
                    2e:ac:21:13:11:bd:8e:00:aa:9a:41:86:78:19:09:
                    99:d5:00:0e:43:0c:2c:a8:eb:3d:e9:92:fd:8f:c4:
                    23:c9:1d:e9:e8:61:08:91:1a:a9:f9:1b:eb:98:78:
                    d0:5f:de:97:9d:0b:0b:91:63:b0:1b:8b:a5:8d:41:
                    78:c3:9a:de:36:27:e9:d6:9b:41:e4:c9:55:66:06:
                    12:af:8e:65:82:17:30:2f:9d:0e:83:a8:10:29:ad:
                    da:63:6d:a1:ec:c4:35:48:d8:bf:7c:31:eb:cd:c0:
                    10:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D4:AA:74:29:06:16:1F:F8:02:B1:10:83:F4:28:97:0D:55:93:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0cbf7607-cf57-3fe6-b44c-fcddbd36ad06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4700::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:85:50:c0:dc:da:a1:24:1f:2b:d0:50:d0:9b:68:4e:61:88:
         a5:43:37:17:6d:ae:06:be:30:2b:fc:a5:2e:87:b4:99:19:5c:
         ed:c5:79:b1:84:af:33:40:7b:8a:21:8d:04:aa:a3:84:b6:09:
         39:9d:41:7c:7b:97:77:bf:0b:09:e0:ba:1d:05:c6:9c:39:64:
         b7:b3:cc:40:53:b9:d9:31:31:ed:b6:c8:f4:89:df:fd:c6:35:
         ff:7a:b6:db:34:42:69:8c:aa:53:13:82:c6:03:cd:b7:61:c5:
         61:e6:eb:1d:0e:15:98:e5:16:08:d4:ec:79:4b:99:a9:59:1c:
         13:c3:92:99:a1:43:df:a3:20:6d:93:74:8c:02:92:39:a4:53:
         f8:20:4d:43:cf:55:0a:f4:62:f4:d9:34:00:e3:17:ef:f1:0d:
         e2:97:da:88:04:ea:4a:a7:d1:81:75:77:4d:93:34:75:58:4f:
         84:28:70:e5:b3:69:ef:b0:b9:bf:2a:12:36:f8:f6:70:85:e1:
         4f:7b:45:f5:dd:fe:a2:c2:ed:b8:d7:a3:81:32:ca:ec:34:e8:
         a4:e3:17:ec:91:dd:d3:23:cb:43:71:1a:7f:11:ef:2c:3d:d7:
         81:46:15:81:78:9a:38:ed:58:84:c9:14:59:d1:54:c0:27:cb:
         9f:52:7d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:59:24 2026 by rpki-client