Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0f31411e-70c3-3a9e-9958-4b5524c9af43.roa
File:                     0f31411e-70c3-3a9e-9958-4b5524c9af43.roa (raw, json)
Hash identifier:          2vXHn56XD/AQ1BWLG4ZYqGr0RV71AOSd/+0ikTCD8Nk=
Subject key identifier:   C9:F0:83:6A:90:C3:C3:FE:99:A2:54:94:F1:52:A7:22:12:E7:95:76
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E815FA3BEA2C186448FDD4740
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0f31411e-70c3-3a9e-9958-4b5524c9af43.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     54113
IP address blocks:        2607:8940:55b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:a3:be:a2:c1:86:44:8f:dd:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=f989ca32-032e-4e8c-8bb0-9f3180fa810e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ba:3e:08:33:17:e3:84:e5:03:61:c8:8b:81:
                    da:60:4d:db:b0:6a:1f:40:e3:87:f6:93:75:13:f8:
                    42:1f:4c:70:9f:e7:3c:68:5d:dc:df:33:d2:b8:aa:
                    60:48:d4:27:92:3a:2c:ae:ea:68:18:a8:5f:da:21:
                    65:8a:1f:0b:24:da:11:35:2a:3e:39:7f:93:0e:e0:
                    65:52:7c:92:bf:e9:63:ff:7b:22:89:e4:c3:23:d5:
                    65:b3:09:e7:95:ba:9d:68:e0:f8:a1:9f:b4:4f:e1:
                    c9:89:a8:2e:6f:ab:29:2c:08:13:84:39:49:74:63:
                    5e:43:d7:fb:f6:ab:67:f4:96:38:00:2e:44:97:9d:
                    ee:ec:a7:e6:2c:0c:74:d4:1f:f0:06:98:2b:06:e2:
                    ec:5d:11:fb:dc:4d:fb:c0:bc:23:65:cd:76:c4:ae:
                    83:43:32:b5:29:8f:42:b5:a0:2d:de:8a:66:91:73:
                    ae:3a:6e:b7:c5:12:4b:28:58:1b:ce:ed:6e:06:54:
                    5d:4a:7d:b2:42:aa:dd:cf:0a:7f:7a:1d:d9:fc:0c:
                    cd:5d:fa:67:94:e4:39:4a:8c:8f:fe:cb:57:ec:90:
                    da:75:7c:7e:19:80:75:dd:b0:7d:cf:1a:62:59:1b:
                    c7:45:7c:e4:a1:21:49:01:56:80:2e:ec:b4:e7:b5:
                    4f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F0:83:6A:90:C3:C3:FE:99:A2:54:94:F1:52:A7:22:12:E7:95:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0f31411e-70c3-3a9e-9958-4b5524c9af43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:55b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:94:71:4e:2d:5c:22:2f:b2:89:e9:68:ff:2e:e4:00:b5:d4:
         55:54:d8:00:02:41:f5:02:62:00:c7:aa:b4:d4:af:42:e6:a2:
         1f:c7:3a:1d:78:5e:22:ab:82:ef:f0:f9:bf:cf:59:dd:83:eb:
         45:3e:21:74:a2:ba:3f:fb:fd:c0:f6:b3:21:d8:f1:12:4e:e3:
         4c:ac:14:26:bb:59:e9:fb:37:60:b0:32:a2:72:7b:f0:cf:3d:
         0e:11:ec:be:34:96:c6:18:19:78:9d:30:dd:fa:3c:d0:db:ad:
         68:02:43:da:21:3b:02:78:df:83:c2:35:40:2d:87:76:c7:aa:
         33:34:bf:da:14:bd:48:9b:f8:7c:a4:b0:f4:0b:bc:04:68:a8:
         2c:60:f6:47:13:de:2b:17:8a:23:97:ed:2b:be:23:6b:05:ea:
         9a:03:69:14:19:1c:1c:88:ae:d1:52:c4:eb:47:40:72:05:57:
         39:9e:34:97:8a:fe:d1:f8:2a:d8:9d:83:3b:2f:56:47:bc:71:
         ce:6b:96:8b:2d:95:6c:36:48:cf:42:5b:2c:2d:23:43:19:45:
         40:9d:2d:6b:b4:92:9d:dc:d9:7c:f5:83:a7:a8:cb:4e:6a:dd:
         a5:fb:ff:3b:66:3d:b5:e0:25:7b:05:af:12:2a:4c:a7:70:35:
         c4:57:15:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:00:01 2026 by rpki-client