Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/31a985d9-b067-3e1b-b9e0-5e1ab79f50cc.roa
File:                     31a985d9-b067-3e1b-b9e0-5e1ab79f50cc.roa (raw, json)
Hash identifier:          Tzzrn5K+r3WCKImUSwdNs5En8RvGgBeFrwJFx71BFsU=
Subject key identifier:   5F:97:9A:30:44:48:21:35:3B:6E:81:87:69:A8:15:72:98:69:C5:BE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11AC878F43CA1EF69996600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/31a985d9-b067-3e1b-b9e0-5e1ab79f50cc.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:4a80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:c8:78:f4:3c:a1:ef:69:99:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=3b502f59-05b7-4eb5-b988-bbd17a5b3651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:00:4e:1e:d5:b1:9b:03:9c:26:90:59:35:
                    52:82:00:f8:86:d3:1a:8b:78:11:f1:12:7b:36:00:
                    0c:55:00:94:df:fa:4b:de:02:69:af:51:d7:e4:ee:
                    c0:7e:60:b5:2f:81:1b:35:24:35:f8:ec:58:1d:c3:
                    10:ce:6f:24:5a:a4:1b:8a:d8:36:0b:5e:b7:0c:af:
                    c8:1c:aa:82:dc:5e:fe:db:60:1b:39:df:65:4e:77:
                    6b:1f:79:91:78:0e:10:2a:06:b5:8b:0b:32:e1:10:
                    92:77:f6:6c:02:05:6e:52:54:89:d1:f0:bd:a6:5c:
                    23:77:80:45:3a:c3:e6:33:0c:e8:92:38:25:68:55:
                    24:c4:48:df:55:4f:e9:48:9a:46:0f:c2:1e:4c:f3:
                    f1:f1:99:2a:08:b8:c5:3b:5d:be:98:d3:bb:ee:1d:
                    40:24:cf:ef:a6:0d:50:4d:b5:45:32:f7:b8:7a:18:
                    a5:57:08:6d:11:71:e4:77:20:c4:e0:30:43:1a:8b:
                    68:c3:93:13:b7:14:4a:51:d8:87:cb:d6:1a:61:e4:
                    7a:f4:d2:51:e0:20:5f:f1:8f:10:0d:73:35:8b:a7:
                    c3:55:4e:6a:fc:c0:b9:3d:20:ca:a8:af:b9:44:d0:
                    e5:60:f4:56:ea:c2:11:da:7d:7b:24:f9:7e:a4:f8:
                    b9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:97:9A:30:44:48:21:35:3B:6E:81:87:69:A8:15:72:98:69:C5:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/31a985d9-b067-3e1b-b9e0-5e1ab79f50cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4a80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:41:07:f5:9d:0d:9f:88:47:31:cb:e3:4b:7d:51:81:2f:f2:
         12:bc:9c:bb:24:03:dd:5b:df:34:c5:60:23:eb:6e:29:45:17:
         74:5e:af:31:d8:72:eb:5c:e1:1e:32:ec:d7:57:bf:fe:85:3d:
         55:74:08:18:85:f6:4f:c6:10:1c:e5:f1:7a:a2:af:8c:a1:38:
         f0:95:45:9c:df:e2:7f:b5:ce:00:49:fe:29:99:08:c3:6e:cb:
         ca:b1:fc:9d:fd:fd:4d:ad:93:b9:fd:94:d2:73:5f:46:0f:af:
         68:07:82:c8:e1:96:6e:54:dd:03:2b:d6:7b:8f:41:38:7d:bd:
         51:e8:c4:f7:db:79:31:22:ab:3d:f6:ce:db:44:0c:56:af:5e:
         03:4b:f2:fc:31:88:80:02:91:84:0c:4a:f0:5c:7c:87:29:0e:
         e3:c9:02:bb:49:3d:77:75:61:c5:63:d3:e3:ea:c6:03:8e:2e:
         a3:da:35:4f:42:b8:5f:ac:2a:0e:68:6f:39:ad:a3:39:7a:9c:
         11:5a:32:a9:23:0a:c7:95:49:82:03:09:68:ef:09:6d:68:62:
         fa:49:6d:93:02:18:c9:22:84:15:42:32:cd:4a:45:49:80:a1:
         b9:f1:51:89:82:16:72:5a:61:02:b7:60:59:52:e9:1b:2b:57:
         11:75:e4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:51:05 2026 by rpki-client