Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/72cd7136-b20d-369c-ad1c-512706087b6d.roa
File:                     72cd7136-b20d-369c-ad1c-512706087b6d.roa (raw, json)
Hash identifier:          iGo1uKxAkXBHdFBVs6TCod5jD853m1AD92O75FWow0E=
Subject key identifier:   62:D9:5C:1F:33:CA:3C:3E:C7:C3:56:85:FD:CB:1B:91:E3:6F:75:17
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E815FA361F7646FC008AD0700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/72cd7136-b20d-369c-ad1c-512706087b6d.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     54113
IP address blocks:        2607:8940:59f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:a3:61:f7:64:6f:c0:08:ad:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=2088cfdd-9ce9-4b74-aef2-f0b0985a645e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:48:f3:dc:58:85:46:aa:e0:da:60:f5:93:
                    23:ef:65:27:1f:c9:81:bd:12:ef:10:5e:8f:1f:da:
                    be:4f:33:53:c2:42:ed:aa:31:69:2d:5d:ee:50:7f:
                    b6:bd:3f:60:7a:f3:42:7b:a7:bc:8a:99:45:50:ae:
                    27:49:25:7d:24:83:ca:f9:f1:81:07:6c:cc:5f:ab:
                    19:61:be:68:7d:8a:59:28:d7:f9:12:6f:07:f4:57:
                    4d:2f:1d:04:fa:58:0c:ee:1c:74:7c:cd:dd:93:ee:
                    dd:27:31:63:0e:a1:ca:45:7d:4f:ca:b8:99:10:80:
                    b1:36:42:49:8c:66:72:96:18:07:be:17:13:b7:51:
                    65:e1:5f:d4:af:b2:da:aa:07:53:17:bd:b4:bb:b8:
                    f1:a2:da:0c:dc:14:a3:f8:06:2b:ae:bd:bc:f7:40:
                    68:bb:64:78:47:17:51:09:f1:fa:0b:30:ed:1e:02:
                    47:ac:09:f5:fa:b0:f0:d0:13:ce:fa:cb:8a:f5:ad:
                    c8:97:86:03:4e:57:56:c9:27:94:56:dd:80:ff:8a:
                    35:31:24:96:40:5f:3e:95:23:15:2c:09:84:98:be:
                    67:1c:c8:03:e2:d1:52:61:53:6a:62:0f:70:4e:e0:
                    7a:b4:ad:d1:90:20:7d:81:27:30:86:d9:e9:5e:93:
                    d9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D9:5C:1F:33:CA:3C:3E:C7:C3:56:85:FD:CB:1B:91:E3:6F:75:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/72cd7136-b20d-369c-ad1c-512706087b6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:59f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c9:d5:0b:00:fa:b8:7b:d4:12:a7:39:54:a0:85:14:c0:06:
         9a:81:d4:b0:4b:91:df:e2:d0:ed:19:77:cd:9e:e6:ed:76:43:
         97:db:aa:43:6d:54:2f:3a:e6:9e:14:12:38:2f:c4:53:99:36:
         6d:f9:c9:17:13:22:2d:2e:eb:0e:c5:dc:ac:4d:30:5c:a9:47:
         f2:f6:a2:45:4f:dc:09:b1:48:b3:e4:bf:b6:51:b0:f4:f5:88:
         1f:18:40:fe:f4:c2:88:a4:79:7a:4e:ec:bf:dd:59:b8:65:43:
         4d:dc:73:ad:2d:2b:eb:49:e9:3a:7b:e9:3c:50:e5:b1:94:05:
         e6:e5:d9:08:45:96:62:01:7f:52:72:e8:da:eb:b6:92:aa:db:
         fd:40:d4:ce:a9:de:15:96:de:62:86:59:96:93:0e:e4:bb:6c:
         52:12:52:5e:45:87:a4:2d:d6:54:6f:34:ce:00:55:50:61:44:
         09:80:d6:8c:40:c6:56:21:c4:d4:fe:50:96:0a:3f:57:1b:18:
         d5:d1:be:59:fe:14:3d:57:c4:99:af:5a:d1:35:b8:92:5c:82:
         87:a0:89:72:3c:9f:44:f8:78:1b:70:9f:93:de:dc:f7:6c:e5:
         bc:49:6d:17:ec:42:b2:91:1f:5b:00:24:3f:94:4f:75:37:55:
         89:4a:27:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:58:42 2026 by rpki-client