Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7b066387-9ef6-334c-b412-45b617c6cec2.roa
File:                     7b066387-9ef6-334c-b412-45b617c6cec2.roa (raw, json)
Hash identifier:          dU8TphE5+xfX19GxHQTna48wWhOgbQjKieRIY3Cx9ys=
Subject key identifier:   89:73:0C:24:77:5E:72:C1:B0:AA:A8:AA:02:C5:F8:EB:37:05:80:8E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E5084A70C18A0F53C8FABB1A0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7b066387-9ef6-334c-b412-45b617c6cec2.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     54113
IP address blocks:        131.125.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:a7:0c:18:a0:f5:3c:8f:ab:b1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=ddbf856c-a0a9-4924-afc9-a6de7d7137e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:99:03:24:58:b1:2f:94:b1:ae:ef:f4:8f:b6:
                    92:fc:9f:4f:08:4d:61:6f:e9:a9:cb:f6:84:9a:6d:
                    69:e8:ba:d3:c6:39:99:9b:a6:d3:47:7a:33:3a:04:
                    3c:37:f2:d5:cd:f8:0e:a9:69:56:cd:27:22:d8:ab:
                    ec:d2:24:89:eb:76:c1:57:12:2d:9a:ab:89:f8:98:
                    9d:cd:c6:3e:4c:34:90:57:4e:3d:c7:fe:3f:2a:c8:
                    b4:26:b4:80:39:86:b1:b8:f7:ed:6b:dd:eb:5f:38:
                    df:ed:ad:5e:ed:7c:e1:cf:37:1b:7d:07:50:db:6f:
                    1b:83:fd:44:1f:0f:10:cd:1e:93:fe:6c:78:6d:c6:
                    61:b2:1b:d5:0e:fe:42:e2:5a:d0:ba:14:c3:e5:e4:
                    50:99:49:33:fd:f6:33:ac:c2:69:30:4b:3b:8e:f8:
                    20:10:b2:a8:36:b3:74:43:b6:f3:ba:de:8e:57:cb:
                    00:ee:64:74:e7:d4:37:d8:53:b3:bc:3d:d4:aa:0e:
                    49:60:0e:d1:ad:ad:83:c9:ad:30:d9:d2:9b:1a:14:
                    63:90:5e:98:0a:70:86:13:b0:80:95:4c:21:e6:30:
                    94:48:b4:6d:2d:52:04:e3:90:4c:15:d4:43:39:7c:
                    c9:18:72:c3:c4:88:b6:88:15:ee:80:ea:ea:dd:d5:
                    a4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:73:0C:24:77:5E:72:C1:B0:AA:A8:AA:02:C5:F8:EB:37:05:80:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7b066387-9ef6-334c-b412-45b617c6cec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:14:73:09:37:12:a3:b8:01:bc:10:1a:72:80:8d:fe:11:f0:
         03:5b:08:db:b1:41:fa:f9:69:e7:f8:8c:12:75:64:be:af:e6:
         c8:02:59:69:01:b5:d9:15:ea:1b:03:ff:ae:8e:67:e0:e1:71:
         1e:6a:59:9b:04:a5:57:e0:a1:86:67:5c:29:a0:36:60:8f:92:
         f1:90:f4:cf:1c:d5:f1:8f:e4:e5:91:3c:fb:7a:41:61:d5:fc:
         95:e4:df:e2:a8:e7:75:7e:0e:a8:19:63:ad:7f:3f:d5:1a:30:
         06:49:fd:72:d1:4f:6c:b6:75:e0:49:70:88:7d:e6:77:f4:2d:
         67:05:d1:8c:ba:51:a5:8a:8c:74:0b:22:53:8d:44:b3:7e:88:
         5d:56:4c:93:5f:c5:95:70:fe:70:6e:b9:81:29:39:cf:fb:63:
         02:2d:77:84:3e:7a:a6:de:d9:ac:45:87:66:5c:f2:c7:c0:7c:
         05:14:26:9a:4b:7c:c8:99:e9:7b:f3:74:76:d2:55:ac:f8:13:
         48:d9:2f:7b:d1:7e:dd:48:b0:06:61:b3:d4:1e:ce:c1:8f:3d:
         aa:2c:e6:83:fe:19:08:ef:92:ff:4f:03:91:59:ef:21:02:97:
         37:26:b4:1f:8a:1f:16:ea:cc:79:f2:17:99:68:dc:c7:33:dd:
         82:d9:0f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:59:53 2026 by rpki-client