Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8f2397dc-8726-30d2-910b-36ac723473ed.roa
File:                     8f2397dc-8726-30d2-910b-36ac723473ed.roa (raw, json)
Hash identifier:          Lv7+mY3cnU2IwXelWc9CbFAnKEZh9ftfvoR+G8aedcY=
Subject key identifier:   DE:3B:1F:3E:0B:76:45:BD:62:2B:A2:27:42:67:D1:03:C9:A5:DE:23
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E815FADD0E9399B3420CB1000
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8f2397dc-8726-30d2-910b-36ac723473ed.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     54113
IP address blocks:        2607:8940:4d80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:ad:d0:e9:39:9b:34:20:cb:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=d444513b-764b-4cf8-b770-c8887aee78ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:99:60:f1:6a:e1:eb:a6:be:4f:c7:ec:37:
                    ea:dc:9f:0d:ec:3d:e2:cc:0b:09:65:ed:01:3e:b4:
                    58:e2:cb:25:5d:35:c2:66:a3:fa:07:1a:5a:64:e0:
                    49:3f:a1:bc:48:c8:eb:8d:58:4a:02:68:4f:31:d1:
                    5f:c5:42:25:2e:09:fc:06:9f:7a:0c:55:12:e5:cd:
                    dc:43:3d:83:58:40:94:25:94:fb:f7:bf:b4:6b:08:
                    44:64:30:89:75:1a:59:e6:e6:b4:a9:99:9f:10:ee:
                    e9:35:d1:32:fb:14:6b:de:81:07:79:91:59:3f:50:
                    b5:a6:84:21:c2:7d:cc:6c:d0:0c:1f:da:7d:10:33:
                    f7:72:01:ee:3b:b9:8f:96:d6:ea:2e:f5:b1:53:00:
                    82:95:7e:6a:85:c1:aa:e9:80:ec:9a:da:c4:f9:53:
                    90:17:b2:2a:5c:23:9d:79:5d:73:49:d9:ac:6f:9f:
                    e8:24:56:1c:99:54:7c:29:6d:fd:63:4f:78:94:53:
                    e9:d7:8b:ba:fe:f1:1d:b8:72:c0:40:ce:44:11:31:
                    b3:79:27:71:97:f5:05:98:21:0b:3c:a9:45:ab:d9:
                    f9:cb:1a:4f:44:e2:5f:55:4b:84:26:6a:ab:18:95:
                    4c:de:4f:24:59:2a:aa:32:78:f0:6d:23:bd:90:2b:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3B:1F:3E:0B:76:45:BD:62:2B:A2:27:42:67:D1:03:C9:A5:DE:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8f2397dc-8726-30d2-910b-36ac723473ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4d80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b5:33:03:3b:b7:a0:7c:df:dc:ad:52:f4:ab:fb:ef:6b:fe:
         37:2e:01:9b:a6:1d:79:cb:34:8b:ce:99:d7:ea:28:e1:09:1a:
         0b:9f:0c:1b:64:a7:70:a3:53:3b:04:9c:eb:8d:70:a9:1e:6c:
         20:02:db:cb:c7:a5:5c:53:cd:21:1a:f6:f4:26:cf:6c:be:7d:
         e3:c1:a8:0f:32:21:e9:f9:58:d3:1f:81:84:15:4a:45:13:16:
         4f:29:32:c7:2a:ce:4a:62:72:a6:65:f0:a0:2f:5d:2b:9a:26:
         b4:9d:8c:2b:b0:2a:b7:cc:a9:46:f1:ac:19:c8:70:2f:4e:03:
         a6:1d:56:31:55:e0:dc:da:67:85:d5:bf:86:f8:2e:70:6b:e0:
         68:54:12:5c:36:24:81:3f:7e:c0:31:30:0b:74:51:b0:e4:27:
         31:1d:9f:70:43:5f:3f:0f:5d:94:fb:6a:0c:5c:f9:a1:2c:e8:
         4a:43:dc:78:8e:7a:aa:5a:29:80:f0:d7:c3:5d:4f:ee:2c:fa:
         0b:66:93:44:78:5c:60:1d:00:46:d5:8f:46:0a:0c:b2:0d:29:
         21:e4:06:73:75:e8:62:78:25:7c:60:31:af:a0:b9:c9:86:9c:
         50:f2:01:01:82:c8:96:48:2d:92:84:e7:e7:43:29:9e:17:da:
         bb:92:4d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:58:38 2026 by rpki-client