Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa
File:                     9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa (raw, json)
Hash identifier:          4Kryhp3YT1m30GIALNcoj6WSH8+frH+HxgC04F3aw4A=
Subject key identifier:   90:B9:71:7B:D4:B1:A2:E2:B1:FC:4A:79:61:CC:10:87:D6:94:0C:7D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E5084A795CDE92582FCF2F040
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     54113
IP address blocks:        131.125.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:a7:95:cd:e9:25:82:fc:f2:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=c67259cf-54ad-49df-8b9c-0bf4292df165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:45:41:cf:e8:ab:93:61:03:a1:fe:63:5b:51:
                    41:b5:83:a9:71:c7:36:cd:15:63:1b:0c:41:14:07:
                    36:67:1d:c5:23:8b:27:bf:cb:9c:e2:f5:3c:84:b4:
                    10:42:08:e2:7c:26:9b:de:b2:60:4c:aa:ba:64:1b:
                    1c:64:6b:30:da:50:41:10:79:f0:46:40:74:20:68:
                    2f:ba:2b:e2:f9:83:c3:35:b0:32:c9:7c:72:98:85:
                    3a:61:2a:ff:41:8e:93:c2:94:16:36:de:1b:3a:44:
                    a6:06:06:6d:61:c3:7d:1e:7c:54:e7:0c:01:b4:92:
                    9e:3d:ef:12:84:fd:0a:19:69:c7:26:81:39:cf:2b:
                    11:25:ac:96:08:cb:1d:36:c6:2d:1f:6e:e0:9a:8c:
                    39:5d:27:da:4b:ef:25:ea:18:e9:15:5b:6c:48:36:
                    43:19:2f:04:b7:0a:27:f7:24:47:78:e1:bd:32:b3:
                    36:68:94:05:38:59:1a:29:3a:52:d6:1d:94:44:78:
                    8d:d2:a7:e4:aa:68:3f:ef:eb:74:78:d7:2e:5f:26:
                    a5:b5:8d:a0:2c:7a:2d:39:e8:7b:2a:79:24:27:a0:
                    a2:f9:46:d3:a5:76:4f:39:7f:ef:19:a3:04:96:50:
                    f1:20:d7:4d:c2:a0:7f:0f:cd:14:50:a1:7a:ae:77:
                    d9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B9:71:7B:D4:B1:A2:E2:B1:FC:4A:79:61:CC:10:87:D6:94:0C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:46:37:45:a4:66:39:6f:ed:f1:23:c5:59:f2:c3:65:46:13:
         88:f9:2e:6e:ab:3f:b8:09:b3:6c:22:24:37:db:3f:93:23:04:
         c7:b2:b2:6f:00:28:6e:3d:3d:e6:a0:f0:a7:1a:ac:c2:6f:38:
         88:cd:74:a6:e6:53:35:8a:da:a8:31:ef:02:56:b2:66:d6:31:
         e7:00:8b:c7:b0:0a:ca:a9:0b:f9:4a:a8:c3:39:df:26:5c:29:
         ce:09:6e:ea:0e:4e:87:36:b8:f0:6b:34:0b:4d:0e:cd:4c:3b:
         1f:b5:9f:21:87:e7:b4:ab:83:e8:23:87:9b:b3:a8:6f:9a:32:
         ed:8e:3a:46:40:76:a0:91:7b:94:f4:68:47:e0:ff:13:13:1c:
         d2:c8:32:dc:e5:71:ed:1d:49:75:8a:19:25:9d:68:e0:b3:26:
         1d:0e:8c:0d:89:72:14:6f:19:f2:f4:63:a0:c8:cd:04:26:1c:
         6d:88:a9:aa:07:51:c9:7e:74:86:7c:8a:85:ff:0e:8a:5d:77:
         9b:1e:e9:20:75:a5:fd:d8:3e:3c:20:10:1c:2b:f5:36:f4:76:
         f9:b4:27:63:7e:20:17:ee:0d:d0:a3:5a:2e:3d:9c:72:83:2b:
         1a:eb:03:c4:e8:33:dc:c1:d9:e2:2d:34:9d:54:41:bb:70:45:
         81:3e:63:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:56:38 2026 by rpki-client