Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3ca3291-19bd-3ac0-91ce-a688a6015051.roa
File:                     a3ca3291-19bd-3ac0-91ce-a688a6015051.roa (raw, json)
Hash identifier:          yfNpTDw7RHfIZ1HSHtpOOWMUpMHFfiz6TIDraWfw0qc=
Subject key identifier:   C3:F5:68:FB:EC:7F:27:68:22:10:DF:88:94:A4:1D:18:D6:42:0F:40
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E815FA20FA88180DB35D344B0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3ca3291-19bd-3ac0-91ce-a688a6015051.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     54113
IP address blocks:        2607:8940:5ea0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:a2:0f:a8:81:80:db:35:d3:44:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=10722627-d370-4190-99f6-d0230c7061e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:43:19:37:cf:3e:ed:3d:80:eb:eb:a0:52:a9:
                    c9:99:0a:85:ba:8b:fe:ca:44:07:37:3f:66:a3:e9:
                    91:35:09:34:9a:66:84:39:9c:b8:db:57:45:4d:8f:
                    b9:94:f5:e0:f4:7c:df:a2:ff:49:e5:f8:b1:c0:ba:
                    de:b5:26:1d:b5:50:b9:af:62:22:3f:ff:6d:39:2b:
                    95:91:70:d4:64:3d:6a:d6:0d:93:f0:f6:fd:8d:ad:
                    6a:28:6e:a7:7d:85:e7:ad:69:6c:c3:c8:ef:5f:eb:
                    61:98:d1:09:19:b8:3b:3f:d9:4a:80:43:f0:a3:ef:
                    d4:1e:58:d2:f5:91:ec:e8:ee:bf:a8:54:d5:3b:15:
                    22:06:90:c6:de:7b:a1:25:4f:d0:5c:15:a9:41:40:
                    69:23:51:a3:fa:6d:70:13:47:d2:3b:97:4e:72:81:
                    a7:2b:93:3c:24:d3:9a:bc:b2:d0:f5:ea:42:f3:dd:
                    b4:88:14:cf:74:93:3f:d0:e7:5d:fa:72:fe:cd:06:
                    58:3b:14:30:fc:b2:c6:dd:05:ee:c7:80:2a:f6:c5:
                    5b:8f:a6:73:81:fe:a5:91:f6:fa:5d:7d:13:a5:c3:
                    12:33:1f:01:9e:69:61:f3:e7:8b:6a:de:34:dd:5a:
                    a3:82:c5:cf:f3:28:c2:78:63:2a:aa:cb:06:8d:c3:
                    22:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F5:68:FB:EC:7F:27:68:22:10:DF:88:94:A4:1D:18:D6:42:0F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3ca3291-19bd-3ac0-91ce-a688a6015051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5ea0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:51:1a:69:6b:90:b4:75:a4:b1:03:bd:5e:5a:dc:87:79:21:
         1d:88:55:46:c6:1b:3e:cd:35:d8:a2:da:41:fb:a8:e7:b1:39:
         f9:8c:6b:cc:a2:04:ba:69:8e:c7:a0:dc:04:7a:01:6e:9f:4a:
         2b:d0:53:d6:61:1d:38:4f:16:15:4b:37:99:17:8b:4f:06:60:
         95:d5:80:93:71:13:c2:ea:d0:c1:84:69:26:32:2b:b1:09:34:
         c5:ab:5a:2a:9f:af:71:7e:cb:28:f3:83:17:57:c6:7c:90:09:
         98:c6:0a:43:e7:58:87:57:2b:e5:e6:30:cd:c5:cc:68:35:b8:
         35:5e:7e:0e:95:11:aa:68:75:f8:ad:00:a6:6f:b2:e6:78:10:
         38:15:da:96:ea:93:81:28:57:6a:b6:65:a0:7b:f5:56:71:f7:
         e9:45:eb:6c:e3:bb:ac:ca:84:06:45:9a:b7:ad:de:e1:c5:51:
         b6:6b:09:b8:f3:13:bd:f2:80:f2:cb:0d:48:08:c3:84:8c:d1:
         04:3a:e7:7b:02:5f:1e:51:60:63:bd:de:e6:e2:5e:bf:69:4b:
         6f:ed:9a:82:e5:be:d0:86:1a:98:f6:ab:d4:cd:d9:ea:e7:3f:
         11:53:d6:27:96:8b:f2:e8:61:9a:42:17:7d:54:a1:52:6e:02:
         02:a2:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:00:00 2026 by rpki-client