Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a51df00e-1087-3157-a3cb-3cc70a919890.roa
File:                     a51df00e-1087-3157-a3cb-3cc70a919890.roa (raw, json)
Hash identifier:          PACf6wl0y1m1WvoU65U8ngEM02pqyhmcW9HjYVH5/cY=
Subject key identifier:   13:3E:97:72:CE:E6:82:42:D0:DB:5F:66:68:D7:EA:4A:23:0E:B5:59
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E815FA2EB3F0592315CB21000
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a51df00e-1087-3157-a3cb-3cc70a919890.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     54113
IP address blocks:        2607:8940:4260::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:a2:eb:3f:05:92:31:5c:b2:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=fe253781-28b0-411d-806c-0071623077d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:3a:0e:06:41:fa:76:e6:22:0e:85:4c:f7:
                    05:a0:c2:91:80:61:cd:38:de:6d:39:ac:54:8e:f8:
                    7c:50:86:ec:aa:ff:f5:e2:17:03:ad:e8:49:d3:19:
                    ba:91:fa:fe:6d:e6:94:7a:4e:88:ee:80:44:e9:d7:
                    31:d7:65:2f:8e:d3:9b:40:b5:72:3e:87:eb:54:e1:
                    e0:17:c9:1c:e5:78:40:9d:e1:d6:e7:b0:46:df:18:
                    a4:bd:8a:c4:03:fa:7b:18:9e:0a:14:64:32:53:95:
                    82:32:0d:58:2c:4a:98:79:61:8b:ba:44:7a:dd:ca:
                    d2:bc:96:f1:d4:62:31:ca:5f:f9:76:37:0c:d9:7e:
                    04:f3:a7:29:c4:31:b4:b0:27:73:0f:be:5f:53:a2:
                    c7:82:7d:82:2d:d7:cf:dc:0a:ae:b1:85:e9:4f:50:
                    09:cb:4d:1e:d3:db:af:f1:52:e1:f0:a1:4a:30:19:
                    57:43:bc:85:87:6e:6b:a9:69:e0:0b:22:6c:b7:65:
                    30:85:de:a4:3c:58:b1:67:68:69:43:9f:e9:7b:14:
                    a4:a5:56:3c:03:35:f4:74:5e:9a:da:75:b0:13:80:
                    79:a1:0b:c1:24:4b:b9:47:06:29:a0:ec:b2:94:20:
                    3b:89:3a:e9:22:80:8f:fa:3d:43:ea:9e:5f:0f:60:
                    8a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3E:97:72:CE:E6:82:42:D0:DB:5F:66:68:D7:EA:4A:23:0E:B5:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a51df00e-1087-3157-a3cb-3cc70a919890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4260::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:0a:fe:ca:ed:f1:56:b4:bd:41:cc:9a:19:b0:66:55:8d:51:
         db:fb:4b:53:46:dc:e5:42:3e:02:d7:82:76:c4:a9:c0:22:2b:
         d0:55:62:56:86:37:af:11:87:ec:fb:15:aa:8f:9a:48:43:d4:
         8a:8e:bd:13:75:57:b2:2f:66:6a:32:45:03:fa:35:69:0c:94:
         2d:eb:9e:da:96:8c:42:c5:f2:19:3e:f2:26:9f:4c:22:c5:e5:
         10:c5:4c:66:2c:19:c3:a1:d5:44:e9:85:eb:bb:c6:f9:fc:ff:
         52:f9:e1:82:ad:6e:33:e9:f0:f1:8d:c9:9c:7f:d5:d8:5d:b0:
         c4:87:e2:2e:10:84:d3:a7:0d:15:7e:af:fa:8c:ab:cc:27:92:
         c2:d8:c3:d2:57:1c:92:fb:f5:5c:08:ca:86:07:f6:4c:90:54:
         cc:78:ad:61:47:fd:95:f7:7f:6b:bd:a2:79:e4:9c:24:75:fb:
         93:7f:0e:39:c6:7d:1b:75:a9:45:7a:47:c5:0d:1e:07:8b:1a:
         86:5c:9e:5c:3c:b9:ac:7a:73:ec:4c:f4:69:3b:54:b9:e5:8b:
         c0:0e:65:da:23:2d:33:e2:c9:b0:e1:e7:de:2a:50:53:c2:53:
         ed:1d:bf:0c:c4:c7:46:4f:82:45:4f:e9:7e:f5:c0:86:64:ff:
         e1:67:7a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:58:29 2026 by rpki-client