Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e9724eba-826a-3173-8d71-08be4cf304b1.roa
File:                     e9724eba-826a-3173-8d71-08be4cf304b1.roa (raw, json)
Hash identifier:          kS3Xpn1pMp28C3zL9gT2gUhNef4KhgVZWE9S/2DwBkY=
Subject key identifier:   B9:5C:2D:74:E2:3E:17:90:D1:7F:E0:57:AE:C6:F2:07:B6:A5:54:82
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E815FA556DAC1D5A7B77F7500
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e9724eba-826a-3173-8d71-08be4cf304b1.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     54113
IP address blocks:        2607:8940:50e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:a5:56:da:c1:d5:a7:b7:7f:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=11cd19cb-4dd4-423a-8719-8b8927508ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:40:91:93:6f:68:72:fe:bd:04:6d:20:d4:47:
                    5b:12:4f:c9:5e:67:48:c2:bc:14:a9:b7:f5:a5:35:
                    a9:18:94:dd:8a:de:42:64:d5:5d:a6:e6:4b:1f:4b:
                    c6:81:76:03:c2:d2:40:13:11:9f:6e:4e:3e:db:52:
                    29:a9:31:ff:88:93:fb:02:19:e6:90:f3:60:61:c4:
                    c9:2f:ae:d4:c7:55:07:8c:db:3a:af:57:18:d4:d5:
                    16:ed:5a:47:f9:88:ae:84:b9:b5:8a:25:de:b8:dc:
                    57:b3:c0:6b:5b:fb:73:cd:8a:aa:4f:c7:56:7e:d2:
                    79:0c:9e:33:22:e3:ea:04:2b:f4:10:ed:50:fd:fe:
                    1a:46:cd:6c:6f:ad:0c:5e:40:e1:ca:91:fe:07:31:
                    28:f5:1a:62:40:83:75:b0:85:b4:fd:20:85:83:19:
                    fd:83:0a:59:87:6d:88:e2:83:f6:71:e3:97:ce:1a:
                    7c:73:ea:dc:be:dc:39:68:3e:a5:04:0f:99:5b:b2:
                    00:26:4d:99:6f:ec:e3:d5:29:e0:68:bd:60:9a:cc:
                    da:be:fb:46:b3:73:df:17:fe:4c:1e:cd:cc:dd:77:
                    b4:ab:ac:32:98:fe:32:ab:16:22:7e:ce:8a:4b:cd:
                    0b:35:da:13:e2:c3:b2:f2:b6:ec:38:28:ae:9e:3a:
                    b8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5C:2D:74:E2:3E:17:90:D1:7F:E0:57:AE:C6:F2:07:B6:A5:54:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e9724eba-826a-3173-8d71-08be4cf304b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:50e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c4:20:a0:79:7b:ce:9c:1d:ea:b0:95:96:20:c2:d7:14:a2:
         f9:c2:32:d1:81:c3:31:18:16:a7:b9:e9:26:65:bc:c6:fe:5c:
         9c:40:b7:56:a5:c1:e0:6c:75:f1:c4:e7:74:77:81:96:ad:b5:
         0e:17:7b:c6:cf:36:b3:ae:75:22:fe:d9:93:5f:6d:3c:6c:b9:
         f5:ef:9b:63:64:53:b0:e0:bb:06:86:41:9b:f0:ee:c1:e8:6d:
         98:9b:22:b9:5f:61:3f:0d:a8:9d:60:74:fe:05:92:d9:50:fe:
         fa:6a:6d:b2:72:80:ab:53:c2:cb:8b:9f:98:be:a3:c1:2c:93:
         77:9a:7e:bd:f4:89:a8:93:3d:a7:f5:1c:04:94:81:be:c7:cf:
         18:e4:d1:56:15:f5:0d:5e:c9:51:6f:12:2b:65:51:3f:15:46:
         e3:13:af:c6:1c:df:03:61:ac:9d:af:54:d7:39:ef:ea:0e:d8:
         ed:fa:81:ee:02:6f:bf:77:e6:c2:07:3b:1a:c1:18:27:d8:aa:
         b7:4e:06:43:fb:c3:b1:c7:0f:c5:1b:b1:d6:f7:52:24:03:fe:
         9a:18:0a:87:71:97:15:c9:fe:a8:cb:1a:f3:70:87:c5:97:76:
         10:8b:72:76:e0:c9:22:92:d7:28:bf:e4:9f:a7:e7:9a:bc:a2:
         d0:d2:b9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:57:12 2026 by rpki-client