Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f545e7aa-8036-3360-bc8f-ae465cc07333.roa
File:                     f545e7aa-8036-3360-bc8f-ae465cc07333.roa (raw, json)
Hash identifier:          nAHgOjcPs+vbEV9HX3Qoj0p5d5XfuFdW7su55/XMR14=
Subject key identifier:   1F:3D:24:21:C8:96:61:60:CA:8F:F3:13:6F:72:04:73:78:AE:EE:DA
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E815F9A49108A0318201047E8
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f545e7aa-8036-3360-bc8f-ae465cc07333.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     54113
IP address blocks:        2607:8940:5850::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:9a:49:10:8a:03:18:20:10:47:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=afa22b39-987b-46f0-8ac2-788561b7b162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ff:74:15:29:76:8f:98:8e:3f:6f:50:e4:fb:
                    a4:4d:2d:8a:14:04:0a:5d:a9:0f:9c:ea:ba:f8:8e:
                    cd:f9:b2:14:0b:8d:ef:3d:1c:fb:fc:83:72:26:44:
                    2f:04:fc:7c:ea:3b:70:93:b2:70:a6:f2:78:5d:3d:
                    bc:f7:49:ac:ae:b8:b0:86:e5:58:e6:e5:eb:c4:26:
                    bc:f6:e8:19:f7:19:32:ef:f8:e7:02:2e:bc:91:e2:
                    50:1e:f3:61:d1:82:a2:81:d0:81:29:ce:c1:dd:61:
                    45:a4:f5:63:b2:c6:5e:93:bf:40:6a:ea:ea:5b:e4:
                    8b:b0:83:87:dc:8d:87:43:3f:c5:f0:e6:c0:b1:af:
                    aa:b4:28:08:41:7f:f3:fe:9f:e4:b0:67:fe:1c:56:
                    19:5a:85:fa:16:32:8d:63:74:3b:ba:e1:c3:7b:7e:
                    1e:fe:49:37:32:ba:62:6a:c5:94:0f:95:2b:6b:e4:
                    d9:d8:e6:d0:b2:d1:02:53:74:a6:60:e4:2c:6e:16:
                    06:24:bd:b3:b5:50:0e:b6:34:0d:51:cf:56:f0:1a:
                    cc:93:42:67:54:6a:93:d9:af:64:db:29:d0:fa:c4:
                    99:4b:51:3b:89:7b:c2:b5:b6:de:5c:e8:19:7d:9b:
                    a6:94:15:79:d9:eb:5e:c5:87:27:de:f0:79:c6:d8:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3D:24:21:C8:96:61:60:CA:8F:F3:13:6F:72:04:73:78:AE:EE:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f545e7aa-8036-3360-bc8f-ae465cc07333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5850::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ea:fc:9f:32:e2:b1:70:9c:15:5c:37:20:e6:c4:e0:68:67:
         3f:34:bd:f4:de:33:46:87:ab:f2:50:7c:3e:07:d8:7c:4b:a0:
         c4:44:a6:ab:b4:44:66:12:1b:77:0a:3a:a7:bb:cb:2b:9e:ad:
         d4:f0:84:4e:d5:40:dc:c6:c4:44:1d:f5:3c:65:e1:36:09:15:
         00:fb:f8:16:e8:f9:ba:91:a0:49:72:66:ba:84:05:26:c8:92:
         16:4d:c0:63:a7:05:16:53:57:31:45:55:7e:01:6b:da:e5:57:
         29:c7:07:de:ba:b6:e3:e9:63:b3:83:f9:49:d1:72:24:1f:44:
         72:2c:3f:70:34:1d:2c:0f:41:a9:ce:0d:2d:45:af:07:88:20:
         15:69:9e:00:76:46:7c:81:99:2e:36:91:5c:ca:ff:11:24:ed:
         c1:6a:61:40:7d:6a:1e:00:1c:ed:0a:1b:c2:3c:c9:94:cc:f0:
         27:10:66:ac:f3:23:d7:98:e3:ea:9f:19:7c:aa:82:77:59:87:
         31:b1:d8:81:3a:5f:37:9f:51:c8:b3:d2:dc:2b:ac:12:00:87:
         2b:5a:dc:de:b1:5c:d4:87:0f:24:c2:3b:52:dd:51:89:54:f2:
         1d:7e:31:7b:f1:54:35:1f:c2:c1:47:89:70:8d:47:0d:ed:4e:
         92:24:eb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:56:43 2026 by rpki-client