Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f9303a4f-e2c9-32d6-8e7d-96425f23c990.roa
File:                     f9303a4f-e2c9-32d6-8e7d-96425f23c990.roa (raw, json)
Hash identifier:          Qu/s2rxpeSi7W+JjAEsmBb4HgoCzt1trEed9JdTqOi8=
Subject key identifier:   E9:57:E3:2A:0C:4A:3A:94:F7:BC:CB:49:72:C3:53:FA:8F:B4:62:D7
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E815FB35D3724DD16267EF900
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f9303a4f-e2c9-32d6-8e7d-96425f23c990.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     54113
IP address blocks:        2607:8940:4d30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:b3:5d:37:24:dd:16:26:7e:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=367b58c5-f3fa-4953-ba63-d97388af0c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:bf:89:dd:8b:88:9f:43:ce:66:24:15:e1:
                    07:d8:c3:60:9c:f9:bf:ff:26:81:d4:5e:ae:8b:a6:
                    8f:ff:46:e5:85:bc:41:1a:10:0e:d7:29:0c:93:62:
                    12:06:ab:c6:a0:7f:4e:f9:1c:8e:2c:91:b9:3a:b4:
                    d6:43:9e:31:21:b9:43:ca:b4:15:d6:06:44:55:90:
                    b7:26:a3:ab:6b:2e:4e:7e:88:83:ed:0f:c1:2d:e6:
                    91:b7:2f:84:83:2e:49:21:ac:1d:49:65:0f:29:55:
                    40:4a:4c:5b:68:ca:70:f0:88:97:bc:67:8a:15:87:
                    c2:7c:f9:de:98:e1:42:4f:c3:ff:8a:70:fe:74:4a:
                    99:f6:4d:8d:2e:2d:a1:1c:57:70:44:5c:d9:da:fb:
                    de:fc:61:9a:e0:f3:49:97:87:da:2f:d6:54:dd:14:
                    1e:4a:eb:7d:76:a4:a1:cd:dd:60:d8:33:8e:bc:07:
                    b7:c6:07:68:bd:50:90:f7:dd:fd:cc:80:25:06:7e:
                    d4:68:ce:6f:19:d4:43:2b:f5:95:fb:40:b1:78:6f:
                    c0:2d:8f:36:2a:f2:1f:50:ff:58:07:12:53:56:32:
                    a9:d0:a7:ca:9c:5f:52:d7:f3:49:69:68:d8:91:6b:
                    d7:ff:b3:82:0f:d8:37:32:a8:53:c7:07:2f:9d:56:
                    64:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:57:E3:2A:0C:4A:3A:94:F7:BC:CB:49:72:C3:53:FA:8F:B4:62:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f9303a4f-e2c9-32d6-8e7d-96425f23c990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4d30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:00:7e:63:b8:00:7a:14:36:8f:71:3b:74:e1:db:62:30:1f:
         22:04:3b:3e:b4:54:4f:c7:e5:9a:c5:5d:c5:f2:03:c5:4b:45:
         03:b9:c1:71:c0:56:f6:62:5f:d7:00:ec:d9:be:bd:44:5a:c7:
         b3:3a:b0:b5:3b:27:90:c0:57:d6:2d:69:14:cb:23:4b:20:27:
         37:b4:e8:fc:f0:5a:1b:42:91:c0:df:58:71:15:38:97:1f:8b:
         5a:1a:93:be:32:01:b2:59:99:45:ef:fc:f7:60:dd:8a:d2:48:
         d8:58:ad:5a:c7:27:ab:2a:87:5e:1d:f6:7c:13:93:c3:4f:c1:
         b0:b2:4b:c0:31:86:1f:23:1a:8c:c4:54:81:82:38:38:68:04:
         d9:c5:3f:79:c9:26:74:71:8c:fe:c8:ed:84:6b:f4:c7:e4:f4:
         f7:b1:4c:ee:fb:25:0a:e1:48:5f:51:33:cd:5b:52:a9:ed:25:
         e3:3d:fa:29:fe:ba:11:ca:54:b7:ff:e8:81:4c:2b:bb:31:5b:
         21:29:b2:be:b1:5f:29:a0:a2:32:9d:94:b9:ef:49:9c:6a:a0:
         17:fa:de:62:ab:14:80:2f:bd:1c:ba:10:8f:21:aa:30:a2:1f:
         81:2e:9b:c7:80:4a:24:0b:22:1e:cb:31:3c:af:d0:32:ea:e1:
         ab:6a:e8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:56:41 2026 by rpki-client