Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa
File:                     fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa (raw, json)
Hash identifier:          hUxci1q0S6QsLqFH8Wg+cmdpZ0j9Vc7iz55CnUZz1W0=
Subject key identifier:   B6:40:0F:61:E6:4F:BE:16:6E:D5:4C:D8:B6:DD:BF:4B:8E:11:38:94
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E5084A756630CA734509FF200
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     54113
IP address blocks:        131.125.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:a7:56:63:0c:a7:34:50:9f:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=678a3af6-a244-40a1-8094-a94359aedc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:48:11:44:39:7a:2f:ed:98:13:7b:9e:29:f4:
                    00:0a:c4:8b:97:2b:85:21:1c:bb:17:86:ee:5e:38:
                    9d:3d:a6:a4:b8:94:9e:36:ce:b1:ab:43:46:f1:20:
                    81:65:d9:08:e9:a5:2d:8f:85:09:96:ee:14:f8:c8:
                    ed:ff:f8:52:93:93:e2:20:2a:57:e8:2f:1e:87:77:
                    fa:52:a4:a1:3e:6a:bd:8b:78:c4:78:24:90:c7:8f:
                    63:28:88:c5:2c:00:f0:99:31:6e:e6:a5:3f:db:60:
                    a8:a3:ba:e1:82:f3:49:93:e9:8c:ee:88:25:5d:61:
                    b3:2b:e0:dc:77:d3:ea:83:8c:ef:8b:37:a5:44:fb:
                    7b:3b:9d:d7:89:f6:35:81:9d:cd:f3:bf:22:dc:49:
                    18:54:24:32:ec:7f:c5:8e:80:0b:db:b6:aa:76:1b:
                    a6:61:11:f1:35:3e:78:7d:e4:87:91:db:da:c6:ad:
                    3d:f9:0f:38:18:f0:20:33:bd:46:b5:5f:9d:69:b5:
                    2b:da:35:11:d3:44:2e:aa:33:5d:01:2b:3a:ff:85:
                    22:3c:bb:49:55:3d:8f:93:4d:69:af:6d:4e:ca:45:
                    96:d0:c3:43:e9:f1:58:bc:70:63:93:c8:1d:f7:a7:
                    d2:dc:84:96:4c:c9:44:f7:09:3c:72:d7:f0:aa:27:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:40:0F:61:E6:4F:BE:16:6E:D5:4C:D8:B6:DD:BF:4B:8E:11:38:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:86:66:44:8c:1c:55:d0:ce:b2:06:28:5e:a4:05:20:a8:51:
         46:9b:19:fe:c8:8f:9e:ae:19:ff:b1:d0:23:aa:f2:38:7f:7a:
         13:b8:39:a9:a7:c1:04:b3:93:c3:0e:4f:35:d4:e2:2f:a6:ad:
         a1:23:94:ee:3a:7f:3f:f6:a6:bc:ed:db:b9:ca:b1:ba:67:cd:
         bb:7b:96:cf:2e:cd:1e:8d:76:f1:18:ef:bb:a6:6c:9b:c1:28:
         e6:82:a3:d4:e4:f8:f6:14:49:0f:2c:44:b3:2b:4d:c3:31:97:
         b2:d7:4d:5c:34:ef:51:47:30:c3:71:da:de:94:0e:ca:83:30:
         29:2b:2d:e5:e3:e1:7e:8b:aa:a9:af:17:fa:60:7a:25:26:3f:
         ab:28:37:7f:d1:b3:21:64:53:f6:9a:ba:ab:84:13:31:d4:4c:
         5e:51:5b:df:12:be:4c:dd:78:9e:3b:22:6b:de:a8:43:21:0c:
         fb:0d:49:15:c5:71:2f:2a:14:18:e3:1d:47:c6:73:b7:93:0e:
         a1:88:42:7f:99:4f:9d:11:68:e8:c6:8d:35:94:7e:71:2c:44:
         ef:a5:08:d7:81:85:1a:88:95:33:ec:cf:d7:9b:d5:2b:03:7c:
         36:9b:94:e0:ad:70:e8:ad:f3:ca:fc:c5:09:96:d1:c7:22:bc:
         e8:a1:3c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:56:52 2026 by rpki-client