Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d5362c32-63e6-3ae5-a5b6-66723dd49273.roa
File:                     d5362c32-63e6-3ae5-a5b6-66723dd49273.roa (raw, json)
Hash identifier:          vFuycpwz3v2GMQBlDT3b4XRv4wRqeiFcLtrmpUIyoro=
Subject key identifier:   18:EB:4F:D4:CB:45:D9:7F:55:92:73:A4:E1:9D:34:3D:35:56:67:CE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C278DA040D1A28C9F98080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d5362c32-63e6-3ae5-a5b6-66723dd49273.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:47b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:78:da:04:0d:1a:28:c9:f9:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=ac280157-c113-4e62-8ddf-faf2b752f0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ba:06:da:44:0f:a7:e9:d4:31:76:af:f8:b2:
                    11:bf:6d:2e:40:93:38:f2:21:3d:3e:38:0b:06:36:
                    fc:05:2c:b5:f5:ed:3d:2a:ef:9b:0c:4d:1a:8c:f2:
                    47:c8:a5:bf:45:d0:9f:82:6e:cd:43:c4:a4:58:53:
                    1c:b0:3a:42:11:b7:a5:00:12:89:fb:e9:2d:a2:30:
                    c1:74:dd:99:cf:8e:b7:91:5a:3f:4a:04:40:df:67:
                    34:09:73:61:66:8b:56:f0:e4:c8:59:f7:97:3a:88:
                    54:96:0d:75:6a:08:c9:66:30:1b:f5:96:6e:d4:64:
                    73:8f:f0:7d:e5:5b:03:67:e9:72:0c:a5:79:8f:30:
                    da:57:f9:c4:87:9a:8e:34:11:9f:d5:97:dd:d9:34:
                    4d:cf:3a:49:cd:2c:dd:3e:a2:00:6e:37:58:24:da:
                    cf:8f:a9:06:95:43:4e:1e:88:c8:6d:1d:fe:47:7d:
                    a4:71:8f:88:59:e1:81:8e:69:75:ab:5f:11:29:89:
                    f2:25:b6:61:d8:85:10:01:ff:28:a1:c8:7d:4d:5b:
                    c8:8b:66:c3:e3:58:fc:86:3a:d2:25:44:ef:d6:ae:
                    20:79:b4:ec:2a:07:f3:ab:64:71:2f:98:54:de:81:
                    68:25:b2:df:02:06:3c:28:b7:fc:95:cf:2d:13:f0:
                    1e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EB:4F:D4:CB:45:D9:7F:55:92:73:A4:E1:9D:34:3D:35:56:67:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d5362c32-63e6-3ae5-a5b6-66723dd49273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:47b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f1:d2:61:28:4e:99:b2:40:8c:99:05:43:84:49:4a:9f:78:
         5c:37:36:79:c5:ff:8c:3b:2d:ea:aa:60:5d:d6:ed:48:e3:9b:
         15:51:31:e1:b6:8c:ca:c2:90:ba:4d:54:4b:e4:d7:53:9e:4d:
         1b:27:e0:7d:03:d9:77:56:31:c7:0a:ff:01:5d:f2:fb:8f:a4:
         49:ca:28:ab:36:07:19:db:80:37:4f:9b:9b:2a:25:25:2d:ce:
         62:26:9a:9f:4e:91:3f:bf:82:1a:e4:5d:9a:52:9c:c5:ed:1e:
         6b:52:87:6d:45:7c:6b:d4:0d:6b:af:cd:9f:d0:66:88:14:11:
         39:9d:9b:b4:d1:a1:0f:aa:8d:7a:2e:6d:14:fe:b0:ed:52:a2:
         a6:db:40:1a:66:9e:7b:bb:1f:3b:4a:99:62:18:91:e7:1f:19:
         db:b5:3e:ac:30:84:aa:0f:44:6c:d6:0f:85:20:a0:05:f6:72:
         f0:cf:97:e5:9e:51:5c:a5:a4:1c:35:d0:86:27:4a:a5:8f:bb:
         1a:34:66:0c:b3:88:b6:f9:91:37:2c:16:1e:77:ec:f7:e5:85:
         c8:3d:98:06:1c:4f:ac:9a:f5:0b:b9:65:4b:6c:23:8b:04:23:
         1d:1a:cb:ec:db:18:42:62:25:da:ac:1c:40:56:a5:59:af:95:
         b5:7d:17:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:52:18 2026 by rpki-client