Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f5c56ec8-a756-34eb-8e81-fc074561781b.roa
File:                     f5c56ec8-a756-34eb-8e81-fc074561781b.roa (raw, json)
Hash identifier:          r7jVsdiNzbngS5XBxvKzutVJpIdnue79MOn5WbYcHkM=
Subject key identifier:   73:09:E1:BB:D5:3D:86:28:47:BC:E0:E0:6E:03:45:A8:C8:BC:42:76
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C2707A0424D0CF8554FF80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f5c56ec8-a756-34eb-8e81-fc074561781b.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4900::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:70:7a:04:24:d0:cf:85:54:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=68278266-3bee-48ca-942c-75270c805633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:91:15:1d:3d:01:6a:ea:09:01:25:6a:38:ee:
                    98:8d:6f:af:61:24:c9:66:da:13:2d:b6:02:1f:27:
                    a0:2a:a6:4e:7e:f3:61:5b:88:f7:90:f7:74:bb:dd:
                    e9:02:cd:57:0b:fe:a3:c8:2b:1d:d1:ab:15:14:a2:
                    7c:45:15:19:88:7b:c7:28:d0:47:91:50:46:af:0c:
                    58:e4:41:47:18:55:9d:bc:57:7f:6b:a7:ae:1e:ef:
                    ab:75:37:18:12:91:7c:7b:b2:d6:fd:21:10:15:02:
                    43:e2:4c:71:76:1b:82:92:4c:fa:b1:20:23:f9:f5:
                    be:89:db:15:63:a8:b4:64:d0:e0:d7:5c:ef:b2:9d:
                    61:dc:03:63:e6:46:f7:85:f5:16:57:b2:5f:a2:d5:
                    59:ce:37:34:97:10:12:70:2d:e8:a3:8a:a7:96:1c:
                    58:fc:09:65:02:a6:80:71:4f:35:cc:be:e3:44:e2:
                    d9:7e:af:c7:bd:85:93:c3:96:df:9b:d2:1e:64:f6:
                    5b:d0:4b:66:c6:20:66:b3:3f:89:d3:53:7f:c3:d3:
                    4b:9b:48:41:88:d2:e6:0e:bb:48:84:55:97:38:2c:
                    b7:b7:4b:2d:69:1c:b8:cb:ef:51:3d:66:6f:00:fb:
                    da:e7:ef:57:c8:da:a1:64:aa:c5:18:76:fe:4e:73:
                    c5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:09:E1:BB:D5:3D:86:28:47:BC:E0:E0:6E:03:45:A8:C8:BC:42:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f5c56ec8-a756-34eb-8e81-fc074561781b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4900::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:44:ce:f7:a7:d4:f7:8c:39:3a:7a:70:46:dc:98:ce:44:1d:
         52:24:a6:f5:05:16:39:9d:00:47:78:75:f2:ad:d3:16:73:ac:
         7b:62:a3:bc:a3:51:79:a6:82:9a:e6:7c:eb:1e:fd:b8:93:b3:
         d3:66:b0:f2:d9:b5:2b:a0:e6:de:4e:81:a0:b7:a3:95:14:e6:
         48:92:ac:70:90:32:2e:e9:72:8e:06:f1:98:96:0a:d1:1d:95:
         83:47:4d:70:df:73:f4:36:4d:55:95:cc:89:e8:10:6c:f0:1a:
         05:98:4b:59:e6:d1:41:35:2e:f3:96:81:9d:f2:ed:5b:96:fa:
         cf:58:52:93:c9:c4:17:a7:07:c5:02:8e:f4:dd:39:19:a9:11:
         a2:1f:43:bc:35:a6:cd:29:09:28:c1:c6:15:76:6c:d9:0e:72:
         4b:45:e1:53:58:ed:56:d6:1d:ee:31:94:ae:37:52:c6:f5:31:
         2e:d0:24:12:5b:5b:26:6c:12:36:d0:09:af:48:9e:79:63:32:
         a8:d1:30:5b:73:3a:a0:23:a2:8f:f1:d7:dd:8e:a5:40:e0:cd:
         fc:3d:b7:8e:9b:43:6b:27:ff:aa:b0:db:ff:ee:52:3f:49:d1:
         44:ec:94:a6:8b:7f:b7:72:97:50:8a:38:04:5b:7e:5d:2d:52:
         11:1e:12:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:59:41 2026 by rpki-client