Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0aab725c-2349-3a79-a256-c8c139e8debc.roa
File:                     0aab725c-2349-3a79-a256-c8c139e8debc.roa (raw, json)
Hash identifier:          CQ/ipuWJpTnURFSTrsvQ6EWdKYxphfsDXK7Ej5NL4Sc=
Subject key identifier:   F2:4D:97:93:3F:D4:F0:2F:54:9E:58:3B:7C:BB:CC:17:28:1F:2E:B1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CC723E9AE8E4C46E6D2C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0aab725c-2349-3a79-a256-c8c139e8debc.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5470::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:c7:23:e9:ae:8e:4c:46:e6:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=d5558159-fd22-49ba-9632-19d840e9ad3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a4:33:7a:be:6c:62:cd:ea:db:26:87:a4:d7:
                    65:dd:9a:ce:01:c3:91:d2:a2:ea:40:93:10:a4:4a:
                    b8:98:98:1a:ff:66:a4:71:95:73:18:d8:35:31:fa:
                    51:91:ee:a7:95:fd:f9:26:26:a3:e7:55:71:fe:0c:
                    70:08:1f:b4:9e:4d:c4:a9:54:d0:65:56:04:99:c7:
                    47:d9:cb:e0:57:db:8b:90:05:dd:29:ae:78:cd:03:
                    90:52:ee:60:15:1a:9c:f8:04:b7:6e:a3:77:3a:6d:
                    c6:79:aa:26:3b:c5:9c:4a:67:d7:eb:13:bd:c9:1d:
                    cd:37:3f:c3:2a:c7:06:d9:1b:c1:73:04:ac:f9:fa:
                    e9:a5:62:d4:55:7c:bc:37:e2:8d:e3:fb:d6:51:f4:
                    07:b5:c7:44:9f:d5:3d:6a:ea:17:8b:f2:95:8f:71:
                    c4:73:33:94:8e:70:4a:a9:c0:36:09:19:01:f1:18:
                    e4:3d:66:96:8e:18:07:2c:1b:c9:74:4e:59:0d:7e:
                    75:f8:02:1a:ae:93:92:6b:d0:ab:81:74:d0:83:d9:
                    28:b5:3d:b1:7b:10:d1:6c:d5:c5:f2:66:77:63:97:
                    21:25:d4:d1:cb:18:6b:e5:fa:22:5f:2c:1f:98:e7:
                    95:19:9a:1e:26:82:c3:9d:96:2d:eb:32:3a:22:16:
                    4d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4D:97:93:3F:D4:F0:2F:54:9E:58:3B:7C:BB:CC:17:28:1F:2E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0aab725c-2349-3a79-a256-c8c139e8debc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5470::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f9:16:1f:d5:fc:43:20:2b:2c:a3:69:4e:eb:4c:ac:7d:97:
         87:0d:f8:e9:05:8c:43:ac:7c:c9:d3:53:98:20:7d:60:ae:ad:
         bc:6e:16:4f:45:0d:75:6f:a7:d9:7d:9c:12:47:9e:07:0a:e9:
         59:8b:c7:6c:b5:15:fa:c2:4d:2b:33:18:a2:92:bd:52:3d:0d:
         7d:7d:35:d8:c1:22:2f:96:ba:53:b8:d4:21:06:26:bb:8e:93:
         e5:00:31:df:d6:af:de:72:bd:e8:6e:68:1a:5d:b5:51:82:39:
         81:41:c3:bf:3e:c1:0c:14:df:3d:b4:a9:a7:97:a2:f3:11:bd:
         8c:ce:55:c5:1f:74:c8:40:e3:54:36:ad:a2:02:7d:59:5e:ae:
         f2:d1:44:95:9e:66:60:5b:45:f7:5b:fa:8a:43:73:79:6a:e5:
         86:bf:3f:14:69:06:2b:bc:44:a8:96:bd:e1:5f:a3:e4:c3:9c:
         b8:69:a0:fd:b3:b3:72:a5:c4:6f:40:eb:93:13:fb:4f:29:9a:
         dd:97:52:8a:1b:f5:54:ff:40:63:74:35:37:93:e6:5a:ec:6b:
         cb:c1:58:a0:ac:eb:f9:ed:8c:7d:ac:42:0b:31:f4:10:fa:21:
         b1:6c:03:ca:5b:56:a0:93:d0:2b:99:f7:c2:50:9f:21:5d:f6:
         79:5b:f0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:59 2026 by rpki-client