Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e25af9e-dfdb-314e-aba9-07e3b60c3978.roa
File:                     0e25af9e-dfdb-314e-aba9-07e3b60c3978.roa (raw, json)
Hash identifier:          k2H+mECnf63wUg3tihCykSTP+w+sLxd6oSxU5xTzZ9o=
Subject key identifier:   11:51:A7:07:BA:CB:82:C7:D2:69:4B:16:8A:CD:D9:C6:6D:C1:1A:B8
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CA9C69AE300626D2C3880
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e25af9e-dfdb-314e-aba9-07e3b60c3978.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:a9:c6:9a:e3:00:62:6d:2c:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=9bf3e478-f315-4478-90af-9efc44b563a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:76:c5:e3:3f:a5:21:de:46:9a:08:2b:fa:8e:
                    5e:35:e0:33:62:21:7b:32:22:40:87:71:e7:4b:8c:
                    e0:cd:9e:25:15:d9:0e:7a:a7:a2:18:0f:3d:0c:60:
                    c1:e4:57:a2:ff:e2:0a:e4:35:24:d7:01:c1:61:1f:
                    cf:b3:b4:c5:c9:4f:e6:0b:dc:90:1e:a9:12:c9:32:
                    38:16:b1:e1:62:e6:1e:c3:93:cd:d4:5e:9f:77:70:
                    a5:9c:14:0b:6d:6c:a0:db:b6:04:2f:51:9d:be:9b:
                    e5:ae:7c:b0:70:57:78:65:40:80:46:28:af:6d:80:
                    9a:0d:18:02:06:f9:4d:ef:47:89:e2:fc:28:f0:d0:
                    ae:67:1f:c8:d5:27:30:66:ff:c7:67:90:5c:14:1e:
                    40:21:2f:e7:8b:4c:5f:fb:0f:83:db:a6:ba:5c:5b:
                    e2:99:4f:42:b5:c5:77:0b:b1:b8:5d:1b:94:9b:1d:
                    d0:d4:d2:8d:b8:63:cf:12:ee:ea:a7:c5:32:de:4f:
                    6c:64:51:46:e2:e6:4e:21:4b:f1:67:d7:25:06:69:
                    c9:38:bc:0e:69:da:eb:81:dd:11:13:a3:2f:df:90:
                    c4:ef:b0:88:ed:b4:92:82:3e:2d:8d:e5:4c:13:1c:
                    10:46:8d:6d:6c:cf:13:73:85:39:17:c7:88:5f:7c:
                    39:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:51:A7:07:BA:CB:82:C7:D2:69:4B:16:8A:CD:D9:C6:6D:C1:1A:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e25af9e-dfdb-314e-aba9-07e3b60c3978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:91:f1:f8:7c:c7:7f:5a:0e:63:b1:7f:da:65:8a:c5:57:c0:
         6f:7a:9b:f4:61:c8:be:4e:24:ee:d4:e3:ee:38:6b:b5:64:6a:
         af:10:87:75:79:1f:ff:30:88:09:67:7a:1f:4f:af:6c:f0:87:
         12:8c:2b:56:4c:24:d2:86:a8:a4:85:7b:8c:fe:a4:9a:c7:5c:
         8e:df:8c:23:b8:33:66:7e:7b:1d:1b:11:96:76:b7:64:16:96:
         76:7f:65:31:a4:2e:55:80:49:a0:07:e8:4d:62:10:1e:67:62:
         4a:0a:7f:c2:ea:75:aa:ad:92:08:ef:05:65:bb:cf:d1:12:bb:
         87:55:ed:db:6b:bb:3c:18:b7:f8:31:74:c0:04:81:53:d4:ca:
         27:b6:8b:17:b0:19:bb:e9:b8:42:93:0c:4e:68:9f:2d:80:10:
         d1:ab:4c:87:f3:b5:f8:fc:8e:05:14:a6:35:19:58:41:50:43:
         7b:36:d7:3d:8c:6b:04:90:f0:1f:9c:78:40:82:10:db:5e:2b:
         26:ab:6c:6f:7c:40:c2:c5:e9:60:92:d4:6f:01:ef:47:93:b8:
         c9:25:7c:49:0b:b5:e3:8a:8b:dc:13:96:19:2b:28:76:99:dd:
         28:1e:46:38:9b:52:ee:66:4e:df:ef:e9:8f:e8:79:4b:bb:ca:
         d9:f6:7a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:54 2026 by rpki-client