Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0f41731b-a5c2-3c5e-92be-c10109f8be37.roa
File:                     0f41731b-a5c2-3c5e-92be-c10109f8be37.roa (raw, json)
Hash identifier:          knhjWCbP8fid1ySbw4r9HQwWBPa2Giscmi/xSH4x/aA=
Subject key identifier:   62:A2:DF:E3:2F:0E:32:39:15:86:98:0A:4E:EE:1A:D8:6F:94:82:6A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CBF1535EDF0BE6A558570
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0f41731b-a5c2-3c5e-92be-c10109f8be37.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5f10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:bf:15:35:ed:f0:be:6a:55:85:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=75698a5f-23a8-4fdd-8363-4133fa299c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:20:db:49:8d:b2:78:41:4b:06:49:7c:9e:8d:
                    4c:20:ce:c0:33:c3:e7:90:68:2f:19:f1:98:0a:ea:
                    4e:1d:fa:ad:b1:53:ac:7d:75:b7:65:83:55:18:f7:
                    83:37:2a:72:11:7b:33:c8:fb:40:4c:90:2a:56:1f:
                    0d:fe:81:80:4b:79:c1:9c:57:6b:e5:d1:86:77:27:
                    c7:3f:cd:1a:c7:24:af:5f:b0:58:55:0f:2a:19:b3:
                    68:52:dd:cd:62:1e:27:42:77:23:43:84:71:96:a7:
                    2b:bf:47:a9:42:24:be:d3:9d:e6:64:48:58:42:72:
                    c4:41:66:1d:e6:ac:08:cb:d0:84:96:29:b0:8e:6f:
                    45:c9:99:11:67:05:49:f1:a1:2c:87:ee:dd:5c:94:
                    e6:76:4b:ca:9a:48:bf:81:ec:4d:85:e0:68:26:3a:
                    7d:33:21:fc:bb:ed:21:6a:de:21:e4:44:ab:cd:2d:
                    9d:32:b0:f3:82:64:96:0f:16:d2:80:40:bc:00:23:
                    d6:d6:14:24:12:e1:69:34:32:d7:d9:20:23:6a:88:
                    9f:b7:ab:f5:ed:a3:25:8e:91:80:66:1a:71:a2:f9:
                    1d:bd:24:63:de:12:cf:f3:64:e4:ab:fe:fc:85:03:
                    d9:5c:fb:98:b7:dc:68:20:e7:36:5f:d9:33:92:79:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A2:DF:E3:2F:0E:32:39:15:86:98:0A:4E:EE:1A:D8:6F:94:82:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0f41731b-a5c2-3c5e-92be-c10109f8be37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5f10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:4b:5c:c6:74:43:a0:a0:66:bb:4f:76:11:f2:57:6b:5d:10:
         50:80:a1:39:1a:dc:ff:7d:4b:58:77:93:e1:da:36:fc:1d:8c:
         de:4e:41:e0:68:cb:b9:79:68:9d:f4:92:19:9b:be:8f:ac:0e:
         ff:88:8d:da:40:3d:e3:40:98:46:57:f2:a6:89:98:5e:c2:55:
         59:bd:6f:48:d9:6a:84:0b:5c:4f:3d:cd:8c:8a:65:7c:34:6c:
         a5:7a:54:ea:89:9b:fb:8e:52:11:dc:d9:af:00:e1:df:e1:02:
         52:bd:58:96:86:a8:fd:97:e0:67:39:0a:7a:08:bd:5f:93:0c:
         56:5a:da:d2:9e:44:b3:6b:e3:32:93:1e:e8:8f:88:38:dd:12:
         f9:b1:05:84:b2:78:f6:b8:b3:e8:12:c9:7d:c5:c3:24:14:e6:
         21:9c:75:64:40:c9:2f:35:f3:33:fe:dd:98:24:ae:ff:74:0a:
         89:7f:a1:61:a9:da:2e:9f:89:1b:34:f2:33:ef:09:55:6a:40:
         c1:59:2e:06:f6:d9:81:b4:44:f4:34:37:5e:a0:b6:be:39:00:
         cd:14:fc:d5:ab:08:e6:f2:8d:55:b9:dc:25:8d:1a:ad:46:db:
         ff:cf:9b:c1:1b:9f:fd:41:13:dd:e6:a7:a7:65:b4:9e:b3:c5:
         68:bc:e6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:53 2026 by rpki-client