Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ffe8475-c7c7-3bfa-85cd-70fd14896814.roa
File:                     0ffe8475-c7c7-3bfa-85cd-70fd14896814.roa (raw, json)
Hash identifier:          kYug3uExSozsiT1bbFYaiC3EgHZa9CK/AbQCUD0FnII=
Subject key identifier:   6B:BE:6E:64:B2:28:55:3A:D1:DE:1B:8D:B6:9D:57:C7:46:8A:30:7F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CBB9152B0AF776499F500
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ffe8475-c7c7-3bfa-85cd-70fd14896814.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5600::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:bb:91:52:b0:af:77:64:99:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=8dc19800-37e5-4c4e-85dc-5cd539dce296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:ed:9b:2c:b8:04:ac:57:85:4a:2f:93:d6:
                    72:b0:a4:ad:34:b0:58:cc:9d:e8:ea:d5:50:7c:11:
                    0f:46:6d:14:f5:d4:37:3d:a3:bf:e4:b5:ab:12:28:
                    ec:51:2c:0e:74:8b:c5:46:ba:b5:e8:b9:e2:91:8f:
                    57:eb:51:ca:94:44:d6:97:f6:c6:4d:9f:b6:66:cf:
                    c4:63:02:9e:e9:ae:5e:8f:f2:6d:3d:50:cf:ac:bc:
                    43:2f:98:64:8a:c4:61:f3:a8:3f:23:db:17:08:f9:
                    9c:ba:41:99:94:e1:8b:16:11:21:a8:f7:50:f5:e1:
                    d3:59:ea:4e:77:9c:b3:58:df:ec:f0:ee:f0:9f:3e:
                    5e:73:32:38:13:a1:87:f7:a8:08:0a:1e:3f:48:8b:
                    f3:46:35:71:12:21:9a:8a:2c:d8:dd:ee:9e:36:cc:
                    a0:a5:7e:21:22:db:6e:ca:a5:e9:b6:76:0b:09:18:
                    3e:1d:e5:b4:99:0f:96:f9:9b:e8:ec:ec:50:aa:a6:
                    92:0d:58:16:c2:30:2a:2d:65:53:48:fa:28:3d:57:
                    66:71:47:ad:a5:c7:37:cd:66:4a:d3:ee:a0:22:76:
                    97:fe:f4:93:4b:be:4d:02:a1:e9:90:4b:97:9d:fa:
                    9e:28:1c:db:0d:29:e8:03:a5:90:22:36:05:c5:35:
                    c2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BE:6E:64:B2:28:55:3A:D1:DE:1B:8D:B6:9D:57:C7:46:8A:30:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ffe8475-c7c7-3bfa-85cd-70fd14896814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5600::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3b:14:d3:52:cd:4d:c6:ac:3a:e5:8b:5b:8d:65:a0:c1:f9:
         7e:26:3d:ad:22:22:b8:37:76:b4:d3:1b:5e:1b:9c:95:a9:a2:
         99:0e:f3:1d:3e:a6:0a:af:aa:b1:81:a5:28:11:9a:76:28:dd:
         1d:0c:ee:01:b0:fb:7e:6a:5d:37:ab:ea:81:bf:0c:1f:58:6c:
         11:99:94:1b:fc:7c:0f:70:3a:78:e8:1a:2d:a3:4f:2b:88:61:
         5c:cb:4f:33:d8:0e:2d:ad:69:1c:63:f3:51:3a:62:0b:1d:ad:
         1d:b3:be:6f:6c:71:2e:05:73:4c:e8:f0:62:45:02:08:8a:04:
         d4:fd:6f:cc:60:6e:b7:fa:b7:8d:a2:26:50:d5:49:27:b5:a0:
         aa:03:df:5f:fc:e2:e4:54:12:43:da:8f:8b:f3:ae:48:0b:a9:
         9b:b7:07:cf:74:1c:49:e5:da:01:0d:b8:a7:8b:98:a2:f4:fc:
         52:ad:57:e1:a7:57:47:bb:c5:27:5c:a4:2d:bb:4b:ef:0c:9f:
         5a:1a:b9:eb:b1:09:67:e1:ed:f1:c3:04:72:8b:18:d6:74:6b:
         46:0e:94:7c:ea:48:64:2d:bd:46:e8:99:c7:36:40:05:26:b5:
         5a:1a:71:75:c0:c9:41:ae:04:de:07:af:8b:aa:dd:b0:39:3b:
         0f:74:25:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:03 2026 by rpki-client