Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/19e51535-fa02-39b4-a63b-6670070beee2.roa
File:                     19e51535-fa02-39b4-a63b-6670070beee2.roa (raw, json)
Hash identifier:          dRtZ/PGgzUHKh7kGtaRBXuWCBGONvn6wVPeksKDNyFA=
Subject key identifier:   19:EE:84:CB:22:75:2C:DB:76:9C:56:18:F3:57:BD:E9:E0:0D:26:E9
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CB46DEC27DE8BA52D4440
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/19e51535-fa02-39b4-a63b-6670070beee2.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5940::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:b4:6d:ec:27:de:8b:a5:2d:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=26598c61-c813-4300-89a4-f806b287ca30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:89:e3:bf:54:ac:cc:e7:dd:b6:7b:2a:b2:4b:
                    02:6c:94:79:03:cc:40:22:fc:80:e5:43:2d:47:78:
                    2e:76:7f:70:f5:03:40:0a:de:aa:c2:1e:16:7f:7c:
                    bc:ba:60:87:03:79:6e:53:07:56:16:b7:df:ed:3f:
                    47:92:70:1c:55:f6:ef:62:d5:ac:eb:1c:95:f8:9b:
                    8b:3f:25:ab:63:ff:34:37:d9:16:f9:2b:b5:3f:92:
                    43:85:57:15:56:54:f1:4c:f2:51:1f:ec:ba:7b:eb:
                    ef:f7:3f:ce:3c:7e:ea:e8:eb:4e:7b:60:de:c1:19:
                    27:10:2f:6b:4a:6e:b9:25:07:6e:28:0e:14:d2:23:
                    d4:78:75:e9:80:0f:4f:70:20:5f:59:e8:11:ee:2e:
                    2f:39:64:72:cb:4b:3e:06:65:01:20:8f:59:4b:f1:
                    86:66:d9:10:37:b4:a7:25:77:ee:51:14:ce:32:5d:
                    10:ad:6c:93:45:a7:e8:2b:5f:ed:5d:de:22:ee:84:
                    d4:3e:a4:dd:ea:56:7a:48:35:f0:02:76:b2:fd:63:
                    0f:a9:2f:b9:78:34:31:7b:a8:9f:68:ad:f4:0e:0d:
                    25:2c:96:cb:64:29:26:c5:20:af:4e:e3:2e:9c:61:
                    b1:72:ba:a2:91:2f:90:09:27:03:71:bc:ae:79:45:
                    5c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EE:84:CB:22:75:2C:DB:76:9C:56:18:F3:57:BD:E9:E0:0D:26:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/19e51535-fa02-39b4-a63b-6670070beee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5940::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:11:dd:07:22:01:0f:db:7a:fc:76:44:96:15:d0:72:bc:25:
         e1:db:c1:b5:84:55:db:fa:31:36:38:d8:ec:6e:1a:0e:1b:fe:
         32:4e:61:46:08:03:25:3c:08:8c:f8:fc:08:61:bf:82:e0:34:
         ca:d5:73:8d:79:65:3b:d6:cc:6b:1f:3d:9c:ef:70:e5:e6:6b:
         e1:7e:f7:1a:85:d4:14:de:b6:f3:b4:49:65:5e:52:2e:cd:3a:
         36:e8:8c:70:14:c5:82:04:27:b0:af:6e:95:cb:e0:de:a6:0f:
         37:83:27:6e:f6:64:6f:42:fe:5c:5c:8c:0f:f5:2a:ac:0e:8b:
         ab:d5:7c:3d:b1:bb:ac:50:e2:0d:45:89:cb:e2:84:c3:ba:73:
         8e:32:c5:78:33:e8:ea:30:6e:44:b1:87:31:33:87:d0:ea:d8:
         b6:58:2d:74:80:4b:23:90:9a:a8:90:f8:ed:aa:f5:62:a5:21:
         62:99:54:84:9f:95:e1:18:26:49:37:3a:ec:89:24:26:79:75:
         82:c7:89:a4:eb:09:30:a7:71:3b:1c:3b:16:47:41:c6:85:30:
         88:fe:61:df:be:0d:dd:4c:cd:1c:4b:06:73:d1:15:e7:47:a3:
         99:0b:b8:6e:58:50:35:be:fa:0b:2a:6a:0f:2e:5e:3f:46:a9:
         ad:50:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:47 2026 by rpki-client