Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25e51a87-cd99-3d4f-975e-9fc43a2d0787.roa
File:                     25e51a87-cd99-3d4f-975e-9fc43a2d0787.roa (raw, json)
Hash identifier:          CYQ1F71SM4WbAZEec6PgiYgmBoRbvdojO9+E7aoJlAM=
Subject key identifier:   EF:97:91:F7:88:93:EA:9D:A0:8F:17:59:90:A9:74:FB:4A:73:65:FD
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CBBBFF2D393289E26E180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25e51a87-cd99-3d4f-975e-9fc43a2d0787.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4d60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:bb:bf:f2:d3:93:28:9e:26:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=c69fb114-a31d-427c-8640-fd89f662ad94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:aa:85:fe:d8:b2:1f:24:44:1f:b0:d8:c4:
                    0b:fe:e1:3e:77:2c:f2:2a:86:2d:4c:6f:dd:9e:bf:
                    c0:c0:79:31:a0:fb:56:af:f0:2f:25:e8:00:fb:a7:
                    37:2d:a5:75:b4:44:4e:2b:b7:dd:ea:dc:a3:51:85:
                    3c:ee:de:0c:70:7e:55:2a:67:21:6c:fb:52:74:97:
                    ed:fc:9b:df:be:8c:b0:be:37:44:6c:e9:ee:79:eb:
                    1a:50:0e:d9:da:6e:84:21:14:ca:ec:cc:60:85:f4:
                    ab:b3:9d:fb:1f:a3:17:2d:0b:fd:fa:b5:2b:ac:71:
                    48:5e:08:39:ce:69:d8:71:3d:83:e2:52:29:36:60:
                    1c:fb:da:48:45:97:4a:cc:17:8f:b6:96:45:16:b7:
                    a9:c8:1e:c8:0b:bf:28:2b:84:42:fc:ac:71:18:8b:
                    b1:c2:7b:ce:45:e4:97:e3:8c:10:90:77:84:52:20:
                    22:0c:78:f2:18:fd:2b:3f:d4:0e:8e:f4:2c:65:d1:
                    0f:62:89:c1:02:43:72:04:0c:a2:f5:50:23:01:fc:
                    bd:f1:0d:81:5b:d5:b9:cb:26:ef:24:59:91:e2:23:
                    d3:aa:a9:b8:33:4b:43:bf:96:d2:ab:97:51:be:b5:
                    93:49:36:8a:58:6d:5f:c8:23:af:a7:c6:67:e5:3d:
                    3b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:97:91:F7:88:93:EA:9D:A0:8F:17:59:90:A9:74:FB:4A:73:65:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25e51a87-cd99-3d4f-975e-9fc43a2d0787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4d60::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:15:62:27:fd:79:1f:2c:bf:6d:94:14:81:bf:44:bc:e1:f2:
         c8:be:ba:cc:f1:6e:11:78:28:f9:e2:b7:76:cc:ba:31:18:d8:
         20:63:eb:e0:a5:e4:1a:cc:dd:19:99:fe:44:bc:db:a7:05:83:
         7a:1b:7c:4e:54:35:ac:04:28:7d:70:d3:c5:f5:12:42:16:fa:
         5b:ec:a8:7c:fe:d1:b3:53:fc:bf:0f:1c:00:63:d0:c1:ae:39:
         e8:d4:93:f7:34:e4:40:df:74:e6:f9:78:82:a1:84:a3:de:7e:
         8a:90:3d:d9:c2:1d:18:aa:66:91:d4:2b:00:84:ca:9d:b3:96:
         1f:c7:36:e2:53:9f:f8:49:2f:47:da:44:f3:cd:30:0e:07:8f:
         e3:80:f1:e4:68:8e:1b:1b:85:a3:30:2f:b3:77:c9:fe:09:78:
         f2:d5:e8:f0:61:e4:87:e1:15:92:6a:c1:29:07:ca:ba:d5:aa:
         81:bb:46:7f:87:1b:23:2b:07:ef:45:d9:84:48:bd:d4:90:36:
         8a:db:83:57:85:3b:c3:24:0b:97:31:22:66:c8:63:cd:73:fc:
         19:f3:6a:a4:ed:20:ea:a2:cb:70:45:c9:63:82:4f:bf:14:cc:
         6f:a2:57:11:55:7a:db:fd:66:17:58:77:b9:ae:fd:b4:b1:8c:
         76:8a:17:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:14 2026 by rpki-client