Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/31a985d9-b067-3e1b-b9e0-5e1ab79f50cc.roa
File:                     31a985d9-b067-3e1b-b9e0-5e1ab79f50cc.roa (raw, json)
Hash identifier:          fDGfBcgYxMimCWXAotlzW5PwXp7RqwxxQoMt9gDWm7U=
Subject key identifier:   A0:E0:AD:57:CD:C3:4D:13:97:CD:A3:DE:0E:05:5E:BD:F9:45:99:96
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CACE51C7FA6980F419460
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/31a985d9-b067-3e1b-b9e0-5e1ab79f50cc.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4a80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:ac:e5:1c:7f:a6:98:0f:41:94:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=12db61be-b82e-4182-8d31-24b59ec2b265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:30:08:f3:1f:ab:3a:45:bc:54:fd:17:f7:d5:
                    8c:f7:54:e0:93:7c:54:d0:da:3e:5f:a6:f7:74:e7:
                    f8:5f:14:12:af:47:dc:88:81:fc:a2:92:ce:ce:fe:
                    e6:ba:4b:6b:4c:3c:76:df:93:8c:bd:79:10:d1:c0:
                    ce:10:6e:eb:99:88:28:a4:af:c1:8c:f6:da:48:27:
                    d9:2c:d6:bf:d5:32:d7:17:10:ae:c0:0e:5d:9a:8c:
                    3c:f7:37:bf:2b:b7:6b:5e:b4:8c:d8:e1:59:00:3a:
                    59:fc:3b:b4:82:15:d7:3d:3f:8e:35:80:a2:7b:73:
                    47:9d:03:ab:e8:12:77:82:4a:35:21:45:29:95:15:
                    e4:ac:93:87:fa:1f:47:9e:66:18:d9:ab:fa:62:5f:
                    71:29:92:1c:95:94:17:17:c4:cd:fb:bd:ed:bb:ab:
                    95:c0:07:4c:43:d0:07:8a:6b:3f:e4:6d:cd:97:13:
                    a1:fc:59:76:ba:6f:d0:d5:e5:27:ee:32:de:7c:0c:
                    5e:61:e4:b5:d9:1f:72:a0:37:df:74:af:16:64:ed:
                    0c:c8:5a:65:6c:e7:35:90:3c:69:fa:a9:94:89:fa:
                    2f:7f:5f:3d:e7:c6:6c:57:8d:66:68:8b:94:14:06:
                    9f:9d:06:6a:72:7f:4c:64:26:a5:30:40:73:52:2f:
                    72:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E0:AD:57:CD:C3:4D:13:97:CD:A3:DE:0E:05:5E:BD:F9:45:99:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/31a985d9-b067-3e1b-b9e0-5e1ab79f50cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4a80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ea:32:3d:d4:70:9a:d3:a4:95:0c:2d:ea:ea:4d:b7:94:4b:
         a0:2b:5f:55:8d:af:02:2e:46:d1:45:30:fd:b1:31:fc:2b:d5:
         e1:58:a2:fd:60:98:c5:27:9f:e8:6d:59:1a:cd:ab:c4:06:82:
         41:e2:16:c1:a1:bc:ad:de:c0:1d:f6:6f:34:4a:46:66:ac:5f:
         63:32:1f:86:d4:ad:8e:44:81:ac:03:4e:a6:6b:43:0e:07:ce:
         36:8f:28:7f:2d:af:db:53:83:91:42:4b:61:8c:16:a8:8c:81:
         55:35:07:31:d4:0a:09:dc:70:23:09:09:e3:cf:1a:37:ab:d6:
         e0:ea:ff:42:a5:52:18:b6:b9:03:d2:a0:1c:5c:45:55:47:f1:
         2f:c8:e7:8c:27:c1:60:b3:9a:0e:6b:e9:c9:43:de:8d:7b:85:
         58:18:7b:b7:33:c9:6a:cf:c0:2f:55:63:e2:f3:a5:91:50:7d:
         bd:6e:88:fd:83:a6:a5:3d:dd:6c:b7:90:ad:25:c0:41:11:80:
         c3:e3:83:aa:ba:b8:53:9c:1f:26:8d:a2:bd:c4:79:45:35:18:
         ea:21:37:be:59:70:21:6a:a6:8a:5f:ed:6e:52:b6:3c:27:ab:
         de:59:81:05:36:93:69:08:45:9a:78:d6:7a:d8:f1:69:8d:af:
         7a:88:24:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:46 2026 by rpki-client