Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/354ca2f6-7b11-3d0e-8947-2a26ff098446.roa
File:                     354ca2f6-7b11-3d0e-8947-2a26ff098446.roa (raw, json)
Hash identifier:          xYF/0k3FVFdNB5EQGSneSR/h1fSGH3ickwrWpTY8VgU=
Subject key identifier:   F3:A8:D3:6B:C9:D8:00:61:94:26:E7:92:54:AE:97:9C:2D:F3:7F:3B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CAAAFBD5060906E28C600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/354ca2f6-7b11-3d0e-8947-2a26ff098446.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4480::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:aa:af:bd:50:60:90:6e:28:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=78889900-3bb9-40d1-9dcd-a5150b28a037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:4c:9d:cc:55:af:d0:69:98:14:29:2b:c4:
                    c6:79:d6:52:4b:6d:b7:1d:f3:01:62:3a:bb:fd:42:
                    9e:6f:6f:96:2e:52:5f:df:11:97:0a:81:d1:91:23:
                    ce:07:83:1b:79:ac:4b:16:fe:85:6f:45:3a:39:66:
                    24:bf:a3:2d:d7:b3:2a:1d:85:06:00:88:be:b7:d4:
                    bf:9b:64:1b:46:52:a3:31:ce:15:67:7a:b5:c8:4b:
                    32:0d:5c:05:f1:65:98:5a:d9:72:5e:10:be:5e:27:
                    e0:f4:35:15:e0:ef:82:a4:0f:27:1a:f4:cc:65:c7:
                    8a:f0:21:75:c2:81:16:f1:ad:4c:0b:5b:bf:92:ae:
                    d0:6f:2a:b9:1e:5a:ec:dc:d5:5d:7b:13:72:c8:1d:
                    4b:3c:f9:3a:25:72:29:13:58:e3:b2:92:3e:7c:e0:
                    eb:2e:53:e0:b4:35:39:96:a1:fa:ec:2f:7c:9d:de:
                    bd:8e:c6:48:f9:74:ae:20:a6:c8:65:b2:34:35:63:
                    b4:a1:06:14:f9:07:12:2c:cc:a3:34:a1:21:6b:f0:
                    bb:a0:8e:0c:45:c7:b3:0b:b1:ec:ab:9f:33:a4:49:
                    c4:22:40:27:f8:95:98:7b:87:2d:df:b8:fc:b2:cd:
                    aa:0a:a3:42:09:53:1b:b3:33:6b:ac:f7:b6:b4:c7:
                    26:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A8:D3:6B:C9:D8:00:61:94:26:E7:92:54:AE:97:9C:2D:F3:7F:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/354ca2f6-7b11-3d0e-8947-2a26ff098446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4480::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a1:03:4f:4b:5f:35:a8:30:89:8b:95:23:24:76:18:1c:28:
         81:a8:c4:98:05:53:62:f2:b7:01:c7:78:de:97:82:55:fa:05:
         6b:14:11:3d:3e:f8:27:90:2b:f4:b7:cb:61:66:3e:fd:99:33:
         a0:bc:d5:b6:53:d0:44:0c:50:df:d4:c8:62:cc:ba:3b:0d:ce:
         17:88:53:a0:24:45:f4:9b:15:9d:94:b2:02:02:4a:7f:0e:f3:
         e1:98:c7:76:fd:34:d9:be:5f:68:21:32:15:28:f0:ca:58:69:
         a9:1b:9a:e4:95:a0:cc:92:2d:de:50:b6:11:a8:40:7b:b6:74:
         1b:5b:52:b7:79:1e:ad:d2:f8:08:f5:82:87:4f:5f:34:4f:45:
         12:b3:f3:7d:a0:af:1c:a1:87:5a:4c:5a:f1:79:a3:32:ac:8a:
         af:d6:4a:ea:a2:d7:c2:68:23:c7:66:49:1c:c1:66:d3:b0:95:
         5b:96:c1:a4:e4:34:98:20:ad:b9:92:3f:3f:bb:c3:de:be:19:
         55:d8:fb:f4:34:01:34:14:5c:37:77:f0:61:8c:70:98:05:8c:
         24:db:8f:e9:b2:57:d0:5d:63:1c:0b:d7:b6:73:b3:1b:d6:ad:
         c4:b0:1f:f4:03:62:c3:fb:86:30:ff:c4:54:50:5e:19:c8:36:
         cb:68:f1:98
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzAfKqvvVBgkG4oxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk
Nzg4ODk5MDAtM2JiOS00MGQxLTlkY2QtYTUxNTBiMjhhMDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqslMncxVr9BpmBQpK8TGedZSS223HfMBYjq7
/UKeb2+WLlJf3xGXCoHRkSPOB4MbeaxLFv6Fb0U6OWYkv6Mt17MqHYUGAIi+t9S/
m2QbRlKjMc4VZ3q1yEsyDVwF8WWYWtlyXhC+Xifg9DUV4O+CpA8nGvTMZceK8CF1
woEW8a1MC1u/kq7Qbyq5Hlrs3NVdexNyyB1LPPk6JXIpE1jjspI+fODrLlPgtDU5
lqH67C98nd69jsZI+XSuIKbIZbI0NWO0oQYU+QcSLMyjNKEha/C7oI4MRcezC7Hs
q58zpEnEIkAn+JWYe4ct37j8ss2qCqNCCVMbszNrrPe2tMcmIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPOo02vJ2ABhlCbnklSul5wt8387MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzU0Y2EyZjYtN2IxMS0z
ZDBlLTg5NDctMmEyNmZmMDk4NDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQESA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEqhA09LXzWoMImLlSMkdhgcKIGoxJgFU2LytwHHeN6XglX6BWsU
ET0++CeQK/S3y2FmPv2ZM6C81bZT0EQMUN/UyGLMujsNzheIU6AkRfSbFZ2UsgIC
Sn8O8+GYx3b9NNm+X2ghMhUo8MpYaakbmuSVoMySLd5QthGoQHu2dBtbUrd5Hq3S
+Aj1godPXzRPRRKz832grxyhh1pMWvF5ozKsiq/WSuqi18JoI8dmSRzBZtOwlVuW
waTkNJggrbmSPz+7w96+GVXY+/Q0ATQUXDd38GGMcJgFjCTbj+myV9BdYxwL17Zz
sxvWrcSwH/QDYsP7hjD/xFRQXhnINsto8Zg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:02 2026 by rpki-client