Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/37dc2aa1-cb73-3211-9724-e0c93f58e298.roa
File:                     37dc2aa1-cb73-3211-9724-e0c93f58e298.roa (raw, json)
Hash identifier:          YFiTLk1TVH2QHxgka/4OLBcIhVmBv6ulvAll98wVzIM=
Subject key identifier:   A9:09:EC:81:BD:AF:AB:77:C3:EF:59:72:46:02:94:4B:A1:80:E3:77
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CAC65C00ADD31855B6380
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/37dc2aa1-cb73-3211-9724-e0c93f58e298.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5d50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:ac:65:c0:0a:dd:31:85:5b:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=b2e968ab-0a3d-4340-888d-a4f76375a3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:65:06:77:b7:8a:8c:23:dd:21:7a:26:2d:
                    a3:2f:2b:08:4b:65:62:8b:c0:43:ca:ab:e2:a8:e5:
                    51:d4:f9:ef:ec:20:ad:c5:a8:ff:36:ae:ed:60:18:
                    8b:da:04:53:80:7e:59:87:ca:e5:fc:04:7e:07:66:
                    95:15:23:3b:10:de:5f:e8:4b:db:a9:a0:f5:3f:86:
                    1c:49:f5:44:6d:42:d0:ed:6a:18:ee:ba:e2:98:ac:
                    98:5f:8e:83:e8:a9:67:ac:50:7f:3e:54:70:95:a4:
                    38:6d:d3:45:3b:93:86:15:3c:21:71:28:db:e5:9b:
                    0e:05:fe:1c:a1:a5:76:32:56:a6:10:73:48:20:3b:
                    42:e6:76:4c:b9:29:a9:00:87:a1:52:fb:62:b5:fe:
                    4e:64:cd:de:90:de:4d:a5:7f:c5:f8:e3:97:06:ae:
                    b4:77:59:f9:f8:bc:0b:e2:41:25:2c:41:38:83:41:
                    95:99:45:e1:f3:cb:d8:ed:3b:ba:ea:ec:2c:ca:16:
                    c6:8b:f6:80:a9:1e:d7:19:4e:5c:8d:97:2e:e4:aa:
                    c9:49:be:5b:97:61:96:0e:1b:0d:3f:1c:ad:a3:00:
                    21:5c:e5:bd:4a:25:1d:f8:4a:3f:f5:d4:c7:9d:5a:
                    1f:6d:7f:16:2a:44:67:18:e5:b0:6a:0b:5f:ee:dd:
                    18:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:09:EC:81:BD:AF:AB:77:C3:EF:59:72:46:02:94:4B:A1:80:E3:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/37dc2aa1-cb73-3211-9724-e0c93f58e298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5d50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:38:ed:70:71:cb:ce:be:24:e3:48:af:77:9c:58:56:76:68:
         2c:74:37:ce:a1:c3:ba:19:0d:57:85:4e:2f:02:b9:04:b9:71:
         50:b7:6e:da:a9:2e:22:5c:ff:46:3c:e8:8d:65:21:1c:78:85:
         f7:65:2c:e0:68:e2:c7:d0:4a:1f:f7:83:4f:c3:b1:1d:86:56:
         76:1a:55:ac:e0:b7:20:46:0f:77:d2:d5:c6:2e:3f:cb:ce:db:
         69:45:a5:ce:f6:58:af:ce:78:08:45:d0:a2:4c:1f:88:6b:d2:
         e3:ed:c7:9a:5a:40:11:4e:00:dc:89:db:77:db:46:90:5a:07:
         b1:5a:24:68:bd:87:b7:a3:2f:0b:28:20:a2:e8:4c:df:33:2e:
         1e:b0:df:28:7f:86:c6:58:13:5b:36:b2:c2:fa:f8:77:56:a0:
         0f:ec:b6:2e:9b:25:a6:0c:2c:8d:4f:38:d7:e8:58:70:55:44:
         02:b9:ba:2a:30:02:c4:d1:be:54:31:9e:d5:f5:ea:08:32:d4:
         26:73:d6:d2:a4:5b:38:06:06:f8:ef:6a:eb:64:8f:b5:6b:f8:
         45:ac:98:e2:c9:e7:c9:d8:60:8c:0c:d6:d9:5e:a5:ad:1a:e1:
         cd:9b:5b:58:ef:c1:86:94:91:d6:c2:85:9c:1d:a4:c4:87:49:
         92:c0:70:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:38 2026 by rpki-client