Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/42b3601f-1fb3-34b4-aa7f-1a568e84b951.roa
File:                     42b3601f-1fb3-34b4-aa7f-1a568e84b951.roa (raw, json)
Hash identifier:          J0Q6W6Mr30rAmhMWMOtB0y8jDApUR9TltGFRGFue0ao=
Subject key identifier:   86:FF:6E:C5:08:82:8F:17:8D:58:19:B1:DC:44:CA:BF:E8:B9:53:0E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CA19E75AF33E1ECFF4A80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/42b3601f-1fb3-34b4-aa7f-1a568e84b951.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4660::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:a1:9e:75:af:33:e1:ec:ff:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=c90b6bfa-d741-4b0f-a86c-86eedcbd61a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:32:cd:8c:aa:c5:c4:3e:16:66:ba:97:e5:3e:
                    06:d7:d9:17:30:68:1c:f7:b3:d3:1e:39:d9:3a:15:
                    52:ed:a7:7e:5e:45:df:82:2c:f5:99:8b:cf:78:e0:
                    6e:cd:77:97:00:c3:ce:ee:9c:7b:7f:da:ae:a7:67:
                    1b:bd:24:7a:50:9a:e7:9c:5d:cd:a3:d8:89:20:71:
                    1a:53:e7:a4:1c:b2:ca:50:67:c1:c1:b6:2c:32:f8:
                    b3:a0:ec:e5:19:da:30:b9:21:09:63:1e:6c:8b:77:
                    ab:ff:0e:41:d3:f7:e0:9c:0e:45:dd:78:7c:92:91:
                    0d:a6:ae:ab:02:07:b8:1a:b5:88:8f:84:c7:3d:ae:
                    5a:82:8c:7d:79:3f:47:ba:bc:b3:81:98:f7:08:24:
                    3a:b6:41:da:28:49:ad:36:0e:16:4f:34:7a:53:88:
                    59:81:a5:2c:7a:d7:c9:36:9d:1b:55:46:8b:49:61:
                    0a:5c:5d:54:bd:12:c0:10:da:32:0c:da:8a:5a:d1:
                    a5:8b:6e:55:4f:fc:e0:57:52:a1:2a:49:b5:a7:e6:
                    96:60:f8:c9:ee:d1:a2:ac:cc:d0:30:f5:f1:04:58:
                    eb:59:d0:ba:7a:0b:bf:d9:f0:4e:11:df:fb:f8:3c:
                    39:05:96:38:b6:67:cf:a7:5b:9c:73:65:a6:a8:94:
                    1f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FF:6E:C5:08:82:8F:17:8D:58:19:B1:DC:44:CA:BF:E8:B9:53:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/42b3601f-1fb3-34b4-aa7f-1a568e84b951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4660::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:fa:7b:56:72:e9:fe:1a:d3:24:0e:31:60:2f:c3:d3:2c:f3:
         f7:51:38:85:af:5c:d3:f3:67:07:d4:cc:8b:0a:b1:a0:a7:a3:
         84:8a:8c:f6:e6:50:83:76:0d:5f:86:29:cd:9d:3e:7a:59:9f:
         b3:7c:9d:9b:60:42:0e:80:06:d5:4a:ec:2a:85:99:76:bb:3b:
         86:7a:00:6c:21:47:dc:91:df:ee:2f:c6:04:8b:6e:49:19:e2:
         43:4a:e9:a7:9c:17:51:7b:1f:81:ee:88:31:8d:e7:a2:76:7d:
         51:66:38:62:68:d3:0e:d0:7d:53:2c:d2:54:e0:01:65:f0:59:
         b7:a5:2e:2b:b6:1a:84:cb:19:36:8d:f4:ec:a8:1a:41:02:6e:
         87:32:4e:d5:99:c5:5b:42:42:25:c2:f9:5b:5f:f6:b2:36:10:
         35:23:71:88:4d:34:7b:b1:da:f7:cb:0e:55:e3:68:ed:dd:54:
         d2:a4:88:b8:19:2e:be:3e:be:0c:9e:f9:c0:5d:a3:06:3f:a9:
         05:55:0e:ad:ef:41:d2:32:6a:d3:b3:cf:18:ab:70:01:ea:3f:
         a1:a7:eb:c2:82:a3:33:fa:16:79:32:10:34:e6:6c:1a:48:6a:
         f4:da:d7:ab:7a:43:05:cf:ac:ed:f3:45:24:8b:e4:2b:3e:62:
         1e:0b:f5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:23 2026 by rpki-client