Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4632fbf6-2535-365c-9fad-14b318f7c5ef.roa
File:                     4632fbf6-2535-365c-9fad-14b318f7c5ef.roa (raw, json)
Hash identifier:          8GjEeNJ2TBrXttQptM58f1qc+ONRrvJEX7bAYqmk0u0=
Subject key identifier:   BA:EA:DD:87:57:76:95:C8:81:2A:F1:69:38:6C:DA:DF:A0:84:3C:F1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CB0CF7E0FDA0F23B5BD00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4632fbf6-2535-365c-9fad-14b318f7c5ef.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4af0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:b0:cf:7e:0f:da:0f:23:b5:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=e094f3df-0dcf-47f7-8958-21defa500c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:7a:9f:73:04:e3:2a:6c:7f:f7:db:f1:f5:
                    de:70:ef:02:94:92:29:c8:6d:29:78:8f:08:81:03:
                    d3:3e:ea:dd:d6:f5:86:eb:0c:d4:43:65:88:9f:eb:
                    0f:34:f6:1d:c7:56:a3:93:f3:b0:c4:fd:49:2c:c9:
                    c6:85:56:89:d3:8b:1d:ac:85:41:cb:88:40:a9:7e:
                    11:f9:09:6f:3f:a6:44:52:94:07:aa:b0:dd:7f:01:
                    20:25:6e:47:fa:d4:68:75:97:f6:fa:8d:aa:c4:53:
                    58:e4:b2:44:2e:62:e3:c0:f0:b0:4d:f5:27:35:15:
                    a1:db:0f:bc:e3:7a:4e:49:da:4e:2e:84:bc:7b:7b:
                    b0:6d:05:89:fb:64:8f:0b:e1:83:65:06:7e:98:bb:
                    5c:aa:40:6e:36:63:77:c4:59:50:32:ba:e4:4f:29:
                    91:ba:cb:04:c0:00:da:75:2f:3c:ce:a7:9e:be:a6:
                    7e:6e:0c:35:91:1a:e4:b5:7a:5f:ea:d4:02:6f:b0:
                    57:e1:0e:91:f2:17:40:d4:5f:1a:87:96:fa:2e:55:
                    21:c2:21:a0:18:6b:1b:16:b2:27:9a:81:67:60:4f:
                    72:03:fb:39:8a:2c:75:57:20:fc:3a:52:23:b6:8f:
                    79:68:75:ac:40:3f:81:82:4e:3e:e4:16:2e:c7:27:
                    d5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EA:DD:87:57:76:95:C8:81:2A:F1:69:38:6C:DA:DF:A0:84:3C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4632fbf6-2535-365c-9fad-14b318f7c5ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4af0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:02:79:ce:43:db:25:d2:b8:e0:5b:63:b0:f6:84:c1:5d:4b:
         e4:69:26:b9:7a:a4:05:59:af:a3:96:e3:b4:ce:ee:fb:94:b4:
         84:bd:b2:d3:d1:67:d0:34:e7:a9:d2:27:30:d1:54:75:2f:80:
         df:64:f4:6e:7c:d9:ae:a3:74:dc:c7:2f:eb:42:c0:45:eb:00:
         1d:6e:f7:67:20:29:6d:4e:94:88:06:57:89:1c:50:ce:08:59:
         d1:42:38:2a:d6:48:77:cd:af:94:86:19:c9:28:35:19:a3:42:
         26:5b:5b:ee:2b:7c:1a:83:30:e5:99:d1:3a:e0:04:bd:92:ad:
         1c:a2:94:0a:53:8b:10:50:9e:c5:de:6c:a3:f7:ea:ca:70:c7:
         1b:89:52:11:13:36:50:0f:07:38:80:6d:be:a2:fd:9a:18:9c:
         25:b2:bb:46:b0:a4:a5:2e:9d:53:8a:70:f9:ac:5b:7a:9f:bd:
         1b:a7:4f:06:77:3b:87:7a:a7:a6:aa:8e:4d:42:85:cf:46:e5:
         f6:01:77:18:1a:d2:b6:72:30:9d:aa:40:92:44:07:9b:4d:c9:
         2e:22:7c:42:67:24:38:bf:c1:cd:c4:38:bf:ae:08:dd:45:25:
         af:ff:9c:64:c4:00:93:d5:31:0d:58:5e:5f:63:e6:51:ec:eb:
         83:de:0e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:29 2026 by rpki-client