Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/49d0619b-c9be-3a1b-8037-0dbad60d468d.roa
File:                     49d0619b-c9be-3a1b-8037-0dbad60d468d.roa (raw, json)
Hash identifier:          8kKLjhlbxBdymD+8eHWsjukl+rt7xCK3/9FJcJVyA8M=
Subject key identifier:   02:B6:F2:72:85:85:A8:17:35:29:94:3A:CA:F2:2E:05:0D:32:F9:EC
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CC4EDFE99BE6F2ED06100
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/49d0619b-c9be-3a1b-8037-0dbad60d468d.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5cd0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:c4:ed:fe:99:be:6f:2e:d0:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=a5a84e9d-9324-431e-9285-4f3d2b1f7f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:00:b3:f1:a7:57:e2:d3:7c:c5:3b:00:07:
                    c8:05:f9:a6:3e:ea:ba:7a:40:fa:32:f4:51:a7:75:
                    6b:74:08:cb:ef:03:a1:88:9b:4c:06:b3:5a:fe:bd:
                    51:89:1f:38:1c:3c:18:0d:73:53:8b:b4:50:89:45:
                    6b:81:f3:d2:78:80:ff:a4:63:88:67:c1:b5:00:a4:
                    7f:94:ef:b7:e0:f7:f5:e6:d7:14:d2:02:bc:0a:f2:
                    0c:d1:2c:73:44:19:03:39:73:fb:8c:0b:bc:a5:53:
                    04:db:24:b9:03:37:3e:3b:0f:f6:20:c4:46:1e:7e:
                    9c:21:68:8e:25:00:7e:51:a1:5b:49:e7:97:49:48:
                    53:44:bf:eb:5b:cd:ff:44:a9:d6:51:cb:09:4a:f1:
                    a2:98:d2:bf:3c:9e:88:78:74:58:bf:77:a1:c7:12:
                    fd:a3:70:0a:19:1d:1a:13:54:bf:f4:7b:ca:b3:d5:
                    68:4d:f5:40:7a:b4:92:43:93:74:56:bf:64:7a:d5:
                    10:11:8d:cb:5a:5b:45:2a:0b:44:0c:e0:a1:ca:33:
                    46:09:3e:bd:05:98:77:db:6c:5a:2a:a3:28:2e:32:
                    85:32:d4:cc:d5:57:ca:45:78:ce:48:ec:56:d2:3e:
                    8b:3f:f0:6a:98:ef:b2:ee:ca:94:05:67:70:dd:22:
                    b5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B6:F2:72:85:85:A8:17:35:29:94:3A:CA:F2:2E:05:0D:32:F9:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/49d0619b-c9be-3a1b-8037-0dbad60d468d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5cd0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:0d:bb:d9:5a:e4:16:6b:96:5a:ed:79:56:19:bd:78:0b:75:
         7d:f2:8a:9b:89:06:9c:38:4c:2a:7f:01:73:9c:23:d7:1c:8c:
         5b:72:f0:47:b4:5b:6c:35:b5:5f:8a:8e:dc:97:d6:c3:7f:6a:
         ea:2d:ba:6e:25:6b:f0:dd:51:45:80:3d:4a:78:ed:01:bb:cf:
         1b:96:e8:e9:22:3c:20:5c:0d:08:bf:b0:33:4e:ca:62:28:d0:
         fc:07:41:53:f5:2c:df:e7:a1:c0:74:78:49:fd:82:d3:c7:b2:
         f8:28:72:c0:8f:a8:68:d4:79:c4:e7:8c:62:1e:4a:5a:e4:ab:
         f3:a8:a3:6a:ad:4e:be:46:4b:08:34:87:49:d9:42:4b:07:6f:
         c0:a0:27:05:5b:ad:62:8f:69:57:ed:de:99:c4:4f:75:30:63:
         44:9a:dd:03:f3:7c:67:3a:e5:84:63:9c:d9:db:96:e5:5a:66:
         e5:8d:ed:f1:02:5b:ba:d3:0d:f2:29:9b:d3:fe:e6:2e:a4:45:
         fd:c4:36:ff:88:62:76:be:1c:00:ed:63:86:d9:1e:f6:55:50:
         4a:c2:24:37:d0:d4:31:f6:ef:9e:7f:d7:bc:bb:e4:da:60:36:
         f0:b5:08:1f:e7:4b:bf:61:7e:5f:0a:88:27:20:00:8d:d7:24:
         6f:11:27:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:07 2026 by rpki-client