Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa
File:                     4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa (raw, json)
Hash identifier:          /L9R0iVaECsWlLXZphAQqcKBEVYnljcIRy4iD0tl2KA=
Subject key identifier:   18:C9:19:71:10:28:18:18:EB:6F:80:11:CE:44:B5:D5:CF:F2:DA:07
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CA973AAFB972FA9F91940
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4890::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:a9:73:aa:fb:97:2f:a9:f9:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=0a846725-8ad0-4a05-bffd-7b07e53e6cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5c:51:90:24:f2:83:a2:19:dd:8c:40:2e:e4:
                    c8:e5:b8:99:87:76:64:42:c4:8c:bf:8d:a5:f3:e1:
                    ae:66:2b:bd:53:b2:79:f9:8a:f6:21:13:27:4e:67:
                    fc:a8:0c:e2:85:3c:46:14:dc:06:9e:10:7f:49:00:
                    e5:8c:b2:b3:4b:41:93:e7:1a:dd:55:a5:9e:5d:15:
                    d6:34:53:98:95:8d:d4:35:f9:5b:23:8a:ea:1f:d1:
                    ad:75:02:b9:53:a9:3a:de:be:d8:95:b1:2e:4e:b7:
                    77:4d:20:c7:0f:ab:f6:f7:ec:93:c0:6d:3a:23:97:
                    76:ce:58:1d:95:46:04:6a:ac:3a:db:6c:d0:0b:ec:
                    fe:d6:d5:cf:47:23:b2:fb:25:ad:d2:65:f0:8d:92:
                    e8:91:46:8b:01:df:ca:1c:eb:04:34:ad:86:80:31:
                    aa:e6:bd:f3:0d:05:48:85:e8:ae:17:4d:91:82:17:
                    2d:f1:00:de:06:0e:70:ae:38:0f:3e:c8:d1:af:9b:
                    67:4b:2b:03:b3:b2:4a:1d:6d:e1:a3:22:fc:a6:b2:
                    37:60:91:99:99:cf:5f:72:31:d9:cb:6d:99:bd:2b:
                    dc:d1:d3:f5:11:b7:da:15:1b:c2:8a:75:4d:43:89:
                    07:81:81:8c:ce:e4:50:7f:30:9b:e6:4e:32:5e:2f:
                    26:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C9:19:71:10:28:18:18:EB:6F:80:11:CE:44:B5:D5:CF:F2:DA:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4890::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:88:e7:fc:ee:c9:d5:58:f0:c8:3a:65:2c:d5:c9:13:40:30:
         26:aa:3c:7b:f9:27:df:1f:a7:27:42:79:ec:fb:36:a3:08:8b:
         e7:d7:20:d7:08:56:2b:b0:22:10:16:06:47:bb:87:0d:9d:33:
         41:15:43:54:a1:80:6c:23:57:d3:29:8e:08:9f:72:7b:20:09:
         ef:e4:7c:3f:75:58:1e:37:1b:2b:5e:87:b2:4c:38:53:52:5e:
         02:e6:95:d2:aa:6b:b0:49:4f:3f:72:17:12:2b:0e:69:18:be:
         ad:cb:5d:40:de:2d:71:d0:a7:b1:9e:d2:89:3e:9d:54:3c:6c:
         05:02:b3:32:3d:5f:94:1d:a9:a6:35:73:ff:9d:2f:f1:f1:b3:
         98:53:d3:d6:0f:ea:6c:4c:cf:e5:d3:38:9b:7e:98:93:f2:bc:
         05:45:6e:dd:5a:4a:bb:c0:27:e6:d8:37:e8:d6:f2:63:46:89:
         b6:9f:64:03:ea:a5:11:db:20:7a:00:9d:55:1a:2d:8d:43:04:
         27:1b:eb:a8:64:c9:cd:e9:0b:ca:44:16:11:79:e8:4c:a3:ee:
         8b:a7:c7:fc:5a:d6:06:08:df:cf:45:b1:89:ce:ed:91:83:3e:
         f0:b7:49:a4:0d:fa:cd:fa:2b:b1:be:89:a4:fc:a7:cd:ae:db:
         96:32:68:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:19 2026 by rpki-client