Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5201142d-d317-3747-9248-b60c6e9bcdb6.roa
File:                     5201142d-d317-3747-9248-b60c6e9bcdb6.roa (raw, json)
Hash identifier:          NOkKFRQJQc9ap2J8ZwWoojjulcm7S0p6TH78hgyi+IM=
Subject key identifier:   72:3B:7F:02:7C:8A:6D:DB:01:D3:79:3C:21:13:66:85:EF:2D:D4:9B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CBB538F48560C534CEC00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5201142d-d317-3747-9248-b60c6e9bcdb6.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5c30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:bb:53:8f:48:56:0c:53:4c:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=a614d0d1-3737-4254-b961-cd6f50fae2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:aa:2d:0b:bd:37:95:37:68:fe:6c:da:4c:
                    e0:6b:d0:88:62:96:82:d7:ac:4c:df:5e:eb:e4:10:
                    4e:53:e0:71:b5:f4:bc:65:b5:9c:5b:0c:c8:93:84:
                    88:75:6d:57:7b:80:ef:a1:42:14:44:0e:d1:be:a7:
                    9d:b9:ee:1e:4f:02:b2:37:6c:f4:bd:ec:be:56:33:
                    b8:12:4c:56:f5:75:fe:5b:19:95:8c:12:a4:ff:06:
                    75:20:9b:ad:d0:83:52:eb:57:ba:d3:c1:58:be:a3:
                    27:6c:f3:be:35:a8:4c:6f:90:e7:cc:34:bf:68:e9:
                    36:77:30:b0:6d:8b:c5:30:9a:6d:e9:ec:f3:30:17:
                    16:09:d4:07:20:ea:65:dc:0b:76:8a:1f:5b:3c:35:
                    e4:bc:4b:4c:20:2e:90:27:a7:8c:ce:c2:b5:bf:81:
                    22:cf:5c:cd:11:df:74:b3:02:8d:bc:af:a6:df:bd:
                    2d:e8:fb:15:a0:1a:cb:5a:f0:62:b5:81:3a:cf:a6:
                    46:ef:ca:5e:4a:79:2c:73:4b:03:1a:d0:b4:b9:94:
                    6d:cd:48:8c:3b:32:e4:3d:3a:2c:2b:e2:cc:0e:71:
                    cd:7e:cb:20:01:f9:6e:1f:ef:e8:34:dc:42:7f:fd:
                    6c:b0:54:9e:f3:5a:60:d4:4d:50:35:78:41:2c:cc:
                    52:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3B:7F:02:7C:8A:6D:DB:01:D3:79:3C:21:13:66:85:EF:2D:D4:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5201142d-d317-3747-9248-b60c6e9bcdb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5c30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:20:da:68:c4:27:e8:ed:7c:12:7b:6f:3e:b7:5a:cf:49:14:
         d0:aa:11:14:cb:8d:6b:aa:7c:24:26:58:2f:7b:d8:ce:3c:5b:
         1c:aa:38:40:ca:7c:d0:bc:98:82:79:12:35:46:8c:44:80:ac:
         73:b3:41:fb:cd:2c:14:75:9c:73:5e:04:2e:7e:92:4c:30:21:
         06:14:84:58:e1:a7:af:f4:c6:95:6f:67:a6:6f:69:ac:e8:1f:
         29:16:d3:2b:f3:33:b6:00:c7:a2:ed:1b:ab:da:36:05:bd:00:
         7d:df:b2:19:74:12:b1:83:80:2e:cf:57:65:3e:b5:15:b6:47:
         c7:92:1f:9a:22:ec:36:7f:2c:70:b4:32:76:79:bc:bb:bd:39:
         bf:9e:0b:2b:95:95:a8:18:36:68:b3:0b:62:90:0f:a9:10:4e:
         18:eb:88:fc:24:41:d7:08:51:61:da:93:09:1b:b4:aa:2e:35:
         31:13:8c:4c:3a:6f:50:80:ac:4c:a5:52:de:a0:18:70:f8:94:
         c3:7e:5e:07:95:2a:6f:8e:a5:46:a4:5e:ea:ca:87:fe:06:35:
         62:7b:1f:9b:d2:14:00:4a:35:a9:81:3b:17:89:8f:07:fb:57:
         df:b0:b2:a2:3c:bd:83:1c:00:23:32:2d:7c:07:0c:6d:8b:a1:
         e3:61:3a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:13 2026 by rpki-client