Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5e11a241-e7ac-380e-ad90-d308b235fc62.roa
File:                     5e11a241-e7ac-380e-ad90-d308b235fc62.roa (raw, json)
Hash identifier:          N2Twmbk+uPRXRTxV8QB/iZIgEj2ccknzLTlOiVFLSuc=
Subject key identifier:   7A:0E:06:90:D8:95:1F:EE:AE:2A:35:3C:51:7C:56:CE:94:CB:B4:F2
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CB9F5E3A52F4CB57D2940
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5e11a241-e7ac-380e-ad90-d308b235fc62.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5e40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:b9:f5:e3:a5:2f:4c:b5:7d:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=6a5507e5-eee5-402b-8a42-2d01c4dd33e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:b7:29:ae:fe:9e:0e:11:d6:c1:52:1d:d7:
                    bc:01:fb:1a:7d:81:a0:b7:d8:81:23:61:54:ec:46:
                    b4:d2:0a:9a:d1:59:51:9a:7e:08:a8:6f:30:27:1e:
                    47:9c:13:ae:af:47:bd:2b:d4:cf:02:04:4a:ba:bc:
                    ac:6c:a5:c5:8f:db:1a:33:7b:e1:84:42:92:d0:ac:
                    fa:b3:c2:e3:c0:d6:f1:ab:22:2d:42:22:ab:15:28:
                    55:b9:86:e0:65:3a:47:0e:95:ab:b4:a3:e7:15:44:
                    03:16:a7:be:94:d9:a2:56:03:0a:24:38:6f:f0:2d:
                    c7:61:e8:a9:0c:a1:11:db:34:cd:ba:dc:4b:fe:9f:
                    0f:9a:a8:d9:16:e8:dc:e8:b5:bb:a6:8e:3e:23:cd:
                    fd:d0:f4:a4:73:ce:47:dd:f5:da:7a:5c:cf:82:af:
                    8b:35:f0:47:50:b7:a4:b0:ae:2f:6a:f0:09:98:fa:
                    a3:3b:fe:47:a6:e8:74:78:d6:ca:9c:be:13:4c:da:
                    f4:d7:f1:4e:cf:4c:d0:f7:26:e7:70:16:81:31:ee:
                    a4:6c:87:81:ad:bb:8a:b8:da:33:64:a3:45:e0:7c:
                    3a:d1:e8:93:6e:f9:be:a7:ef:cc:e9:bb:41:dd:94:
                    41:b1:0b:07:b8:7b:8b:f6:bd:f4:f9:4a:ae:88:5e:
                    d2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0E:06:90:D8:95:1F:EE:AE:2A:35:3C:51:7C:56:CE:94:CB:B4:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5e11a241-e7ac-380e-ad90-d308b235fc62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5e40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:8b:ed:59:07:d8:2d:7c:b0:2f:ba:b4:ea:39:e3:97:e7:eb:
         02:3f:ff:01:1b:1d:21:54:42:bc:dc:df:1e:fc:4f:65:60:c0:
         3a:81:3d:7c:6b:e7:cb:27:28:76:7a:de:45:35:09:de:0f:ad:
         4a:fc:84:46:8e:50:ac:cd:43:40:0f:11:6f:46:23:2e:20:9c:
         bf:07:64:60:ff:4c:a8:54:d3:3e:62:e2:01:5a:25:de:14:31:
         8e:eb:25:e3:ee:ba:51:85:19:7d:47:06:93:3f:b9:7f:92:20:
         92:ea:a1:8f:d9:c2:c5:45:a6:48:35:81:a4:c8:b8:99:42:62:
         a7:a9:09:41:f1:7b:00:17:0c:ad:b5:03:97:da:5c:30:59:b2:
         1a:35:25:b8:aa:d2:82:aa:6e:ac:67:cd:f5:e2:0e:5a:50:03:
         44:18:04:9e:5f:59:7a:ac:c1:77:50:84:cd:4d:77:a2:c7:df:
         1a:a4:dd:b0:89:6c:80:c7:9c:2a:b7:ca:b3:dd:10:e0:e7:6e:
         64:de:d6:52:60:ba:cc:7c:d2:02:70:3a:de:fa:f9:21:34:77:
         70:3a:aa:13:93:95:73:d8:e3:fd:4f:8b:bf:92:f0:a0:30:19:
         f3:f3:ce:66:ca:d2:82:bb:68:f1:15:af:15:a5:19:46:df:64:
         27:7b:24:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:48 2026 by rpki-client