Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/612105ef-38bf-365d-9922-7e01bdbeacdc.roa
File:                     612105ef-38bf-365d-9922-7e01bdbeacdc.roa (raw, json)
Hash identifier:          5Jnmm2RuPuZJ1JE5ybFlIgGuWOdASTmmMNYcKHEBdP4=
Subject key identifier:   00:ED:85:D4:98:13:8F:7B:06:1C:36:2C:13:10:5F:EA:3A:2D:C1:71
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CAE5A9BE2E531AB5F53D0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/612105ef-38bf-365d-9922-7e01bdbeacdc.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4dd0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:ae:5a:9b:e2:e5:31:ab:5f:53:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=aee93268-6172-486b-90da-fab6f4d203c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:93:1a:57:2d:5d:63:9f:f0:55:9c:08:12:b0:
                    7d:88:2c:52:ba:80:50:56:cf:d2:de:8f:6f:4d:48:
                    5c:59:eb:84:9a:63:1e:e2:2a:36:e5:c0:80:7c:18:
                    4c:91:d7:66:e0:c2:d8:09:fc:4f:dc:64:0a:2a:95:
                    e5:02:cd:f7:25:8d:f6:64:7e:16:29:0a:3a:31:01:
                    05:a3:0a:b5:51:3b:aa:d1:fb:38:89:56:ed:ca:07:
                    c1:8b:a6:54:cd:34:89:2b:7a:c3:ca:ad:b3:b6:2d:
                    8e:b7:15:0d:76:0d:0d:5c:78:54:e5:9f:f2:9f:f9:
                    04:36:ab:6d:05:80:4c:79:99:18:4f:b2:19:00:28:
                    75:c3:03:3f:1f:b3:1a:8d:40:34:74:bc:e5:1c:17:
                    56:4c:1e:57:80:c9:ce:10:0a:2a:01:e9:04:8a:12:
                    b1:b8:93:a8:90:36:eb:74:09:34:31:30:d4:0a:1b:
                    fa:1e:4e:d0:6b:17:dd:a3:c9:99:c4:24:89:77:db:
                    e9:b9:c5:1f:06:60:65:2c:25:a7:cd:20:7c:bf:4a:
                    b2:b6:b0:b6:17:d3:f2:01:e5:de:b4:98:ad:c0:8c:
                    d4:fd:ae:a5:86:47:ac:ea:6a:35:c8:39:b3:46:bd:
                    68:0b:c0:fd:02:39:88:f1:82:eb:05:fc:ee:36:04:
                    59:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:ED:85:D4:98:13:8F:7B:06:1C:36:2C:13:10:5F:EA:3A:2D:C1:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/612105ef-38bf-365d-9922-7e01bdbeacdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4dd0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:54:ac:24:d7:37:30:6f:7b:3b:12:0b:f6:4f:ae:7f:b4:c2:
         c6:a0:3a:08:83:36:d8:88:0f:0e:07:20:5e:70:9b:e5:68:72:
         8c:e6:af:eb:7b:f0:2f:a6:c7:55:29:8c:62:68:e0:e5:e0:9e:
         2d:ce:d8:2f:62:c3:1b:f6:6c:8c:4c:e2:e2:4b:cd:5c:c8:d2:
         57:0f:0d:3f:1f:bf:91:6b:6f:00:28:24:6d:40:16:86:e4:7a:
         07:f3:15:bd:41:5e:dd:23:b3:7d:58:5d:d5:68:66:50:f0:f1:
         19:64:9a:3d:ef:33:fe:92:62:a8:2b:87:23:dd:21:43:01:35:
         98:90:bc:d9:7a:cc:eb:7f:23:1a:71:0d:b6:cb:af:09:79:4a:
         86:c0:d2:be:1b:18:a0:af:cc:45:fb:2c:a2:ce:93:16:4a:68:
         e0:52:21:df:01:c3:d1:7d:90:1e:41:00:e7:99:1b:00:9d:aa:
         95:b7:7d:ec:37:3a:a0:70:88:24:bd:0d:3a:02:8e:42:6f:df:
         cf:ea:25:b2:72:e6:8d:2d:6a:aa:2a:c6:c9:19:24:ce:17:64:
         a0:e6:17:a5:6d:50:3a:a9:31:fb:33:64:c2:93:80:1c:4d:5f:
         48:92:53:c7:52:f4:bb:60:82:d0:6e:d7:d0:de:f7:0c:59:da:
         30:ed:6a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:33 2026 by rpki-client