Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c86c187-5981-37f4-b8e8-eb18a63b15df.roa
File:                     6c86c187-5981-37f4-b8e8-eb18a63b15df.roa (raw, json)
Hash identifier:          tlN/N6vgbRLXHcHfibPX0jlYsLYDHBZ4Ricns997gJ0=
Subject key identifier:   32:7E:AD:45:DA:0E:AF:40:27:2D:CD:E0:B2:B0:FE:29:A0:7E:37:6B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CC4314EBF60DBEF70AA80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c86c187-5981-37f4-b8e8-eb18a63b15df.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5a40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:c4:31:4e:bf:60:db:ef:70:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=65b71ccf-554d-4321-9c83-e3fc6e3c8252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:e2:cb:62:80:53:a6:e6:ce:d6:ee:cd:6a:
                    35:f6:63:2e:bd:46:31:16:41:e6:e5:25:77:7d:00:
                    c8:e5:b5:e9:8b:6d:16:15:ed:64:71:45:68:3b:f8:
                    97:c0:30:83:74:64:8f:e2:3e:91:dd:51:be:4b:4e:
                    03:58:4f:67:04:a3:62:e2:20:05:d3:45:59:0d:16:
                    6c:11:cf:7a:35:4b:7e:8d:d6:78:65:3d:ff:02:29:
                    f2:52:97:83:9b:08:bc:ff:b4:d5:d6:f0:bc:66:18:
                    e7:9b:58:75:6c:29:ef:15:6e:7f:c9:28:b9:5d:12:
                    d7:87:74:24:5d:99:ab:13:8c:27:b2:ba:5f:a9:5b:
                    e1:b5:c3:8f:fd:87:fc:93:f4:dc:dd:9a:7a:d5:32:
                    df:57:66:69:48:c1:51:86:f4:31:3c:34:9a:04:ed:
                    14:38:9e:ba:4f:e3:de:0f:17:f9:c8:94:a4:ff:10:
                    59:da:c2:5c:94:cc:46:b1:ce:6d:ff:c8:93:72:1b:
                    f7:16:98:c8:05:7b:23:5a:b8:82:06:45:fd:bd:47:
                    00:6d:9e:99:71:b1:ff:89:9b:5f:57:97:f0:10:43:
                    c1:4f:f0:08:bc:e4:cd:fb:ee:af:0d:22:02:d8:a6:
                    56:a7:78:cf:17:c6:00:b4:a1:f8:d1:64:e9:6f:71:
                    45:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7E:AD:45:DA:0E:AF:40:27:2D:CD:E0:B2:B0:FE:29:A0:7E:37:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c86c187-5981-37f4-b8e8-eb18a63b15df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5a40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:bd:7a:a1:fe:1d:4f:99:f8:04:83:14:4b:f5:5c:30:41:82:
         e2:bd:18:cc:18:66:fa:16:45:bb:d9:27:c8:12:de:88:90:47:
         0c:05:07:77:4b:07:4a:d3:55:8c:02:2c:c1:16:68:19:bd:d6:
         60:31:bf:ec:04:7d:f3:57:05:f7:c7:93:2f:92:0c:ce:13:a0:
         ca:26:11:19:91:ef:7a:3d:3b:78:a1:cb:16:9b:db:ce:4e:a6:
         96:bf:75:e3:0f:cd:59:89:5a:30:4e:71:7c:b2:e7:67:ea:31:
         f4:83:90:c3:52:fb:39:53:6a:72:f4:4a:c5:20:73:92:67:e7:
         bb:c1:65:f9:37:a9:3f:2d:4b:1a:56:44:7e:d9:8c:89:20:4f:
         fd:eb:57:76:36:55:25:4f:22:a0:be:9f:72:df:ac:9a:90:0f:
         83:da:17:ff:8b:8a:17:d7:36:69:3c:62:ef:e8:ed:29:c4:c2:
         4a:7a:4f:fe:10:a7:97:8f:2e:d2:d6:8e:d8:36:94:6d:da:f6:
         72:72:7b:e9:fc:55:f6:cd:7e:e6:98:d3:32:b1:fa:e1:d6:0b:
         ea:08:88:60:b6:95:47:24:bf:a9:66:11:ba:43:16:0d:84:94:
         15:9c:f3:34:40:c7:e2:e2:94:87:92:5d:c2:72:7f:96:a3:e3:
         fe:72:67:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:16 2026 by rpki-client