Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/807327e7-0534-388a-bb0b-e08446883b4b.roa
File:                     807327e7-0534-388a-bb0b-e08446883b4b.roa (raw, json)
Hash identifier:          wK379iF5kuaT7vhft0fajEnyQO/ERMHe/u+dmFxcnDI=
Subject key identifier:   C7:6B:02:69:4C:32:FD:41:AA:94:82:27:2C:83:82:D1:BA:85:CB:4B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CAE7646D03BD7A8605740
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/807327e7-0534-388a-bb0b-e08446883b4b.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:57d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:ae:76:46:d0:3b:d7:a8:60:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=a51e51a2-d33b-463b-82f8-564e42b318a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3f:3e:e6:6f:a7:32:4a:68:38:00:2a:bb:b1:
                    c1:14:e5:60:fe:3a:70:b5:a0:03:f0:e4:78:c9:8b:
                    86:d7:a8:c5:9e:1f:7d:4e:0d:ef:06:5e:0c:98:d1:
                    47:cf:80:f3:6b:3a:25:6b:0e:c3:f1:8c:55:a6:e1:
                    0e:c9:97:85:01:17:eb:75:a9:0a:f0:c0:2b:68:90:
                    3c:d9:ad:ee:6e:81:40:af:d6:0a:23:94:7a:4f:6c:
                    91:22:b5:e4:47:ad:6f:17:4e:f8:f9:07:c8:31:c7:
                    44:94:81:5c:91:39:83:56:79:38:0e:1c:ac:a3:64:
                    d3:0c:bc:b5:6e:0a:e8:fb:00:56:28:cb:0e:06:d5:
                    02:35:24:84:a5:cb:2b:19:6c:00:ae:bf:5e:45:99:
                    9d:9c:9d:0b:b5:ca:c3:86:aa:3f:e9:56:4a:a8:10:
                    6e:52:e2:bd:be:5f:8a:2f:65:55:bb:ce:cf:96:be:
                    f3:aa:9d:49:02:ea:7e:25:f6:66:6b:21:d2:3f:9f:
                    26:7e:f2:4e:73:87:d3:29:5d:6e:e0:72:9f:6a:23:
                    a6:bb:18:16:f1:b3:9f:74:8f:bf:a3:94:c8:c3:33:
                    e4:a3:93:9c:b3:ca:ea:68:56:74:d7:39:0c:7f:2d:
                    21:64:ff:f1:d5:04:d1:e2:66:a0:93:30:b6:8e:b2:
                    32:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6B:02:69:4C:32:FD:41:AA:94:82:27:2C:83:82:D1:BA:85:CB:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/807327e7-0534-388a-bb0b-e08446883b4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:57d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:37:96:52:28:42:95:ab:b6:1c:41:56:fc:64:72:fe:04:86:
         2e:a6:40:9d:f0:5c:47:03:5d:61:8f:be:70:61:40:4a:cb:76:
         5c:32:18:e1:94:40:28:1b:6f:12:a7:ff:d6:c0:fe:59:8b:e2:
         dd:da:5d:ad:a8:95:36:13:94:6b:f6:a9:0d:ae:f5:0d:a4:d7:
         d0:01:bc:9e:37:3d:1f:31:cc:42:c3:1d:45:52:04:a3:ac:95:
         17:3a:cd:54:4d:90:a4:29:56:b7:0e:1c:bf:7e:c9:70:6a:be:
         5a:45:ec:d6:95:e0:4f:5a:5e:ae:d5:15:73:ff:8e:97:5d:51:
         0f:3c:fe:79:55:a0:1a:8b:c0:68:c5:cb:ca:17:c3:e8:c7:f9:
         bc:bd:aa:1a:58:42:27:98:84:13:04:13:2c:78:1c:64:b1:dc:
         c8:34:a5:09:b4:1d:cf:13:ed:29:3a:fb:2c:2c:2a:76:94:1b:
         ac:42:c8:0c:7a:e3:16:53:53:ce:43:1f:db:0d:62:12:60:56:
         30:0b:9e:07:48:55:1f:cd:d2:4e:f9:a5:50:d6:fc:80:98:c8:
         e7:f7:2a:0b:98:09:2a:2d:13:72:27:19:2c:5f:2f:1c:d3:be:
         41:1e:b1:bc:14:1f:62:50:e7:f5:03:d5:30:4e:f2:ea:89:5e:
         18:04:a3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:28 2026 by rpki-client