Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/88114a24-eb93-3ca8-9edc-7c5b5b08f403.roa
File:                     88114a24-eb93-3ca8-9edc-7c5b5b08f403.roa (raw, json)
Hash identifier:          PNiA7BIZmuWSJ3eZ1UvTyJEza4OZSxGlXx29fwzFObg=
Subject key identifier:   A2:43:3A:BD:5E:57:86:9A:C9:9B:38:81:66:35:C9:1C:22:AF:BB:C6
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CB6A0A19C2624B6555880
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/88114a24-eb93-3ca8-9edc-7c5b5b08f403.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:50b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:b6:a0:a1:9c:26:24:b6:55:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=a6312d48-b452-4e9f-bc45-73e61e9f8a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:29:79:df:ba:6c:d8:b6:f8:84:a2:f0:05:46:
                    ea:3d:e1:14:cb:57:a8:18:85:47:3b:15:8e:0e:7c:
                    e3:a4:42:be:1b:7c:03:a3:6b:e1:f2:bd:d4:77:af:
                    ae:47:59:6a:86:f0:34:e9:63:c6:70:32:0a:da:76:
                    3c:77:90:5d:b7:dc:be:17:88:6a:37:1c:23:0c:8f:
                    b1:21:4a:f1:9b:eb:ca:e5:0b:e7:8b:07:95:77:ff:
                    eb:fc:6a:6b:ea:11:cc:2a:d7:f5:f0:70:d5:d7:70:
                    55:36:3d:74:d6:9d:a9:32:af:cb:38:a0:7d:f2:5d:
                    82:8d:b9:7e:1b:e4:af:45:d4:4e:34:33:2c:63:0b:
                    c2:f4:d1:55:23:17:f1:dc:e8:20:0a:a6:87:66:4f:
                    e6:42:2b:ed:45:da:31:ad:d0:7a:37:85:71:85:c8:
                    eb:99:e7:1f:33:ac:c3:21:98:51:e6:b9:bd:aa:f1:
                    6d:a9:c6:0a:63:2e:4e:5e:10:67:14:a4:a4:95:c6:
                    ea:7a:b7:d9:ff:7c:47:b7:31:c7:f1:78:6c:c9:02:
                    03:2a:8a:61:69:01:4a:e2:fb:0b:26:72:2f:67:9d:
                    4a:be:34:84:02:64:2e:ee:83:29:72:7a:85:32:4f:
                    2c:59:c3:5f:b9:cf:9d:b8:4f:1d:76:c3:21:15:4d:
                    e7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:43:3A:BD:5E:57:86:9A:C9:9B:38:81:66:35:C9:1C:22:AF:BB:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/88114a24-eb93-3ca8-9edc-7c5b5b08f403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:50b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ca:17:44:38:65:07:7f:a3:58:5d:0c:19:c8:87:d9:eb:ef:
         9f:e3:2f:d2:d9:87:e3:2f:d5:f3:e4:89:41:bb:aa:9e:8b:9d:
         b9:ad:29:c1:30:83:06:10:dd:ee:dd:bb:59:24:c3:0a:35:4c:
         c0:7e:2d:ca:54:bb:07:ab:a5:e5:3c:1e:05:6c:2f:f2:9e:47:
         d1:75:23:b3:2c:ea:38:17:16:f2:ab:ab:3a:9e:0b:fb:f6:de:
         40:e4:ce:7e:86:3b:d1:d1:d9:d8:78:ab:fe:6c:f5:97:bb:63:
         b8:81:f1:51:43:c5:b0:40:95:d1:6e:5f:c0:cc:34:80:cb:3f:
         eb:1d:d2:0a:51:8b:8c:6c:20:c0:2a:b0:e8:05:5b:b0:21:f5:
         a4:07:ef:4c:d4:00:87:9b:8d:10:54:81:10:6f:df:21:03:a2:
         a4:5a:c9:21:19:75:00:14:36:59:a8:bf:00:33:77:94:e6:e8:
         0f:2b:1a:d4:48:85:45:fc:76:8a:7d:c6:82:03:13:78:e3:44:
         c2:e2:b6:52:40:73:ec:0f:b2:7e:82:2b:14:8b:df:ee:3c:a1:
         b3:54:3e:b7:e8:52:16:50:3d:b5:8e:8b:18:d3:71:60:92:94:
         2f:a4:18:94:fa:a2:f3:5b:90:83:0a:c6:a5:87:46:8d:54:c3:
         94:7f:34:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:26 2026 by rpki-client