Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8af9a01c-35b6-375b-a107-923919707969.roa
File:                     8af9a01c-35b6-375b-a107-923919707969.roa (raw, json)
Hash identifier:          a7AVHF2G/6xDCBIqntRvjQHwRReYAPE2EwfqjunARHM=
Subject key identifier:   E4:E1:42:E8:07:08:95:7D:B3:B6:44:21:43:24:FA:A5:FD:C7:03:41
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CAB7A79B450B479220980
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8af9a01c-35b6-375b-a107-923919707969.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4b50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:ab:7a:79:b4:50:b4:79:22:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=05966bf8-f06f-4dff-b7fc-2521c676e9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2d:fa:f3:be:33:76:e9:0f:02:a3:be:03:d4:
                    30:d3:b1:85:97:9a:b6:f8:28:2d:6b:26:64:ae:eb:
                    80:a2:65:f5:7a:2a:32:c4:81:ee:a7:67:b7:b2:bc:
                    9b:d6:91:ab:50:f1:c5:5f:50:4e:7b:e5:91:5a:65:
                    5b:fc:76:52:e7:26:fb:34:0e:34:d1:dc:ff:b5:ca:
                    e7:a9:39:3e:60:1c:83:6a:7a:16:18:48:ad:23:93:
                    ae:dd:c2:8b:c3:60:d1:0e:3c:f7:ba:35:c6:20:73:
                    75:74:44:03:96:02:c9:e4:63:9c:36:3f:f9:56:38:
                    9a:43:c7:b0:da:fd:68:89:51:b8:4d:a8:4a:c6:7a:
                    02:e7:01:23:33:7a:1a:2f:f0:48:6e:b1:c1:a7:3a:
                    cb:b7:45:0c:ac:82:9f:bf:2c:8b:21:2f:fd:60:dd:
                    ff:a5:1e:7d:2d:fc:10:ca:88:5a:54:35:e8:22:ac:
                    96:99:e5:b8:6a:03:a9:05:50:02:fe:de:bb:18:23:
                    92:6d:60:28:46:0b:46:4b:6d:bc:37:9a:cb:70:5c:
                    a1:30:70:ec:c0:6d:ce:79:4c:1d:d7:8b:ee:3a:86:
                    1a:66:d7:d5:0a:89:28:b9:52:e0:0d:3b:f2:db:3d:
                    41:e5:16:02:27:9a:b1:04:d5:f4:1f:18:d3:7a:52:
                    28:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E1:42:E8:07:08:95:7D:B3:B6:44:21:43:24:FA:A5:FD:C7:03:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8af9a01c-35b6-375b-a107-923919707969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4b50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b9:1e:74:a9:b8:7a:be:61:00:0c:55:27:ee:81:77:9a:c5:
         1b:b8:1a:61:f1:18:af:63:77:18:60:ca:94:e7:89:50:4c:a1:
         2d:fb:dc:49:c4:ca:2f:5a:41:ec:6e:37:97:11:7f:64:3d:74:
         e1:79:0c:f5:2e:91:1a:24:d5:83:5b:b5:66:c1:48:0a:81:39:
         65:6f:50:1a:19:65:bc:28:9a:13:ad:37:65:17:50:0a:9c:44:
         df:f3:32:43:e1:d2:f6:a8:21:e9:93:28:81:f1:f4:9c:0e:3a:
         bd:99:68:5c:b2:63:80:92:0f:03:02:14:6a:76:57:30:db:17:
         0b:d1:7f:10:8b:73:83:90:c1:a0:71:62:6b:53:27:f5:6d:1a:
         eb:0b:76:23:d4:d8:7a:94:ce:78:ae:58:c8:3e:a0:2e:5b:09:
         ef:3d:01:3c:64:25:fa:0e:4b:9c:75:c8:0f:76:2f:fe:cb:8a:
         71:88:37:c4:df:8d:62:12:ba:87:ef:3d:b9:6d:8d:e8:98:11:
         3c:14:7a:4b:ac:d9:46:c8:3a:ac:fb:4c:b3:d3:0a:f1:9c:2a:
         6e:d2:e7:ba:c6:a6:93:b7:29:80:ac:a9:7c:08:9a:ec:0d:57:
         0b:51:5e:43:f2:e5:cf:00:78:d1:50:32:04:09:b1:bb:b1:38:
         ac:2a:d3:d1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzAfKt6ebRQtHkiCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk
MDU5NjZiZjgtZjA2Zi00ZGZmLWI3ZmMtMjUyMWM2NzZlOWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS36874zdukPAqO+A9Qw07GFl5q2+CgtayZk
ruuAomX1eioyxIHup2e3sryb1pGrUPHFX1BOe+WRWmVb/HZS5yb7NA400dz/tcrn
qTk+YByDanoWGEitI5Ou3cKLw2DRDjz3ujXGIHN1dEQDlgLJ5GOcNj/5VjiaQ8ew
2v1oiVG4TahKxnoC5wEjM3oaL/BIbrHBpzrLt0UMrIKfvyyLIS/9YN3/pR59LfwQ
yohaVDXoIqyWmeW4agOpBVAC/t67GCOSbWAoRgtGS228N5rLcFyhMHDswG3OeUwd
14vuOoYaZtfVCokouVLgDTvy2z1B5RYCJ5qxBNX0HxjTelIoeQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOThQugHCJV9s7ZEIUMk+qX9xwNBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOGFmOWEwMWMtMzViNi0z
NzViLWExMDctOTIzOTE5NzA3OTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEtQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIm5HnSpuHq+YQAMVSfugXeaxRu4GmHxGK9jdxhgypTniVBMoS37
3EnEyi9aQexuN5cRf2Q9dOF5DPUukRok1YNbtWbBSAqBOWVvUBoZZbwomhOtN2UX
UAqcRN/zMkPh0vaoIemTKIHx9JwOOr2ZaFyyY4CSDwMCFGp2VzDbFwvRfxCLc4OQ
waBxYmtTJ/VtGusLdiPU2HqUzniuWMg+oC5bCe89ATxkJfoOS5x1yA92L/7LinGI
N8TfjWISuofvPbltjeiYETwUekus2UbIOqz7TLPTCvGcKm7S57rGppO3KYCsqXwI
muwNVwtRXkPy5c8AeNFQMgQJsbuxOKwq09E=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:29 2026 by rpki-client