Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5d51147-a8e1-37b7-9bfe-622f347774aa.roa
File:                     a5d51147-a8e1-37b7-9bfe-622f347774aa.roa (raw, json)
Hash identifier:          axOEe4Z/s1TXjft67nkuI5A47AYE3rXVN60qUaVQDyU=
Subject key identifier:   B2:F1:AB:21:C3:0D:2C:D3:35:29:C5:99:13:F0:5F:AC:8C:CD:32:24
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CAA7DD728DF299CDBD240
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5d51147-a8e1-37b7-9bfe-622f347774aa.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4e70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:aa:7d:d7:28:df:29:9c:db:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=216c8a6b-63b7-4127-97de-96207422c752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:54:00:23:16:48:9b:79:35:0c:d8:f3:86:
                    27:5a:f3:4c:b7:d6:b3:24:fd:20:0f:94:8f:36:aa:
                    c0:cc:c2:e7:cd:9f:e5:35:a4:0e:db:74:0b:36:2f:
                    68:63:82:05:83:15:8a:99:4b:38:e6:28:f7:49:f5:
                    3e:07:3a:62:73:16:18:bc:43:a5:59:92:0a:82:49:
                    46:9d:59:7b:e0:b0:5e:be:f4:e0:f7:1b:99:7e:00:
                    4b:3d:a1:8b:46:d4:3a:07:28:7f:7f:a7:53:c6:a8:
                    3a:79:a0:dc:c0:0d:3b:14:25:26:c5:92:bc:8d:1b:
                    49:f6:8a:44:34:d6:43:e0:80:94:36:7c:23:2d:d6:
                    c5:1e:9d:3e:17:7b:9c:48:9d:71:41:d8:65:de:7f:
                    00:95:65:84:93:9f:d8:25:c5:03:fa:66:60:74:c1:
                    cd:ed:08:58:80:7d:6f:71:5a:fd:59:e6:0d:9f:d4:
                    49:e5:38:11:00:22:98:32:80:9d:2c:06:21:ca:24:
                    b8:6c:b7:72:cd:ff:b4:f5:dc:5b:e0:6c:c2:a9:a1:
                    8c:75:57:b8:e0:78:59:4e:11:27:4c:0b:0f:77:0d:
                    6a:b0:27:a4:1b:cc:37:d4:76:7c:85:08:5a:4e:a3:
                    7c:01:ec:60:a0:56:95:46:b5:87:9b:00:47:97:b7:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F1:AB:21:C3:0D:2C:D3:35:29:C5:99:13:F0:5F:AC:8C:CD:32:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5d51147-a8e1-37b7-9bfe-622f347774aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4e70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:5a:09:73:93:e0:3a:89:a1:db:42:b7:c1:c0:f9:b3:a9:bb:
         e1:8d:c2:b4:f2:a8:87:71:df:21:7b:cc:85:4a:09:9d:3f:2e:
         80:db:51:4b:8c:6b:5c:41:ed:23:84:fe:7b:9a:c9:c1:52:c7:
         0a:28:2c:5a:1d:2c:22:43:17:65:2a:f8:5d:60:32:54:11:23:
         00:d0:04:45:8f:26:bf:6e:59:9a:a7:d1:93:4e:5a:97:c4:58:
         11:51:c4:c3:05:0e:3a:22:3e:11:1b:f5:6a:30:d2:3b:05:1f:
         44:22:8e:a5:26:3b:59:60:cd:d6:4a:f6:66:5a:4d:20:08:4f:
         89:1b:58:e0:00:32:5d:7e:31:4a:d4:30:0f:b5:33:5b:82:f5:
         ad:c2:55:eb:8c:b8:e9:8a:69:59:b5:6a:bb:1e:13:c3:cb:de:
         78:87:c3:56:39:27:1c:3a:40:c7:d0:b4:4e:aa:23:ba:a8:31:
         85:c8:08:b1:a3:02:e3:8d:4d:60:e9:9c:f2:a7:7c:9a:21:ca:
         21:fe:8b:14:58:89:70:ce:89:32:ed:59:bc:0f:d4:45:a3:1b:
         62:2f:35:b0:7f:58:bc:bc:f6:32:78:6f:b5:0f:79:4a:47:62:
         0f:4f:cf:d4:4f:4e:e9:a5:3a:e6:f4:6b:5d:c5:bc:df:5f:fe:
         06:b9:45:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:01 2026 by rpki-client