Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa94bfa1-f6cd-39dd-8e11-e77b4b5b81d1.roa
File:                     aa94bfa1-f6cd-39dd-8e11-e77b4b5b81d1.roa (raw, json)
Hash identifier:          Fpj79h4faC+fA/UnySqaNRIHYVvC4nQ9QF4ZPY4LLF8=
Subject key identifier:   1E:22:86:37:24:6B:B8:73:5E:17:24:DC:23:1F:BC:77:22:24:BB:26
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CBAC94C7E7D083C0DEDC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa94bfa1-f6cd-39dd-8e11-e77b4b5b81d1.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4510::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:ba:c9:4c:7e:7d:08:3c:0d:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=dcd77d46-538c-4a7a-b55c-30cb5ae23af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:7b:06:5b:97:f1:d5:36:92:34:6f:49:26:
                    e7:30:ac:02:f8:48:01:d9:f2:8f:86:f3:97:cf:20:
                    97:94:cd:23:e2:6e:e4:f1:e6:84:37:3c:55:cf:3f:
                    c7:5e:38:33:6d:9d:7c:75:a5:37:b7:0b:79:78:f3:
                    b4:35:7f:71:db:31:b8:0f:c7:6f:9a:60:e3:15:23:
                    82:b0:f5:7f:ab:55:3e:2d:67:6d:dc:2d:1a:38:dc:
                    7e:32:d0:58:ea:a3:1a:e4:49:78:38:ee:3b:7d:c9:
                    37:27:94:1b:15:47:ad:12:4a:46:a2:bd:e5:93:02:
                    6c:09:b3:d4:ca:06:8a:43:84:ed:2d:53:eb:48:b0:
                    1c:ce:fa:5b:9d:b7:2a:4e:f7:17:a1:8b:03:a5:cd:
                    dc:ee:30:08:a7:cf:76:9b:a9:47:54:42:2c:fa:79:
                    d8:68:78:1a:b8:ff:5a:e8:04:34:01:a5:cf:67:0c:
                    ae:f7:b5:ca:c9:04:d8:17:9a:3d:d7:2f:19:ad:73:
                    3e:a2:f5:6c:34:53:38:53:fb:d1:e8:0d:2e:21:22:
                    40:fc:91:c7:a8:5b:7a:41:b6:f6:42:72:7c:c8:67:
                    b2:8e:28:a1:9f:97:98:08:dd:8e:d0:36:6f:75:ff:
                    4c:f2:32:31:29:71:2f:4b:00:17:32:c3:36:60:5b:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:22:86:37:24:6B:B8:73:5E:17:24:DC:23:1F:BC:77:22:24:BB:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa94bfa1-f6cd-39dd-8e11-e77b4b5b81d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4510::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:5d:c3:cf:33:81:d8:42:0c:fc:20:9c:7f:96:8d:2a:22:c4:
         d0:df:78:01:81:8e:78:6d:f9:f7:d9:a7:39:ac:aa:26:97:38:
         59:28:f1:07:e5:6d:ab:67:7c:6b:0b:89:11:37:b2:86:ed:65:
         48:7e:0f:74:b6:53:67:13:1c:5a:a0:2d:e0:9a:f4:72:da:ce:
         b0:08:29:d6:db:70:8b:11:e1:65:bb:fd:3a:ac:67:e3:61:a8:
         cb:7f:0c:4d:b4:fc:e2:d8:ca:7a:ce:5c:c4:50:17:d0:30:19:
         37:a4:73:b6:f5:2d:5d:69:8b:aa:35:ee:e5:65:07:52:30:13:
         e1:ed:d7:10:d1:35:d4:8b:7a:cd:d5:36:84:ea:9d:ca:72:70:
         08:95:11:04:3a:47:df:29:1d:d6:7b:3e:c8:6a:b3:a1:40:ef:
         37:10:76:6f:ca:52:5f:4c:23:4a:ef:30:c9:b6:f2:9d:d7:be:
         b6:75:d1:82:4d:0f:83:eb:f5:60:1f:61:f8:04:9b:21:ea:25:
         f9:2c:4a:0c:10:c6:cf:b8:fc:9b:35:06:7a:4b:bc:53:15:78:
         a9:1d:71:6e:41:58:9b:db:2f:70:91:9b:1b:52:e6:52:e1:c0:
         ef:41:aa:32:9e:5a:11:2c:dd:b6:c3:96:62:79:10:bb:15:9e:
         06:18:60:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:44 2026 by rpki-client