Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad9b4c98-b9fd-34d2-a752-a1b9ecd5305f.roa
File:                     ad9b4c98-b9fd-34d2-a752-a1b9ecd5305f.roa (raw, json)
Hash identifier:          gy/JG1hYMo+/j4BCreQFag+Ak6eHxifujc/60X+3K4w=
Subject key identifier:   43:27:1B:EB:99:22:12:26:A5:E3:54:AF:B9:C0:4B:DD:14:6B:A9:A3
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CC016C071A08340779080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad9b4c98-b9fd-34d2-a752-a1b9ecd5305f.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4270::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:c0:16:c0:71:a0:83:40:77:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=4e4ca0ef-ecf8-4a73-aa92-d14be2748cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e5:a3:ec:ba:de:b8:f2:bf:08:59:aa:e6:69:
                    c2:6d:50:e7:35:6e:8e:88:ae:66:0c:fc:a5:c4:07:
                    0c:11:6e:5f:cb:f7:05:08:e1:07:b3:aa:89:3c:b9:
                    bb:7f:d6:1d:99:3a:1d:2f:39:2e:c8:09:0b:69:e8:
                    d9:12:da:93:c6:9a:75:24:82:73:6d:90:39:a8:f7:
                    56:84:30:36:66:7b:60:e0:93:52:65:b1:b9:e6:d9:
                    46:02:e2:ee:54:34:5a:de:e3:16:3e:68:3d:2a:b3:
                    2a:8a:cc:b6:c1:1c:91:02:56:08:ec:df:e9:7d:ec:
                    e8:4c:a8:8f:2e:64:68:c9:fd:46:ff:68:8e:ee:70:
                    ec:4f:b4:5b:f7:22:8e:bc:c8:ad:31:fd:da:dd:27:
                    24:9e:86:48:99:e8:6e:8c:78:2a:db:e3:05:3a:49:
                    84:d8:4b:2e:7c:9b:69:64:d8:24:3f:99:0d:16:49:
                    ef:e4:f3:0e:81:7a:60:ce:de:7b:b6:6a:fc:71:35:
                    42:1b:c2:69:9e:a2:fe:57:a9:1a:9a:68:d8:7a:be:
                    73:25:1b:e6:8b:7e:0a:2a:d8:35:2d:f1:a4:1a:ae:
                    f8:df:71:94:15:bc:49:6c:1a:f5:c5:ef:85:9f:01:
                    62:df:f1:83:37:6a:f3:fc:ec:31:a3:c0:58:17:9a:
                    80:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:27:1B:EB:99:22:12:26:A5:E3:54:AF:B9:C0:4B:DD:14:6B:A9:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad9b4c98-b9fd-34d2-a752-a1b9ecd5305f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4270::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:49:c5:55:59:0e:33:c6:2d:e7:55:5e:34:5b:f8:8d:ad:f9:
         4a:2d:59:fe:8b:7d:e2:d7:51:3f:ce:ba:f6:61:fb:cd:c0:5e:
         1a:c2:e6:2b:69:7a:e5:04:2c:a4:8c:cb:f3:27:ce:cf:a9:5f:
         01:e4:9b:fa:08:05:00:59:f3:9e:1e:af:cb:71:84:bb:47:22:
         46:e2:b5:6d:ab:ce:bf:bb:d2:a3:f7:63:c9:d0:7e:5b:8f:a5:
         bb:7a:6b:93:c5:80:b4:9a:de:21:d4:29:97:d0:7f:d7:81:c3:
         45:14:4c:84:37:c6:c9:f2:3e:31:b2:55:28:1a:10:5a:c3:ae:
         e0:94:6a:e8:a8:85:4a:65:e1:e8:8e:35:ba:c8:04:6b:9f:c5:
         67:3d:7f:d6:08:f4:9a:38:e5:51:95:f1:a7:85:03:da:c5:a5:
         a8:1c:2b:06:e1:0c:13:18:2f:36:db:8e:69:10:12:55:3d:ed:
         54:fc:fd:e0:cc:e8:c3:4b:4d:b8:0e:a0:83:4e:c6:72:a7:26:
         a4:2b:b0:8e:cf:c0:7e:74:86:83:06:15:9a:a9:4f:72:67:73:
         9e:cf:54:23:3d:f4:f1:e2:9b:d7:61:0e:06:40:22:9d:1a:d0:
         fd:d1:ec:c2:61:0f:56:96:03:95:2c:7e:2e:5a:0e:72:43:eb:
         d2:f7:4a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:35 2026 by rpki-client