Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bdfa9f99-9030-3231-847b-1cc988121e52.roa
File:                     bdfa9f99-9030-3231-847b-1cc988121e52.roa (raw, json)
Hash identifier:          zX2MLBg73h3G+vwyzU697aOV22gGhQrr/kaF59ao7LQ=
Subject key identifier:   95:08:8C:3C:5D:DD:0C:10:A2:50:DA:F9:A1:7F:55:A2:9D:25:20:39
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CBFD97557E5426CE84840
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bdfa9f99-9030-3231-847b-1cc988121e52.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:45c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:bf:d9:75:57:e5:42:6c:e8:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=a6b10644-c4f9-4250-afe4-f5ec3895b227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:75:83:72:00:4e:2c:f1:c4:04:9d:a8:74:db:
                    b7:20:bb:aa:4f:02:80:08:00:5b:d6:3e:ab:c6:40:
                    38:4f:51:62:8e:5a:63:60:3b:de:01:ec:2a:e7:21:
                    08:c2:ce:94:99:22:52:73:c2:75:10:a0:92:4b:5b:
                    f5:21:eb:0a:ef:f9:d2:3e:e7:c5:cb:56:4b:4c:83:
                    d7:40:e6:b3:18:d6:7c:29:ab:21:d1:61:ea:a4:95:
                    e6:c0:98:94:85:c2:1b:d8:aa:a2:0a:08:98:86:a0:
                    71:aa:23:d8:96:8f:e2:49:e2:97:3d:6b:9b:a9:31:
                    5b:24:41:06:d7:92:0e:ff:79:e9:74:22:89:0f:8c:
                    a9:86:4b:bc:ad:84:cf:42:2c:60:c5:52:17:03:7c:
                    0e:9f:e8:b1:da:87:72:44:e1:80:56:ee:bd:5b:8e:
                    33:02:14:06:20:d9:ae:75:08:b6:d1:ef:c7:d1:f0:
                    b4:18:ac:a8:05:2e:c1:26:84:87:c1:d5:a2:3d:74:
                    06:82:6f:0a:a7:b9:35:2b:b5:b4:4d:d9:37:0a:c6:
                    1b:c6:ca:0c:41:bf:3b:8b:98:fb:9d:ef:e7:0b:02:
                    f2:bb:64:2e:8d:a0:fe:41:18:b5:f8:16:79:fe:bd:
                    36:6a:e2:2a:99:ae:23:12:ce:c6:91:bd:2b:0a:8c:
                    f8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:08:8C:3C:5D:DD:0C:10:A2:50:DA:F9:A1:7F:55:A2:9D:25:20:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bdfa9f99-9030-3231-847b-1cc988121e52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:45c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d2:39:30:7f:6f:6c:68:59:5b:cf:b5:eb:05:98:82:cb:d3:
         57:9b:6d:c7:d3:fb:9e:a3:4b:d2:44:05:e4:06:18:17:06:fa:
         c5:5b:d4:9d:be:78:60:25:d2:de:ca:5a:8d:29:60:49:59:af:
         da:70:06:b1:19:cd:3e:05:87:e6:3e:ae:0d:44:14:8b:78:c2:
         34:25:0f:ce:72:45:bb:3d:f1:50:e1:42:02:fa:5d:68:1c:63:
         7b:af:56:22:60:12:d4:d9:b3:a8:3f:80:85:79:ba:bc:e1:64:
         00:e3:f3:3e:86:76:8c:ec:2c:a2:33:3c:2c:e4:90:11:33:0f:
         ac:0d:6c:a9:b8:01:4c:c1:84:e4:8e:32:a3:2a:b9:47:18:11:
         83:11:03:a6:26:44:70:32:9c:70:c6:d5:36:9e:c4:d9:f4:d5:
         45:fa:72:e2:2c:e6:e7:72:9c:1c:25:6a:5e:fb:87:80:8c:3d:
         5e:e8:f8:c3:af:87:bc:33:bf:18:36:73:92:46:c9:74:cc:62:
         83:82:33:a9:28:d5:15:da:e2:1b:34:9d:d5:14:c5:46:f0:0c:
         dc:24:c6:62:70:1a:46:9d:7c:3d:bc:b9:fb:02:6f:65:c9:16:
         7a:fb:38:fa:c9:92:d1:49:65:a9:29:e2:30:5f:ef:d4:9d:86:
         8a:1d:93:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:23 2026 by rpki-client