Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c7eed4f1-8e2c-3a58-9d44-882c779c9d17.roa
File:                     c7eed4f1-8e2c-3a58-9d44-882c779c9d17.roa (raw, json)
Hash identifier:          t1ZO2dogwHitarzT8KScU9xJ28EM/M/tPlUBxIu69aY=
Subject key identifier:   86:CC:45:AA:D6:D1:D5:4A:48:9C:13:85:08:1A:58:AF:E0:67:C4:C9
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CC36D19B44EEE7631E880
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c7eed4f1-8e2c-3a58-9d44-882c779c9d17.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4380::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:c3:6d:19:b4:4e:ee:76:31:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=1c8f19bb-a883-4bd8-9c0e-fe510b3bb1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:46:20:4c:96:8d:04:f8:d8:c3:70:5c:91:c0:
                    67:54:22:ce:f2:9b:9e:b0:fa:18:a0:c6:64:7b:12:
                    d4:0d:e9:d4:27:ec:49:b2:ba:78:f6:8e:d7:64:84:
                    26:0c:8f:bd:ed:19:3a:df:9c:c9:bd:0c:2b:d0:d4:
                    d2:27:d9:20:eb:0f:da:1d:a6:6a:b8:c4:9f:48:51:
                    2a:e7:51:b6:9b:2c:f0:90:e6:20:f7:9e:28:36:00:
                    25:c4:1d:c4:cb:8d:69:0d:df:da:c5:49:8f:fb:f8:
                    ba:fb:1d:c2:3a:8e:07:c1:90:f0:dd:79:a1:02:64:
                    20:3b:4b:ad:7d:b5:1b:bf:82:22:13:34:5b:56:64:
                    8d:71:65:8c:54:b2:4a:12:79:21:50:93:32:ee:df:
                    7c:9a:e3:94:fb:22:c0:0d:c0:64:87:07:8b:f2:51:
                    06:62:72:19:5c:7f:98:ab:07:91:d9:cf:fb:39:06:
                    b9:58:20:f4:3c:15:e6:e9:c8:16:97:59:6a:4f:57:
                    44:84:86:d9:c4:2c:cc:ad:8f:1e:17:62:5f:60:bf:
                    7e:b7:be:6f:f2:2f:35:6f:5e:12:b8:96:0e:3e:47:
                    f0:50:f1:3e:96:4f:47:00:25:7a:d0:0b:6f:36:b0:
                    0d:3a:89:6c:73:53:74:61:18:b0:8c:a2:59:ee:98:
                    98:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CC:45:AA:D6:D1:D5:4A:48:9C:13:85:08:1A:58:AF:E0:67:C4:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c7eed4f1-8e2c-3a58-9d44-882c779c9d17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4380::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:6e:65:d7:df:a6:34:e6:ac:8a:83:8c:60:93:0e:05:e6:25:
         66:52:2a:1e:94:a7:58:6b:8b:eb:49:32:34:28:0d:63:90:8a:
         14:65:0b:a9:81:73:42:d1:90:97:b5:27:6f:cd:30:08:ca:11:
         39:46:18:0a:46:cb:aa:64:37:46:2a:28:fc:64:a0:74:01:05:
         64:cd:6d:75:71:f4:2f:0f:be:b3:a5:22:c1:fc:fe:24:88:89:
         43:a3:4a:b1:73:57:46:3c:31:3b:b2:2a:19:96:ee:89:76:17:
         f6:39:97:c9:f9:e8:62:7e:58:4b:3e:7f:d5:2d:e3:10:cd:86:
         47:3e:73:17:c3:79:9e:e9:3f:b5:b2:a9:88:b5:45:1c:21:96:
         e4:0c:eb:5b:aa:d2:7c:3e:68:31:ed:7f:a8:28:a3:75:9d:a1:
         d1:fe:bf:d1:c5:4a:96:d1:ab:85:9a:14:5e:48:6a:b1:9b:14:
         e4:13:2d:0e:5e:97:a8:d0:6f:88:60:f6:25:20:28:7f:b5:7f:
         c3:26:fe:24:9c:81:c6:87:64:91:11:d2:0a:b0:a5:68:57:b8:
         0d:d5:c0:34:6e:de:d0:3f:b1:c0:6c:44:62:04:2d:a4:4d:5f:
         16:7f:71:38:1d:c0:e1:18:73:b2:7e:f8:db:3f:73:64:51:3f:
         4e:95:f4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:42 2026 by rpki-client