Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c957fa72-c25a-323a-87f3-4bb922dcc5b4.roa
File:                     c957fa72-c25a-323a-87f3-4bb922dcc5b4.roa (raw, json)
Hash identifier:          e1r38v6W3PYWyYscXiYfgJJPVHGARYlJX+Y7lufsnaw=
Subject key identifier:   E6:77:D8:62:2C:08:A3:33:61:80:59:B4:3A:64:83:37:39:FA:35:C1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CC4DD2F2142B4D96AFA00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c957fa72-c25a-323a-87f3-4bb922dcc5b4.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5070::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:c4:dd:2f:21:42:b4:d9:6a:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=2505c45e-42f2-43b6-8bf4-bc354d503098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:38:fa:d4:87:84:9a:50:e9:03:67:3a:6b:52:
                    70:ca:57:59:60:1f:0f:87:f5:d3:a7:77:d5:38:13:
                    c2:66:a4:bf:64:41:cd:0e:99:ba:0e:fa:b9:ec:02:
                    19:43:cc:ce:ba:9f:9f:36:53:f4:5d:d6:93:38:b7:
                    41:d9:e9:16:e1:78:93:1b:65:16:53:f6:65:4b:5e:
                    ee:53:be:79:ff:21:d5:9f:a2:ca:fc:57:51:e7:19:
                    8d:d3:72:06:5b:e0:95:71:c8:8b:b5:1f:95:46:98:
                    9d:9c:3c:3c:2c:28:05:bf:3c:4e:b0:68:a9:4c:99:
                    82:c8:19:b9:4d:3c:2c:fa:c1:89:d5:3e:ac:7b:45:
                    db:30:2a:dd:3b:5a:8d:12:14:6a:66:d4:6b:ea:c7:
                    22:2b:52:ba:fd:b1:ff:7a:eb:f6:ac:45:df:9c:58:
                    8f:f3:d5:57:19:86:21:8e:ff:16:e5:60:90:28:a2:
                    b7:90:85:15:81:2d:19:33:e4:be:e4:ee:bd:d2:33:
                    15:b3:6b:17:c7:0a:ab:81:8e:a8:59:61:f0:f2:60:
                    ff:c2:34:64:aa:75:69:0f:7a:cc:1f:df:f6:d7:1a:
                    3c:f5:83:89:ca:bc:5b:e7:07:3b:a5:cc:b8:84:27:
                    d8:42:6d:46:6e:52:09:af:80:2f:3b:8e:f2:05:78:
                    e8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:77:D8:62:2C:08:A3:33:61:80:59:B4:3A:64:83:37:39:FA:35:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c957fa72-c25a-323a-87f3-4bb922dcc5b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5070::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:20:1c:ea:d6:00:25:3b:6f:64:28:70:bc:00:d4:93:ee:27:
         89:7a:d5:83:be:04:85:76:5d:4d:59:13:66:b5:aa:c3:fa:d8:
         83:83:57:a2:38:88:d9:83:62:af:11:20:f0:b7:81:1b:dd:7b:
         a4:16:a9:f7:4c:e4:70:46:32:da:15:e1:ec:dd:7e:42:ca:19:
         5f:80:02:19:66:9b:f1:fe:26:f9:fd:ac:02:ca:69:59:70:88:
         95:a6:e0:eb:04:3d:35:b8:c1:3e:c4:44:61:89:16:8d:ca:0b:
         38:6a:b9:ae:89:10:31:ad:25:0c:29:35:12:54:2a:8f:66:c1:
         76:16:6a:f8:5a:55:84:8b:8f:5c:a0:43:4b:b5:46:97:15:e1:
         b4:46:c1:13:98:f9:ef:33:cf:34:52:47:46:84:a4:f1:78:1a:
         25:1a:0e:ec:93:44:fa:52:f2:fe:d9:83:05:e1:89:be:49:4c:
         6e:44:3b:83:e7:c0:dc:b5:90:e7:8f:b0:19:bb:73:7d:b0:6f:
         ff:c7:7d:a0:82:8d:5f:2a:89:80:9c:7e:ed:b0:3b:8b:de:bf:
         84:11:0b:a7:93:4f:09:de:c9:0b:ef:d1:0d:dc:50:4c:64:40:
         6a:17:4f:d5:93:1f:88:cd:74:5e:ff:b8:19:51:99:e5:9d:36:
         2f:fe:88:98
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzAfMTdLyFCtNlq+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk
MjUwNWM0NWUtNDJmMi00M2I2LThiZjQtYmMzNTRkNTAzMDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjj61IeEmlDpA2c6a1JwyldZYB8Ph/XTp3fV
OBPCZqS/ZEHNDpm6Dvq57AIZQ8zOup+fNlP0XdaTOLdB2ekW4XiTG2UWU/ZlS17u
U755/yHVn6LK/FdR5xmN03IGW+CVcciLtR+VRpidnDw8LCgFvzxOsGipTJmCyBm5
TTws+sGJ1T6se0XbMCrdO1qNEhRqZtRr6sciK1K6/bH/euv2rEXfnFiP89VXGYYh
jv8W5WCQKKK3kIUVgS0ZM+S+5O690jMVs2sXxwqrgY6oWWHw8mD/wjRkqnVpD3rM
H9/21xo89YOJyrxb5wc7pcy4hCfYQm1GblIJr4AvO47yBXjo4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOZ32GIsCKMzYYBZtDpkgzc5+jXBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYzk1N2ZhNzItYzI1YS0z
MjNhLTg3ZjMtNGJiOTIyZGNjNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFBw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFkgHOrWACU7b2QocLwA1JPuJ4l61YO+BIV2XU1ZE2a1qsP62IOD
V6I4iNmDYq8RIPC3gRvde6QWqfdM5HBGMtoV4ezdfkLKGV+AAhlmm/H+Jvn9rALK
aVlwiJWm4OsEPTW4wT7ERGGJFo3KCzhqua6JEDGtJQwpNRJUKo9mwXYWavhaVYSL
j1ygQ0u1RpcV4bRGwROY+e8zzzRSR0aEpPF4GiUaDuyTRPpS8v7ZgwXhib5JTG5E
O4PnwNy1kOePsBm7c32wb//HfaCCjV8qiYCcfu2wO4vev4QRC6eTTwneyQvv0Q3c
UExkQGoXT9WTH4jNdF7/uBlRmeWdNi/+iJg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:15 2026 by rpki-client