Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e97c44c9-8bb7-320e-9425-d457112c1f6e.roa
File:                     e97c44c9-8bb7-320e-9425-d457112c1f6e.roa (raw, json)
Hash identifier:          vZTxDEQqEWFVB842eAgYJM1h6SVe55DDb/0396o+U3g=
Subject key identifier:   F3:EA:A7:E1:28:2F:EE:25:5A:6A:0A:5B:EA:91:EE:12:CA:C5:A5:CE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CAD3449B8BC8D2CEB8D00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e97c44c9-8bb7-320e-9425-d457112c1f6e.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5b80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:ad:34:49:b8:bc:8d:2c:eb:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=b462740a-1aad-49ba-b35a-da64885aacdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c0:24:94:41:00:d8:a7:24:36:5c:14:c4:84:
                    30:bd:3f:76:71:b2:e3:88:16:73:60:c9:8e:e0:86:
                    c2:89:40:f2:25:e0:89:49:9b:2d:f0:4c:50:49:08:
                    4b:b8:cf:bc:7f:20:5d:97:f5:ab:86:a4:97:3f:6b:
                    ca:f8:14:ae:44:4b:df:7a:59:d4:f9:f4:4f:65:e4:
                    76:a4:9d:28:b6:a1:16:9b:15:4e:bd:3c:c8:1f:82:
                    e9:f3:fe:2d:2c:19:77:4a:69:83:33:a5:4e:51:ee:
                    8d:ba:11:1c:2b:58:c2:46:ba:e6:2f:59:1a:14:ff:
                    89:ee:45:91:db:b8:9a:ab:0b:ca:80:16:77:b3:3a:
                    05:51:18:6e:8d:e6:e6:47:55:80:5c:b0:21:a7:f8:
                    ea:13:e9:4a:5e:40:ed:06:2c:3b:22:5c:b0:b1:57:
                    a3:af:5a:ba:15:d6:b2:bc:90:e0:11:a8:51:ac:80:
                    45:61:18:67:3b:17:9c:1f:9b:fb:69:98:d4:a2:7a:
                    30:1b:3b:3e:95:c4:3e:fd:b6:20:bb:70:80:df:39:
                    79:fb:63:c9:e4:7c:da:a8:fc:b2:96:48:47:fe:bb:
                    8d:8b:23:f7:f6:92:a1:3c:2d:54:65:34:c7:ca:31:
                    2d:8b:8c:f9:d1:c7:81:ea:25:c9:47:90:25:86:1e:
                    f3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EA:A7:E1:28:2F:EE:25:5A:6A:0A:5B:EA:91:EE:12:CA:C5:A5:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e97c44c9-8bb7-320e-9425-d457112c1f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5b80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:8b:f1:36:b1:90:b7:25:c6:5a:30:56:38:b9:04:3b:bf:55:
         21:28:fe:dc:79:81:e0:9f:f1:21:a4:98:54:f9:38:9c:3d:ad:
         cd:da:5e:bc:ce:2a:79:59:f8:65:c6:fe:0c:b4:ed:bd:58:e6:
         86:ce:8a:15:71:ce:62:e7:32:2e:77:3f:4e:0f:0e:88:47:de:
         8a:00:53:d4:56:57:f1:69:0f:3a:5a:2c:79:ec:5b:69:59:3c:
         6f:e4:9b:e1:40:4a:cf:55:e7:60:3e:58:e0:5d:53:54:02:4c:
         5b:08:1b:89:3f:39:24:cb:9d:e5:73:53:55:9e:d5:e5:d8:d3:
         49:a0:4c:dd:f0:1c:68:a6:fc:4b:50:bd:6f:02:a7:30:62:ee:
         5f:74:3e:81:16:b6:36:3d:3b:e9:7f:86:4e:b6:65:e2:c9:4d:
         e4:59:1e:84:3f:18:9a:bf:b6:dd:51:4f:24:3b:10:d4:21:06:
         da:a7:de:e6:f3:e6:98:bf:8a:3f:de:c8:2a:ee:d8:a2:15:7d:
         8a:3a:8c:60:63:4f:82:e9:f7:87:5b:ad:c4:58:3b:7f:b7:6a:
         02:c0:de:13:51:bd:39:92:26:2c:aa:8e:00:fb:47:54:ed:c0:
         d1:a3:7f:2c:bb:ae:7e:20:a8:a1:35:32:47:53:82:f5:5a:92:
         c8:bf:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:30:10 2026 by rpki-client