Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fb1e56bf-0f55-3fa5-afbf-cd2bef863c80.roa
File:                     fb1e56bf-0f55-3fa5-afbf-cd2bef863c80.roa (raw, json)
Hash identifier:          B/LWPXfCv42EZzrTmXm1MsjQEtRUFkBcO52LEheaidw=
Subject key identifier:   A0:C6:1C:0E:4B:46:47:50:E3:9B:A5:97:EB:CA:4D:AA:35:AD:C8:78
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CC19798A198468C425740
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fb1e56bf-0f55-3fa5-afbf-cd2bef863c80.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5770::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:c1:97:98:a1:98:46:8c:42:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=798dcd4c-1c58-4d5f-ab1c-9f033429e422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e0:06:d6:4d:58:e9:e7:1c:9e:da:ab:69:9f:
                    f6:c3:a5:94:0e:1e:f0:cc:58:cf:bf:e5:de:06:50:
                    20:d1:92:8f:7d:99:37:42:90:4b:3b:81:14:01:fb:
                    4a:99:d2:e8:2b:62:20:d3:fa:6f:a5:43:5d:1b:f8:
                    48:ad:70:c8:41:3f:d8:b1:21:b7:aa:e8:1e:b1:b9:
                    4c:54:95:57:2b:ea:4a:80:6d:0f:a7:28:0c:5e:c2:
                    65:f2:5c:38:63:37:01:b5:2f:a7:d2:5a:70:f6:91:
                    99:e8:f6:71:da:d1:ad:21:d3:86:2b:53:92:c1:69:
                    16:1a:ee:19:85:5b:df:b7:ba:ca:60:35:b1:31:95:
                    4a:f3:6a:1d:53:ff:21:44:6b:8a:ea:0b:a0:bc:d0:
                    91:f3:5a:a7:0d:91:d8:62:e5:f6:f1:c1:40:72:ac:
                    d1:b7:68:e8:c0:fd:47:1c:8a:f5:66:0e:f3:df:5a:
                    a7:6b:c0:14:a1:0a:c1:af:47:14:b8:e1:25:29:88:
                    1c:b7:71:3e:db:48:e1:a5:4d:9f:96:f1:de:ae:86:
                    22:a3:c4:6c:d4:bf:19:11:93:d9:3e:91:e9:19:35:
                    9c:7f:2c:3a:21:ba:45:b1:6a:ca:b7:43:76:e3:f4:
                    5b:83:bc:01:89:11:26:5e:74:e6:3c:f4:f3:a9:66:
                    ec:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C6:1C:0E:4B:46:47:50:E3:9B:A5:97:EB:CA:4D:AA:35:AD:C8:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fb1e56bf-0f55-3fa5-afbf-cd2bef863c80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5770::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:bd:3e:6d:25:a4:44:7c:7b:3e:6e:b5:13:44:8a:69:01:28:
         e6:6d:3f:6b:0a:24:54:a0:f3:8b:60:ff:48:a4:ba:be:4f:f9:
         2b:c1:4e:8d:63:3b:10:5a:a5:64:14:19:b2:0b:42:2c:5c:e4:
         5a:06:94:4a:8f:49:42:79:b8:50:ce:98:fc:a7:5f:33:03:41:
         c1:f1:51:e8:8c:a6:03:a3:2a:71:67:28:d3:ee:53:92:88:15:
         93:ed:c7:44:e8:58:b4:5c:a8:f3:6d:61:80:cb:6e:a3:28:87:
         40:10:1c:31:d5:be:67:6f:94:9c:23:d5:05:32:f7:35:5d:79:
         6f:bc:96:de:19:7c:d7:34:56:0e:a4:9d:f1:2f:da:74:2f:78:
         89:cd:51:a5:e0:ba:14:17:c1:e1:6c:3f:9b:48:c7:28:f3:16:
         c3:43:1d:82:eb:cc:8d:da:56:a3:77:8b:95:73:82:78:7f:3b:
         81:ba:f4:81:4b:0e:b6:6d:e5:e6:39:d4:4e:a4:94:ed:4b:04:
         d2:42:7b:1c:b7:c3:33:cf:fa:71:7f:c4:be:08:4e:2d:18:dd:
         39:6e:56:49:50:78:69:cc:69:41:45:29:04:2a:aa:70:63:bf:
         9a:e6:d2:70:07:e9:98:dd:88:eb:07:c8:7d:75:f5:70:5c:f7:
         eb:b4:0d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:26 2026 by rpki-client