Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5eda57ea-8e0c-30fc-a06e-54e2d251e137.roa
File:                     5eda57ea-8e0c-30fc-a06e-54e2d251e137.roa (raw, json)
Hash identifier:          dQtOR8vmUYNypMZTdGczeJ0Kc0GW3C7qvYgPMWCP/F8=
Subject key identifier:   1F:6B:AB:9B:36:D9:06:5E:DA:05:2B:6B:25:5F:E3:6B:73:64:68:3D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584FC5CBE58C6954367124ACF600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5eda57ea-8e0c-30fc-a06e-54e2d251e137.roa
Signing time:             Sun 08 Nov 2026 14:00:12 +0000
ROA not before:           Sun 08 Nov 2026 14:00:12 +0000
ROA not after:            Sat 06 Feb 2027 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4070::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c5:cb:e5:8c:69:54:36:71:24:ac:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov  8 14:00:12 2026 GMT
            Not After : Feb  6 14:00:12 2027 GMT
        Subject: CN=372077b0-9584-404c-a07e-05f3c9c533e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ad:f0:3d:d5:c5:2b:21:dd:53:56:fa:83:d5:
                    65:b5:f3:77:e5:13:d6:9a:ef:09:ab:5a:44:00:0e:
                    c4:b3:70:d2:4a:0a:ea:da:30:90:c2:b6:a9:67:0c:
                    01:82:ce:de:9b:d3:87:eb:6b:a2:d1:c9:94:54:dc:
                    02:4f:f3:a3:7a:1f:d2:44:ca:80:e4:2a:45:49:3f:
                    33:31:5f:ef:ff:f0:9e:0d:3d:cd:db:ab:e5:08:33:
                    02:f3:bc:41:24:5e:4b:21:de:2b:84:80:8e:21:b3:
                    8a:67:c5:3f:a4:ba:a4:00:1a:42:fd:b9:f2:1f:48:
                    a8:26:37:27:70:11:9a:a2:40:b0:9d:4a:72:0f:37:
                    4f:0a:15:5f:bb:41:46:a7:67:74:37:bb:5b:fb:c6:
                    0d:90:01:cd:22:e8:86:12:91:0b:8a:c6:e8:8a:b1:
                    49:d8:4f:68:6d:d9:e2:b8:3f:b0:00:a2:b9:02:f2:
                    df:7c:5f:c1:af:ba:77:35:53:e7:f2:5d:c0:56:51:
                    75:51:0b:f4:c7:83:cb:0e:7d:ee:ea:21:4d:6f:23:
                    6a:c3:a4:c4:c5:38:6d:da:d0:3c:f2:77:a9:1d:78:
                    4b:bd:cd:75:2d:8c:5d:59:c3:74:0e:1e:38:12:71:
                    e2:c1:39:db:44:28:90:41:bd:ff:39:62:9d:98:81:
                    32:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6B:AB:9B:36:D9:06:5E:DA:05:2B:6B:25:5F:E3:6B:73:64:68:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5eda57ea-8e0c-30fc-a06e-54e2d251e137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4070::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:4b:1a:e0:39:3e:5e:ee:d7:1d:5c:05:dd:f3:4a:8b:fa:d1:
         77:32:f9:46:ea:51:de:71:22:29:b9:f9:e0:aa:cb:8b:53:93:
         ca:16:d7:28:8e:40:05:c2:84:30:94:a2:08:69:48:5d:a8:af:
         53:49:07:17:22:f7:4a:26:d0:d9:ee:98:5e:ce:e2:cb:0e:64:
         17:8a:9e:fb:fb:53:1d:09:fa:27:d6:dd:ee:18:60:dd:b7:75:
         fa:b9:b8:b3:04:26:cb:4f:49:bf:23:ad:c2:0b:91:dd:73:d0:
         39:d5:e8:b4:13:69:be:a9:57:4c:af:a6:6a:fd:09:34:cd:67:
         21:4d:b6:10:d2:44:29:60:8c:cf:cd:e8:98:47:db:8b:73:74:
         9b:84:70:ac:11:11:d5:b7:ba:27:77:16:41:c0:53:b9:ca:a6:
         60:df:7d:ed:18:40:ab:43:6c:0c:24:b6:ec:13:6e:51:d0:21:
         84:21:5b:ec:b8:97:64:81:af:b4:b6:24:4a:91:32:1b:4a:e3:
         bb:63:1e:25:4f:b9:c3:31:e0:a1:f8:33:2b:a6:ff:9d:ea:2b:
         10:65:27:5d:a4:8f:fa:84:2c:af:c6:c7:0c:a6:99:30:73:2e:
         ef:7d:23:54:f9:d5:fc:4b:53:f4:f8:ba:fc:d7:fc:96:97:2f:
         5d:2f:7f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 22:57:04 2026 by rpki-client