Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0db0bae7-6ba0-350d-9ab6-9060370b9315.roa
File:                     0db0bae7-6ba0-350d-9ab6-9060370b9315.roa (raw, json)
Hash identifier:          ASaovh7lqI21gsgRSnwzvIADjl3EhJcG6T4ZlhDjTqw=
Subject key identifier:   B4:DB:7D:21:88:4D:9C:7D:90:29:0C:65:E6:33:DF:D8:35:B3:0D:29
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C26DD123CED3C703237E00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0db0bae7-6ba0-350d-9ab6-9060370b9315.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:5e30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:6d:d1:23:ce:d3:c7:03:23:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=dbcb921d-d287-4031-94d1-e742679f21c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f3:a7:dc:96:81:2b:9f:7e:6c:50:68:f4:54:
                    ea:b3:71:d8:66:32:09:cf:0b:ed:61:8f:d5:bd:ef:
                    cc:81:de:c3:d6:fe:b1:0b:50:83:ae:fc:d9:69:7b:
                    1a:10:c1:cb:6c:a2:26:fd:4b:21:14:2f:5f:0a:ba:
                    c8:10:60:1e:9b:b0:84:cb:05:b9:7a:b7:b2:c4:5e:
                    f1:a3:a4:df:8b:b3:8d:07:7b:96:06:ca:4f:c3:df:
                    c8:60:0c:61:a3:cf:75:8c:95:e4:dd:ec:6b:20:6c:
                    72:ad:d8:25:a2:25:08:0f:3a:cb:8c:17:4e:ad:a5:
                    a1:f1:11:7f:fa:e4:03:f6:44:85:22:72:0c:18:0a:
                    30:23:37:ac:14:0d:80:94:6f:d1:7a:26:97:13:38:
                    e3:67:fb:02:56:fe:f5:bd:e2:8b:7e:cc:d6:66:90:
                    3f:b0:fc:59:d5:c2:1b:58:f7:dc:86:8f:25:90:bb:
                    02:26:f3:aa:47:c0:65:d6:66:ed:b8:c0:a9:14:bf:
                    95:a0:f4:9f:87:85:53:c5:7a:da:a9:f8:7f:e0:9d:
                    71:92:0b:b2:d1:50:f7:6b:69:76:44:28:55:8b:3f:
                    f1:1d:d5:cb:ae:8f:18:47:90:8d:ad:a3:fa:e5:7b:
                    d8:d5:78:d5:f7:4d:70:cd:ff:47:7e:dd:81:22:ba:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DB:7D:21:88:4D:9C:7D:90:29:0C:65:E6:33:DF:D8:35:B3:0D:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0db0bae7-6ba0-350d-9ab6-9060370b9315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5e30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:1c:9d:94:10:17:7a:29:a7:a2:c2:75:9a:c1:75:43:58:71:
         ef:72:11:f6:ba:ca:bd:88:7c:71:78:61:d7:21:2a:1b:61:c0:
         b2:d3:5e:80:5f:c5:cc:e3:c9:db:7a:85:a2:37:91:bc:3f:ad:
         53:8e:06:f3:c0:24:e3:24:7a:97:79:a6:bf:d9:a7:76:59:98:
         45:1f:e5:a9:e9:42:44:66:76:cb:f2:4e:53:f4:29:c4:af:22:
         82:08:57:fe:04:7a:b1:05:f5:82:ec:af:26:5d:97:e6:1f:f2:
         5d:bb:f5:54:c9:6e:73:13:94:8d:69:0b:d2:d6:f0:c2:83:f0:
         ca:c3:80:a9:44:e6:1f:8a:f5:26:91:43:82:6a:4e:e5:6b:67:
         8c:2f:0e:8f:d5:f7:44:09:15:32:c8:4a:3b:4b:40:9a:c3:f7:
         e6:97:97:e9:7d:93:07:3f:9c:86:24:b1:70:57:91:f5:90:cc:
         7b:b5:2c:57:ae:95:03:eb:10:7b:ff:59:9f:f4:10:c6:c6:95:
         fd:2e:2c:38:81:e7:cd:39:6a:d7:62:49:f0:cd:44:05:55:ef:
         cb:e8:3f:5d:2d:ec:7c:07:d0:b6:4c:90:6d:b7:f1:84:8d:e7:
         8a:f9:a8:5f:42:0a:92:29:59:97:85:7f:26:5b:11:ac:b7:b8:
         6f:f9:4f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:32:50 2026 by rpki-client