Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e25af9e-dfdb-314e-aba9-07e3b60c3978.roa
File:                     0e25af9e-dfdb-314e-aba9-07e3b60c3978.roa (raw, json)
Hash identifier:          rcsL+mfHYuIL/AV8gj9+MsavM+JVJZmPGQgc4o2u9as=
Subject key identifier:   90:39:0A:D7:76:66:25:87:08:8F:81:51:9D:DF:3C:D4:23:CB:A3:3A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C26498D53972CDA5CCDA80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e25af9e-dfdb-314e-aba9-07e3b60c3978.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:64:98:d5:39:72:cd:a5:cc:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=823bc47b-90f5-495e-9ec3-5d99ef560e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bf:f9:3a:85:33:52:f8:31:c1:3e:d7:3b:6e:
                    59:a5:63:31:cd:31:30:ed:8a:44:94:45:79:f6:f8:
                    de:33:c6:1c:ee:d7:f5:b4:72:c7:23:c9:36:11:ea:
                    af:c5:92:f8:ce:9e:e8:70:bc:22:33:d2:70:dc:65:
                    b9:9a:af:fd:d4:5d:40:e5:81:7f:1c:f0:0c:2e:e7:
                    a8:71:ab:9b:d9:79:97:b9:2f:4d:3f:10:b2:2b:1c:
                    03:28:0e:6d:69:aa:e7:f2:8a:cb:5b:e1:dd:d9:e3:
                    41:49:a4:d0:d6:99:73:97:80:74:19:53:38:f6:cd:
                    c9:33:71:3d:13:9f:9b:aa:ce:c8:1e:4e:fa:88:3d:
                    61:d2:67:52:fb:98:23:5d:5d:79:09:8a:10:59:85:
                    b1:cf:b4:87:88:da:c3:56:ff:84:0a:b6:c9:e0:ad:
                    c0:7f:b2:4c:c0:c5:60:6b:ec:f6:3e:22:97:cd:96:
                    5b:73:de:24:88:6b:49:23:ae:0e:d4:11:17:ad:64:
                    b8:d0:02:0c:b5:4a:75:fb:e9:ff:14:eb:16:cb:98:
                    c7:d4:6c:0e:57:43:db:3b:e5:d8:ce:f0:d2:9c:49:
                    6e:a8:29:a4:da:1a:c7:42:12:de:83:79:b6:a8:d9:
                    b6:c7:ed:92:1d:4d:00:b3:f0:c7:36:38:7e:f6:24:
                    40:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:39:0A:D7:76:66:25:87:08:8F:81:51:9D:DF:3C:D4:23:CB:A3:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0e25af9e-dfdb-314e-aba9-07e3b60c3978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:11:3c:c0:9d:64:40:da:25:6a:bb:96:c0:71:a2:ed:53:64:
         04:f5:c3:76:1a:46:b3:99:2e:67:4e:18:be:44:ff:47:8d:6c:
         29:f0:0a:6c:c3:61:28:c6:5a:13:3d:f3:28:47:9e:82:33:59:
         d7:13:6b:0d:46:84:c3:c0:69:0e:b1:ef:d6:59:20:3e:2e:68:
         aa:e5:32:7a:2a:35:36:10:a9:03:70:99:83:b8:97:25:f7:17:
         cb:d8:1d:65:1b:51:5e:98:91:8e:38:6a:48:42:cf:f3:67:1a:
         4a:40:7c:16:e1:d7:b3:f2:b1:85:74:c4:6e:12:e2:c3:37:ab:
         23:a0:0d:fd:08:92:bd:7c:62:df:68:96:4c:47:26:52:72:a2:
         ab:22:9d:22:e8:3a:f4:fe:af:8b:5a:84:cd:3f:93:8e:5c:c1:
         fc:35:cb:62:b9:bb:1f:7c:5c:c1:b7:9c:dc:a3:93:44:0d:da:
         48:a6:39:b8:17:7b:9e:be:89:5a:ab:17:e4:52:ce:82:70:30:
         9c:11:7f:08:cb:a2:c1:32:a3:5f:49:29:33:d7:20:a2:a1:14:
         08:06:b5:b2:e5:cc:da:9d:ec:a7:ee:fe:2b:f5:75:47:6e:8c:
         d9:4d:f1:7b:0c:11:0d:d3:86:7d:22:39:96:d6:c5:1c:3b:04:
         8b:f3:7f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:47:06 2026 by rpki-client