Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/386dad4c-5822-3c91-8a96-c0e1c1723da0.roa
File:                     386dad4c-5822-3c91-8a96-c0e1c1723da0.roa (raw, json)
Hash identifier:          ln/UpNFbGNoHlW8t8dOllJIaDGXngCG/47BVNjPFjKU=
Subject key identifier:   CB:B8:0F:3C:10:A6:A3:CA:76:16:C3:8E:4A:5E:DF:E7:48:B0:F9:91
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C26FA09E9020A16D686D00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/386dad4c-5822-3c91-8a96-c0e1c1723da0.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4970::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:6f:a0:9e:90:20:a1:6d:68:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=af08564d-46b3-4a66-a4f0-1abe65fcfd87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6a:4e:e9:b3:5c:f8:9a:e3:0f:09:5e:e2:df:
                    58:cc:b5:fd:3e:bd:6f:fe:65:4e:51:04:ec:9b:3f:
                    ea:a2:63:d3:5d:e5:89:2e:d2:4c:e4:16:c4:34:d8:
                    f7:84:66:ac:5b:03:b6:48:be:58:b2:d4:d5:1f:c2:
                    32:f4:6a:5c:b8:d9:e0:f4:b8:3f:6a:fc:3d:32:e6:
                    0b:04:41:67:27:f7:e2:1f:7c:b7:61:15:5c:9c:90:
                    9e:ac:e2:9a:78:5e:ea:31:32:23:57:99:b5:58:7a:
                    2b:0a:d9:0e:1e:b3:59:27:e7:7e:07:4a:eb:85:45:
                    89:cf:14:34:88:ff:96:8d:f1:a1:54:68:db:72:d6:
                    fd:4d:35:e9:95:49:59:69:62:e3:d6:6a:85:27:aa:
                    9a:42:3e:73:7f:9b:9d:e8:4e:24:de:5f:dd:0c:5d:
                    cf:78:b1:d5:17:60:b5:29:7e:62:68:38:80:4c:ff:
                    c2:78:a2:e9:d7:c4:d2:bc:41:42:0a:aa:89:1a:fc:
                    2b:17:72:10:94:3f:f2:d2:e5:d8:52:51:fd:3a:79:
                    d8:fb:c4:36:86:4c:24:09:31:d0:db:64:be:9a:08:
                    86:96:68:b0:0a:ce:b0:a3:73:03:0e:6f:b9:52:71:
                    5c:c7:5f:16:8e:2c:43:af:9d:58:22:c1:79:50:dc:
                    93:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B8:0F:3C:10:A6:A3:CA:76:16:C3:8E:4A:5E:DF:E7:48:B0:F9:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/386dad4c-5822-3c91-8a96-c0e1c1723da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4970::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:00:2a:08:1b:38:49:64:7f:69:b3:23:71:d8:52:a7:af:b2:
         1a:35:d9:e0:39:06:56:67:1c:99:ef:8f:b2:41:b3:9d:56:11:
         d8:dc:d8:83:73:14:2f:ed:11:a0:01:fb:f1:75:b5:8b:e1:75:
         42:19:8e:3e:d2:02:74:f5:85:79:30:74:be:42:52:d2:d5:65:
         38:a6:17:77:7c:f8:6d:d7:ad:02:61:da:20:76:5d:f4:a2:2d:
         8e:4c:ba:4f:bc:15:74:fa:2d:de:ee:7e:fd:de:a8:ed:83:35:
         69:58:90:72:36:0a:4e:8a:fb:c4:92:f5:aa:5f:e4:06:5b:66:
         52:a6:2c:55:00:27:98:59:3e:a4:7f:ba:ca:26:a4:ce:ad:ca:
         be:cf:98:d9:5d:cb:c4:35:4c:18:a6:f3:ce:8a:62:98:87:84:
         b0:95:98:e3:6d:0d:5e:f8:27:99:b8:19:b7:4d:d2:a5:88:98:
         e3:4a:f8:16:18:80:d1:56:eb:4d:cd:d5:1f:4a:19:98:29:56:
         10:a0:d2:fd:da:fe:8c:81:6e:57:4b:6d:d9:b5:8a:f3:cb:ac:
         04:9a:5a:8c:64:2e:54:42:7a:70:7e:b3:3f:10:bd:19:4b:e5:
         0d:4b:86:22:8a:bb:bf:ba:a0:86:7d:b9:a2:62:8e:e5:3a:eb:
         a3:53:b1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:07:36 2026 by rpki-client