Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3a764d86-4507-3659-95c6-aec310295f8d.roa
File:                     3a764d86-4507-3659-95c6-aec310295f8d.roa (raw, json)
Hash identifier:          BfW9IXFp92wa6OC90MiaMHULaR7fJFaEFE7xbnCtDnc=
Subject key identifier:   33:91:03:5A:A2:C3:43:13:2F:FD:17:1A:61:C0:90:E1:74:70:6C:C7
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C268750891776F00F23350
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3a764d86-4507-3659-95c6-aec310295f8d.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4220::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:68:75:08:91:77:6f:00:f2:33:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=29fdf800-3a05-445f-a15e-a1fd28ca60f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:28:0a:54:72:37:b2:4a:e7:5f:cd:e8:16:9a:
                    56:0f:33:bf:e8:69:a2:ff:85:de:15:db:a2:c7:10:
                    0b:fa:a4:3a:32:f8:2f:b5:b9:a5:ac:12:df:29:3e:
                    a6:5a:14:ec:f4:e9:3c:cf:95:4c:7e:ef:63:30:99:
                    b3:a7:2e:62:e1:14:66:a9:bb:a1:d7:6f:6a:e9:f9:
                    d4:48:d5:b2:82:61:84:5d:9b:14:d3:6b:09:09:08:
                    c8:5d:f8:a5:0b:99:aa:92:23:e5:f2:42:df:98:05:
                    b5:55:00:68:7b:a3:97:43:bd:ac:d5:c9:7c:ba:fa:
                    bd:14:85:5f:0d:a7:57:4c:13:c4:b4:6f:8b:e2:b9:
                    e4:19:50:5e:2c:97:14:53:7e:b3:e7:17:79:6a:0b:
                    15:ba:08:d5:1d:47:fb:f9:8f:98:31:bc:f9:2d:08:
                    39:11:6d:de:ff:12:da:35:51:af:7c:54:0a:1e:0f:
                    86:2f:b4:da:8c:d0:6c:4f:f7:17:1e:f7:f0:b9:5c:
                    bc:8e:b9:46:86:ec:49:58:f1:ca:36:8f:46:e9:1a:
                    62:64:b9:3a:c1:41:1c:13:f8:8d:06:70:1a:9e:ce:
                    c3:66:ac:86:14:21:e9:62:d8:2c:a0:2b:4c:5b:a2:
                    f5:36:51:e1:3f:87:83:e2:f9:13:d9:59:00:d2:1b:
                    08:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:91:03:5A:A2:C3:43:13:2F:FD:17:1A:61:C0:90:E1:74:70:6C:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3a764d86-4507-3659-95c6-aec310295f8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4220::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:47:0c:46:bc:51:1c:fe:cc:ee:34:c3:01:7d:3a:0f:bb:a3:
         6c:7a:d2:7c:a6:44:52:7f:db:88:96:0d:87:32:c0:a9:02:63:
         c0:57:17:64:5e:3e:5e:aa:ec:34:8f:7e:78:47:ba:00:13:48:
         50:ef:67:48:95:a8:83:11:37:cc:05:cd:d0:b8:ef:8e:76:81:
         8d:5c:59:fe:c5:85:fa:c0:7a:63:cb:b8:ea:41:8f:a6:07:f9:
         c1:f2:de:5d:3f:3e:23:97:cc:9a:e1:bd:be:0e:de:6d:c8:f1:
         bb:c5:39:ba:00:21:08:e1:3c:11:09:c8:bb:07:1d:b1:ff:60:
         4a:d2:3b:5f:5c:73:7a:fa:1f:81:23:7e:01:b6:04:27:06:5a:
         8e:a0:45:b7:ea:18:e5:70:41:8b:eb:c4:22:57:5d:90:cf:4c:
         02:45:95:86:b2:7d:bd:ac:91:35:20:83:ac:58:c6:fc:f3:6c:
         a6:68:5a:2f:00:f6:3e:5d:0a:bc:05:15:c1:8d:8a:58:91:b1:
         41:20:94:f7:b2:eb:8c:ec:12:14:24:20:1a:40:db:ff:18:f1:
         84:4d:98:74:d2:8b:01:ce:56:f5:ac:41:c9:04:85:fd:ae:97:
         f0:4a:ab:a6:17:1c:5d:f2:3b:2e:ae:63:b5:5d:37:a1:65:64:
         ad:7c:aa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:40:24 2026 by rpki-client