Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4b27048c-57d9-3315-8e24-641962fb3172.roa
File:                     4b27048c-57d9-3315-8e24-641962fb3172.roa (raw, json)
Hash identifier:          2i22sicuZe7h34m9+cJWoY21wKOvEx3y0s7zcJEr0Tg=
Subject key identifier:   EE:E2:60:EC:FE:AC:A4:E2:19:A9:2D:70:88:D6:4F:7D:B5:5E:C8:7F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C2755A78A13C1C8AF4E380
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4b27048c-57d9-3315-8e24-641962fb3172.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4450::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:75:5a:78:a1:3c:1c:8a:f4:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=b8dbf5de-36d8-49ca-b8ac-e13647a03684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:03:e9:af:4b:3a:43:a9:b7:2c:2e:97:ce:f1:
                    91:44:db:2f:c4:f9:0c:24:91:78:8b:b0:8e:27:fe:
                    da:58:65:46:90:8a:35:be:b9:aa:27:a5:44:3c:8c:
                    c1:2d:3f:41:8b:0f:24:f1:20:0e:a5:a7:2b:47:86:
                    ef:8e:86:d6:00:87:4f:dc:0d:c9:a2:4b:f5:7b:17:
                    2c:46:af:28:d4:75:3a:8c:7e:23:0a:43:c3:dc:41:
                    63:d9:73:9b:6e:88:ed:69:9c:90:32:41:29:f5:85:
                    00:fa:47:7f:72:15:8f:53:6f:e5:e8:1b:41:1d:c2:
                    fc:4b:f7:a8:53:b9:90:84:31:86:c1:d4:4c:02:6b:
                    63:87:b2:ad:eb:0d:3c:14:cf:57:49:f6:ba:f9:f8:
                    87:8c:35:41:d8:ef:d4:9f:a4:47:82:55:d8:fe:cd:
                    51:d3:f1:40:a2:1e:87:55:d1:34:f6:1c:9f:05:8b:
                    1e:d7:5e:3a:de:74:83:f5:88:9f:05:5a:11:b1:6a:
                    b5:a0:dd:f6:c8:9e:ef:e9:6d:e1:ac:83:05:2a:39:
                    c6:0c:95:9f:c6:e7:41:34:08:29:eb:78:d5:21:95:
                    67:7a:e9:69:fe:94:0f:e5:76:80:dd:3f:12:14:c0:
                    40:3e:c7:1d:e0:d0:bf:3f:70:f5:35:14:61:dd:43:
                    e0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E2:60:EC:FE:AC:A4:E2:19:A9:2D:70:88:D6:4F:7D:B5:5E:C8:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4b27048c-57d9-3315-8e24-641962fb3172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4450::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:10:3c:50:87:7e:f8:16:a0:06:fe:b8:47:7f:8e:b5:72:1c:
         de:1b:33:fc:fc:c6:43:74:1d:0c:05:40:9a:9b:97:3c:21:f1:
         41:b6:92:92:20:57:03:0e:c7:85:85:0a:0e:f1:c5:27:11:96:
         5f:7b:b2:0c:17:1b:54:72:af:5f:1c:6c:74:56:34:e9:cc:a9:
         db:7e:70:4b:dd:20:28:08:cd:f1:a2:bc:26:88:25:4e:8c:0d:
         0c:02:95:df:20:34:21:2e:88:87:09:09:07:5b:bf:e2:88:86:
         fb:97:66:df:ee:ff:8f:1d:99:c4:bb:5c:bb:f1:24:eb:ef:7e:
         28:f8:c3:f9:4c:e0:ed:72:c4:c2:20:0b:9e:08:c1:62:09:03:
         0a:4d:aa:64:2f:72:6d:18:39:18:52:ae:2e:c8:ae:3a:fb:28:
         af:cc:e6:d1:07:e1:74:ee:32:64:c9:de:e0:20:35:53:d5:05:
         75:0f:ec:e6:8e:01:60:33:40:66:dd:dd:9c:8b:d5:f1:13:58:
         2a:73:86:86:3f:d5:2d:48:b9:4d:95:1c:3b:d5:de:be:ce:7b:
         92:05:e5:a7:69:46:fc:af:ab:fa:5c:97:42:65:b4:81:15:e6:
         b6:e6:b0:7d:dd:07:a3:10:45:db:99:58:11:0e:05:f4:f3:b8:
         90:fb:ca:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:35:23 2026 by rpki-client