Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4c6891d0-f4ac-3b18-8e9b-e9a6e778d5ad.roa
File:                     4c6891d0-f4ac-3b18-8e9b-e9a6e778d5ad.roa (raw, json)
Hash identifier:          u9+YCtHTRXsf8XueK5jpYmXGpJWNUlqDPi+76ymbPvg=
Subject key identifier:   88:B9:08:FD:AC:32:1F:63:AF:F5:70:7C:9A:0C:0F:F3:34:99:D1:95
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C26B90DEF5DBB87755D480
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4c6891d0-f4ac-3b18-8e9b-e9a6e778d5ad.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:5090::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:6b:90:de:f5:db:b8:77:55:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=5a1e4a70-26af-4c54-b594-0036fcbca117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5f:fc:5c:4a:d9:61:a9:24:74:0b:0f:7f:eb:
                    98:3a:96:fa:fd:c3:85:03:61:62:a4:e4:fd:c3:74:
                    78:a2:e3:7d:0d:43:8c:62:bd:a7:5b:3d:1a:8b:98:
                    83:fb:42:1f:70:59:32:00:8f:17:96:a2:14:c2:8e:
                    06:9e:57:06:3a:64:96:86:c7:12:cc:bb:80:30:a9:
                    25:19:83:1e:4f:d3:b7:f2:3d:0e:e3:f1:5f:40:4b:
                    bc:26:b7:64:54:b0:41:d4:91:bc:3d:4a:23:28:38:
                    f8:0d:a9:09:61:cf:30:77:39:80:25:4f:03:06:e1:
                    60:f3:43:7c:00:f3:1d:22:72:a0:2b:52:82:01:66:
                    4c:b8:41:18:5e:a7:b2:dc:61:b7:d2:92:4a:8c:44:
                    67:6b:0a:ae:b9:2e:96:4f:ff:57:30:b3:85:15:bd:
                    5b:d4:31:bb:94:40:eb:82:f3:24:12:15:18:4f:1a:
                    14:38:a7:c5:90:b6:96:8c:66:71:8c:11:9c:8c:25:
                    e8:7b:0f:8f:c0:79:58:9a:e7:d3:c3:e9:38:3d:0b:
                    06:6f:61:8f:da:15:24:d1:11:48:57:e6:68:64:c9:
                    6d:d3:75:90:1f:73:6b:bc:2c:1a:50:a8:0a:4f:25:
                    11:27:1e:53:09:2e:27:af:93:37:09:d4:95:85:6f:
                    a5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B9:08:FD:AC:32:1F:63:AF:F5:70:7C:9A:0C:0F:F3:34:99:D1:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4c6891d0-f4ac-3b18-8e9b-e9a6e778d5ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:1a:6c:ca:c2:fd:1e:b9:92:6c:90:67:0e:9b:7b:b7:6f:d9:
         55:2b:b9:80:c3:ed:7d:e0:ef:51:a4:f2:90:2c:1e:5d:f4:ad:
         5d:b0:77:87:01:b5:08:e8:dc:1c:9f:64:de:8d:28:86:ec:90:
         24:48:2a:40:52:0d:1d:58:85:cf:e5:60:b7:c2:5e:ae:a4:fa:
         f8:7d:60:3a:a2:82:ed:fe:aa:de:c4:d8:4c:18:fc:30:f4:c0:
         a4:1c:eb:39:07:8d:c8:42:65:75:52:08:86:95:24:ac:00:42:
         6f:54:c7:76:20:79:ce:b3:c8:e6:b7:69:54:a2:e0:d0:c3:00:
         bd:b8:a4:30:18:34:6d:df:11:6c:9a:6e:bb:57:67:ee:76:eb:
         66:08:68:4c:45:90:30:1e:d4:40:dd:df:70:07:d2:5d:3f:ba:
         f5:9d:24:3f:16:d1:8b:69:f0:58:c9:e2:12:c4:a9:5b:fd:5c:
         5d:41:5c:cc:31:c4:c7:43:cb:d6:cd:f4:0b:7e:a3:5b:c6:ec:
         6b:71:10:5b:38:75:e8:77:f3:0c:44:3b:f1:2c:b9:da:d0:be:
         1b:ee:bd:28:6c:a5:ac:59:1d:60:c1:27:d2:62:18:45:a6:c8:
         a6:9c:da:1b:c2:23:41:84:67:5b:73:2f:b6:62:8c:66:ed:be:
         7d:a2:a8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:59:56 2026 by rpki-client