Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa
File:                     4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa (raw, json)
Hash identifier:          yPqOZpTRN/RrxBBlo5xBY+eb4lmujCTX49SisaAWBkE=
Subject key identifier:   9C:8A:6E:28:E4:46:63:99:01:91:D7:A7:23:08:CA:42:6A:BF:0E:31
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C2645E417BBE140DF25CC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4890::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:64:5e:41:7b:be:14:0d:f2:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=82f9e553-05b7-482f-99f9-9f0f0364316b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:76:1e:b1:59:2f:80:b7:66:64:fc:ff:e2:
                    1a:fe:32:95:e3:4f:b2:c5:7d:c5:e9:4a:bf:e9:5e:
                    a2:63:63:80:5e:63:dc:22:cc:c6:6a:a1:f2:b0:d3:
                    d8:d8:11:71:5e:d7:91:92:16:53:09:4c:a0:ea:f9:
                    e3:02:af:7f:4e:f7:62:52:63:27:f3:b5:d9:d9:9a:
                    41:56:43:f8:76:92:78:47:e1:aa:14:91:29:ad:cf:
                    92:5b:18:42:bd:3f:a4:0d:5c:17:8f:1d:8f:8f:ff:
                    2b:1f:23:dd:22:39:7c:1d:19:4c:7b:5e:1b:7e:c6:
                    78:bd:94:44:9a:f5:d5:b7:59:e6:fa:66:a6:49:bd:
                    62:86:1e:2c:71:e7:80:b7:83:42:4b:f2:7e:6f:96:
                    b8:95:31:71:6f:c8:98:36:01:3e:1b:74:2b:b4:52:
                    10:17:ef:4e:50:98:9a:12:23:f3:e3:30:5f:d4:c0:
                    8e:d9:f8:9c:9d:46:19:67:4e:a1:d4:38:92:25:ae:
                    9b:43:90:56:ce:f6:4c:c1:a7:3c:24:dd:de:3a:70:
                    d9:f2:c8:e5:74:86:90:06:97:68:8f:99:ca:cc:02:
                    48:cf:3b:ab:09:b2:8f:4b:45:06:77:db:3f:5b:87:
                    d1:a8:1b:5f:a0:54:1d:3e:c5:a8:70:15:50:d2:5c:
                    e4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8A:6E:28:E4:46:63:99:01:91:D7:A7:23:08:CA:42:6A:BF:0E:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4890::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9f:89:57:92:a4:19:bf:2f:79:5f:96:60:bb:c8:09:38:3a:
         5f:5f:ed:37:29:47:3b:41:61:56:6b:16:13:0b:e1:fc:b6:5b:
         67:45:0e:a5:98:c5:87:a6:14:86:27:b9:26:32:43:e7:2c:e2:
         45:ee:69:90:bc:c1:01:97:e3:20:b5:d4:44:47:c8:36:b1:b7:
         b2:a3:88:1a:85:19:a1:fd:6c:0e:39:3e:99:a6:6b:86:db:3a:
         1b:70:67:cb:e2:0a:da:99:67:17:7c:2f:83:c2:91:dc:96:fb:
         5a:55:56:73:19:0e:79:37:ca:c1:3e:ed:2b:21:59:98:bf:45:
         ee:34:4f:66:6f:b0:be:4d:f8:74:2d:4f:aa:b4:0e:0d:e6:03:
         c5:3e:6f:f2:53:e5:da:64:8f:85:2c:ed:66:80:dc:10:9b:76:
         34:8b:a2:a6:8e:d4:da:df:48:67:d8:b8:ea:57:45:83:62:b2:
         56:be:ad:69:1b:90:cb:ca:78:0b:b3:97:c5:b9:cd:18:b8:99:
         cd:8f:03:ec:b7:3e:49:db:8d:97:de:db:f7:f9:2a:75:3d:dc:
         35:ef:3a:14:97:69:f5:73:86:c2:f7:3c:28:0f:4c:68:ea:62:
         30:4e:fa:45:45:61:fb:fb:36:42:78:b7:af:ff:b7:b3:0f:3d:
         4c:86:b5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:13:58 2026 by rpki-client