Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5b23f5e6-8445-3903-a8a5-c0f811483794.roa
File:                     5b23f5e6-8445-3903-a8a5-c0f811483794.roa (raw, json)
Hash identifier:          Dq9zD9Jo4kVQqIm5GjLPF4t//Dz5VwjUgAqHJtFnOxs=
Subject key identifier:   EE:5F:A1:C7:62:17:F5:37:DE:4C:AD:88:45:65:E8:B8:87:3E:0D:78
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C279ADF86C039AEAF24C80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5b23f5e6-8445-3903-a8a5-c0f811483794.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4160::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:79:ad:f8:6c:03:9a:ea:f2:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=64d96a1a-2471-42fe-9d6a-4ce88d4f6892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4a:88:90:a4:09:d6:3d:a1:de:6f:cd:2c:64:
                    0a:c7:6a:e9:3e:3e:66:2a:f2:14:d6:93:93:bc:55:
                    44:1f:72:f3:8a:36:70:44:4c:22:ad:b0:b1:c2:85:
                    5f:b0:07:25:13:bb:6a:34:68:dc:d5:60:ec:f7:a1:
                    26:46:ce:de:f0:14:c6:ff:8d:d5:07:39:c7:ab:3e:
                    8b:9e:d4:c6:e4:ad:e5:10:49:6e:81:46:df:59:28:
                    bd:83:f1:9e:f5:ed:fe:e1:96:d8:9f:96:36:26:69:
                    8a:e1:ca:b7:39:84:46:f3:48:44:71:8a:13:d8:ed:
                    8f:31:99:80:fa:95:b7:45:46:cc:a2:5b:a9:8b:b7:
                    a6:fa:7f:60:9c:58:d3:ee:d8:55:a2:97:40:2e:d7:
                    c1:65:1b:bb:7f:5f:9c:0a:51:78:ac:c6:81:91:18:
                    5b:91:67:d4:1a:87:dd:dc:78:9b:72:54:18:2f:7c:
                    53:3c:4d:80:d5:e4:ce:7d:08:a5:6c:1f:33:9d:83:
                    b1:a9:f0:1b:d2:cd:5b:29:4e:98:68:44:bb:45:dc:
                    3f:18:99:35:6e:44:61:2e:0e:32:7c:1f:a2:05:3d:
                    57:fc:ea:5b:18:ee:89:c5:9d:b0:ef:5c:59:c2:a7:
                    b1:a6:93:e0:82:b0:fa:7b:47:2c:49:bf:67:66:cd:
                    29:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5F:A1:C7:62:17:F5:37:DE:4C:AD:88:45:65:E8:B8:87:3E:0D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5b23f5e6-8445-3903-a8a5-c0f811483794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4160::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d9:28:41:19:e4:0e:d8:7c:0d:b3:c8:5b:b0:67:5d:26:7d:
         3d:d8:49:6c:2e:cb:62:14:3b:f5:03:b1:d7:39:07:89:ac:8a:
         78:1e:00:e8:a6:fd:2a:fd:6b:dd:41:29:dd:38:42:ab:f6:cd:
         db:56:5c:34:7d:41:46:29:7f:41:fa:46:3e:5c:c3:c8:aa:14:
         7d:a1:fe:1c:dc:02:d1:1e:f8:6e:71:7c:6d:08:3f:50:8e:2f:
         e8:e4:e5:38:85:5a:df:68:fa:ed:14:11:a8:62:a3:13:bb:d9:
         61:9a:6e:45:48:88:f2:e3:c8:7a:47:da:07:98:8b:6a:8f:bb:
         33:db:92:5e:b4:04:0f:44:71:c1:1e:e6:76:74:4f:8a:9d:2f:
         01:8c:e9:8e:f0:69:57:fb:42:01:e6:f7:a8:fc:94:22:5d:04:
         2f:bb:64:2c:d6:af:ea:e1:dc:30:cb:d7:00:f5:39:37:74:73:
         af:dd:96:7c:e0:ef:5c:f4:29:95:7e:87:0f:7d:c6:51:40:67:
         b8:ad:15:74:01:c6:37:6c:f5:0d:b6:9a:e6:2f:39:4d:22:34:
         b1:1a:a0:92:34:0f:a3:f7:07:32:51:e3:d1:53:40:42:a9:14:
         18:8c:3d:65:4f:3a:16:db:d1:77:9e:27:41:8e:14:ce:22:9f:
         9c:86:0c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:38:58 2026 by rpki-client