Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d080d06-6691-39c8-96b6-4d6745107e52.roa
File:                     5d080d06-6691-39c8-96b6-4d6745107e52.roa (raw, json)
Hash identifier:          4RKg2aaQt8jJUM8S1yWONtvi+XRA8t9fjEsIabsly5w=
Subject key identifier:   51:9C:12:0D:41:89:C8:AB:D9:BB:58:B7:53:25:90:F3:FD:2B:25:C0
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C276BCF8FDE1920CFDCC40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d080d06-6691-39c8-96b6-4d6745107e52.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4a60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:76:bc:f8:fd:e1:92:0c:fd:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=6163ab8a-eaac-4082-84e0-abf9170b38df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:04:0d:25:45:54:db:ba:5e:13:4b:20:eb:61:
                    7e:d7:47:a0:59:72:9d:35:a9:aa:39:6a:86:a8:c8:
                    41:d2:a3:a8:ea:72:a3:ac:2a:24:c1:a2:16:44:5b:
                    40:dc:36:61:9e:e1:61:2e:3a:69:54:c3:ae:c2:86:
                    89:d7:32:ed:dc:cf:7f:b3:07:8f:c7:8d:75:e6:60:
                    9b:5d:99:de:2d:de:76:11:16:56:cf:1f:07:ce:fd:
                    0f:87:d0:65:52:9e:04:94:76:1c:31:60:66:a5:e5:
                    3d:7c:64:60:87:8d:04:ff:60:56:39:8a:98:ee:76:
                    7a:10:10:0a:8e:93:b6:cf:50:48:e0:b0:ce:15:09:
                    05:bc:da:31:a5:c7:c6:2d:f9:0a:e3:2f:4f:12:74:
                    80:d3:4d:62:bf:73:01:9f:86:5b:49:00:d0:c6:bf:
                    8d:20:b7:a0:a7:ed:fe:f1:74:4f:a2:45:c2:25:4d:
                    66:26:19:1a:12:0d:b6:10:c1:e0:06:31:da:48:b6:
                    4d:d5:f7:a4:39:bd:81:b2:cc:de:25:e8:41:26:ed:
                    4f:3e:b6:65:cf:cd:6f:c4:54:78:cd:91:0e:be:ef:
                    0c:88:91:21:e8:1d:4c:6e:84:86:ab:6d:e5:46:5f:
                    dc:08:69:09:e5:ab:1b:15:a4:25:0a:8f:74:8d:96:
                    8b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9C:12:0D:41:89:C8:AB:D9:BB:58:B7:53:25:90:F3:FD:2B:25:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d080d06-6691-39c8-96b6-4d6745107e52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4a60::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:56:8e:6d:d3:d7:63:a2:84:d6:d0:d2:1c:fb:5c:c0:7a:ae:
         9e:1f:d6:fb:2f:99:a5:82:b1:ab:03:19:db:26:f0:71:9c:f2:
         b6:4c:ad:b1:1c:d4:41:ec:fc:13:50:4f:40:95:cd:f6:67:a1:
         08:b2:66:a8:97:63:bb:3b:16:91:e6:8c:d2:7f:48:b1:9c:4b:
         f1:53:ae:3b:b9:b5:ca:70:3e:9e:e8:db:8e:3e:b2:0e:43:0d:
         e2:25:96:7c:8e:42:81:6c:54:31:68:81:80:78:97:10:dc:4d:
         cc:f7:bc:46:ca:6d:c6:28:ad:74:da:d7:2f:05:82:b4:90:53:
         3d:b9:08:e8:02:4d:36:33:a7:f4:a8:23:ac:86:27:ad:cd:22:
         74:ab:60:ee:a8:bc:86:7e:90:4d:f7:0f:95:70:25:27:b2:49:
         73:77:5c:b4:3d:e2:dd:69:62:5e:bf:df:ce:2f:8d:6b:33:9c:
         34:87:8c:17:21:ac:de:23:74:04:56:77:49:02:df:7e:8d:1a:
         88:79:ff:be:0e:73:f4:fe:06:09:07:c1:5a:e0:51:32:c4:93:
         73:90:86:0a:80:8f:4a:e4:1c:37:b0:1b:64:73:1d:f4:7e:f4:
         73:9d:80:24:d5:07:74:cd:1a:80:ba:f0:4b:05:43:94:5a:41:
         45:95:ab:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:59:04 2026 by rpki-client