Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6be3a807-f54b-31db-9283-36b1407058b3.roa
File:                     6be3a807-f54b-31db-9283-36b1407058b3.roa (raw, json)
Hash identifier:          LKnJ2cBCaWPZnGHDpr5PtLZStio+ULWyhTnlhjs8E0I=
Subject key identifier:   3B:F8:DA:B2:6E:9F:7D:10:2E:D8:82:40:3B:B3:38:15:B4:82:01:AE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C266A83F3809DFE4E01E18
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6be3a807-f54b-31db-9283-36b1407058b3.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:5ef0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:66:a8:3f:38:09:df:e4:e0:1e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=461b1d7d-8cbf-4aa3-8853-ad85f8b7a7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:93:13:18:b9:58:19:a1:56:32:a3:80:f9:70:
                    1d:3c:58:a0:0e:90:3a:36:94:c8:d2:42:75:33:a3:
                    c4:38:67:9a:c9:9c:43:63:ad:ae:85:1d:10:3b:f5:
                    42:b9:70:18:5c:bb:b7:db:42:18:06:b7:43:6d:e3:
                    27:f9:ce:d3:23:19:6e:8f:20:8c:43:09:1d:8c:53:
                    d3:2d:ae:93:e9:e9:59:7a:a5:ba:fd:34:c8:81:f3:
                    42:1d:d4:d7:42:b8:75:43:60:00:c8:81:3c:cd:57:
                    c0:34:c5:e7:70:51:b0:b2:e5:54:cc:02:ef:e2:f1:
                    07:28:b6:65:f3:9f:96:6d:a3:75:7e:2e:a3:5a:33:
                    70:fd:f4:ba:4f:8d:39:17:08:8b:b4:70:70:c8:c4:
                    da:19:dd:82:b2:3e:f1:e7:6f:c0:b1:a3:37:0b:06:
                    f5:92:d3:29:33:ef:a2:65:5e:f6:41:f6:03:29:f4:
                    50:2f:ec:29:b8:43:23:2d:62:e9:4f:e2:00:c2:da:
                    0e:82:86:9f:9f:58:f9:4b:37:f4:5a:79:7d:63:be:
                    2c:d8:a7:79:18:f3:97:49:09:f6:a8:09:46:08:47:
                    85:d9:e3:43:3d:68:3d:0e:75:37:a7:e2:da:3b:9e:
                    06:c8:14:b0:90:58:b5:cb:ef:36:6a:f0:85:54:12:
                    1f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F8:DA:B2:6E:9F:7D:10:2E:D8:82:40:3B:B3:38:15:B4:82:01:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6be3a807-f54b-31db-9283-36b1407058b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5ef0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:31:93:00:80:a4:f2:73:0b:11:ac:b9:a4:bc:cd:43:93:38:
         77:b2:fc:f9:1e:1a:ea:25:58:d5:a3:98:3f:e2:47:fb:51:f3:
         71:bd:69:4f:cf:6a:ff:ea:fe:bd:96:83:d4:6e:3e:10:ac:bd:
         12:fb:f7:a5:30:b8:00:15:6a:b6:ff:b5:93:b8:2b:f6:96:a8:
         66:30:44:60:70:83:89:ea:bc:97:a7:43:a6:d9:53:6e:f2:1f:
         8c:b3:1f:5d:3e:ee:e1:32:6f:18:1b:39:f6:6c:99:d3:1f:0b:
         4d:7d:04:6a:cf:2c:9f:7a:84:a4:a1:3a:10:2b:ff:02:62:1c:
         65:2e:89:e1:14:6a:99:cf:a4:a1:e1:f9:04:0d:1b:b6:78:df:
         9a:97:4f:a7:42:b4:78:37:86:c8:c4:96:8a:ce:ca:ed:4d:01:
         3e:6e:5b:08:f1:40:ee:05:51:e3:5c:0c:22:c2:3a:a7:e1:da:
         9d:e8:ce:c3:d8:16:95:f8:b9:41:f3:02:8f:fd:b1:db:a4:3c:
         ad:25:92:bd:d3:54:3c:fb:bf:5b:e8:23:5d:cb:a0:ac:8c:fb:
         df:15:d3:39:22:f2:43:5b:b3:82:93:92:40:13:4e:d2:2e:44:
         46:6c:3f:53:ad:66:a3:88:b7:10:2f:7a:9a:8c:8e:6c:ff:c5:
         62:e1:26:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:38:08 2026 by rpki-client