Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7cde927e-30dd-3cea-ade4-ca2c969dab06.roa
File:                     7cde927e-30dd-3cea-ade4-ca2c969dab06.roa (raw, json)
Hash identifier:          8I8/qTVLDCczrXZdNnv52fwaxvT9RsXJv3ELDNq2jUA=
Subject key identifier:   10:7D:DD:12:02:AF:98:7D:C8:1D:7E:D7:45:9D:F0:97:54:E1:4E:42
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C2681EE2DBC27CAD3EA080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7cde927e-30dd-3cea-ade4-ca2c969dab06.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:5440::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:68:1e:e2:db:c2:7c:ad:3e:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=715f49f4-8159-42af-a25a-4e46c3c75ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:f5:0f:53:a5:a9:5f:51:78:ee:6c:0a:87:
                    01:c4:71:e5:33:55:53:77:16:19:f0:15:d8:17:b5:
                    73:b9:f9:99:6a:0e:ce:c4:e7:01:90:03:7c:0c:58:
                    e9:5d:61:50:0c:26:e7:67:16:00:19:10:e5:60:28:
                    41:a4:d4:6b:a8:7b:3d:c0:9e:82:73:0e:f3:ed:30:
                    dc:34:a8:7b:71:62:b1:b5:f6:e9:8e:61:91:c5:81:
                    6b:1a:9f:8b:bb:55:ca:f0:42:c0:eb:11:92:d9:c8:
                    83:7e:74:3d:ac:73:e6:04:43:d7:eb:4c:45:be:a1:
                    17:86:71:e3:5c:bc:2f:61:e7:4e:a3:0a:60:99:e2:
                    aa:68:5e:58:19:52:3c:21:a0:e7:b3:00:c0:4e:73:
                    51:47:2b:a1:fb:a3:67:8d:1e:b0:12:db:3c:48:31:
                    d3:ef:44:ec:f8:56:9a:de:89:45:ad:97:2b:b5:d4:
                    49:31:42:fc:3e:ad:58:73:d7:4b:bf:97:2c:0a:b6:
                    52:e7:f3:c4:36:2c:d5:8a:22:07:91:dc:ea:f5:9b:
                    87:52:b2:16:be:7c:eb:4d:52:eb:15:ed:79:0f:19:
                    59:1e:b4:8e:c8:1c:0c:22:55:56:79:ed:6e:c0:19:
                    87:5d:d9:1e:0e:dc:4d:d0:2a:11:ec:bb:39:6f:20:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7D:DD:12:02:AF:98:7D:C8:1D:7E:D7:45:9D:F0:97:54:E1:4E:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7cde927e-30dd-3cea-ade4-ca2c969dab06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5440::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:6f:08:c4:89:20:81:08:8d:77:08:49:ed:5d:32:98:04:1b:
         14:42:44:9d:4f:d6:60:f5:07:87:bf:7d:87:ed:67:cd:54:3c:
         29:6c:42:92:ab:89:94:33:22:fc:72:f3:28:7b:09:f1:a9:fd:
         07:eb:a0:0a:28:b7:88:71:b9:06:3f:b8:04:f5:67:37:51:e5:
         66:28:b9:23:8a:23:d7:7b:51:f0:d0:7c:23:05:e3:5b:9b:1c:
         32:66:f9:4f:27:67:15:5e:8b:c7:ff:6f:bd:af:28:e6:8a:be:
         8a:7b:7c:ad:1f:0e:48:3e:da:61:81:82:26:e4:90:ab:21:4a:
         aa:65:43:09:40:76:3c:e2:0f:6d:6a:c8:15:aa:08:e0:6c:72:
         6b:56:c0:7b:8e:ed:04:08:71:21:c9:05:f1:94:cb:2b:bb:5c:
         12:68:00:db:cb:21:ac:eb:af:d3:87:3a:53:f1:22:58:b3:ec:
         28:13:06:13:bf:f2:15:60:ec:c2:e1:7a:44:60:73:29:58:e7:
         c4:ed:4c:25:b0:77:bb:c5:5d:8e:cb:ce:62:85:0c:c5:30:37:
         a0:22:39:80:b8:21:99:42:bd:85:31:cd:d6:83:4a:f3:1d:61:
         6e:ef:eb:20:4e:af:ce:01:36:6d:06:d8:3d:d6:c5:25:bb:75:
         14:30:b9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:31:48 2026 by rpki-client