Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9b78de0d-7c6b-34de-8a2d-4dfd6eb916ac.roa
File:                     9b78de0d-7c6b-34de-8a2d-4dfd6eb916ac.roa (raw, json)
Hash identifier:          vH0uC3CtJqBwGmKq1cz61n9dspSwSD48pY+JeIw87lg=
Subject key identifier:   56:98:49:CE:71:C9:E1:79:B8:D6:37:7D:86:1E:9A:67:36:2F:A7:C3
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CAFC54F596AEEE7879080
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9b78de0d-7c6b-34de-8a2d-4dfd6eb916ac.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4590::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:af:c5:4f:59:6a:ee:e7:87:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=12e576a8-b211-4750-a6d9-ea435642fb62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:87:1c:be:84:08:bb:17:f2:59:a0:88:b8:74:
                    8f:ff:bb:11:99:4c:e0:a8:bf:a8:46:af:15:70:c6:
                    5d:8e:b0:86:45:39:64:d3:46:cd:50:77:eb:82:32:
                    d4:4e:e3:c1:f8:f6:ec:8d:7f:31:64:87:39:eb:c7:
                    38:a5:70:d5:ce:c3:1a:38:be:82:0e:3f:0b:3e:6e:
                    70:59:73:9c:52:ed:a3:08:af:93:15:3e:7d:55:57:
                    2b:00:19:35:a4:5d:8c:c7:f0:69:9c:a0:3d:84:33:
                    f2:ce:57:1b:e1:3c:d1:5d:38:f7:6f:8b:83:94:08:
                    1e:94:24:cc:41:30:74:30:a6:88:b5:50:c2:b6:82:
                    5f:1b:66:83:16:9a:52:3e:a5:52:91:1c:62:88:16:
                    96:54:7f:1f:79:b0:79:d7:e5:93:d7:86:3c:97:6f:
                    8e:7e:22:9a:cd:38:b3:7a:c3:93:09:ed:3c:e6:fa:
                    df:9f:c0:26:39:da:97:70:0b:db:27:32:df:1f:bd:
                    ea:e7:ce:3c:78:ab:a7:ae:70:30:f7:d0:5b:25:21:
                    59:a3:23:7f:70:f0:8c:0f:2c:26:b4:41:89:9e:5d:
                    b8:1d:1c:0b:a3:a5:82:64:18:57:5c:50:29:55:9e:
                    e0:89:b3:d7:fd:af:04:e0:2f:de:c6:68:be:4e:e4:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:98:49:CE:71:C9:E1:79:B8:D6:37:7D:86:1E:9A:67:36:2F:A7:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9b78de0d-7c6b-34de-8a2d-4dfd6eb916ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4590::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:67:44:88:cd:00:e3:87:98:7f:23:80:ba:63:dd:39:92:ec:
         fb:5b:52:ce:6b:10:45:3f:67:a1:17:58:18:c5:60:7d:f5:fa:
         28:76:64:ba:ae:e5:7d:01:c6:93:b9:17:a6:57:a9:41:6b:40:
         4a:7e:87:26:c7:83:23:4a:50:d8:8d:90:05:df:d1:35:71:af:
         fb:68:35:bd:a0:f5:18:bb:c2:e6:26:3e:dd:8d:81:80:cd:08:
         1b:0c:92:3c:7e:39:fe:01:ea:8c:a7:67:e4:bc:60:97:78:fd:
         54:2c:83:8d:6c:f0:20:16:3f:c9:6d:7a:f7:dd:ca:17:4a:06:
         04:e7:82:1b:d7:86:b1:c7:82:c7:38:4b:37:b2:70:5d:b4:9d:
         4e:4a:76:1f:2a:f9:b5:63:79:ef:1f:44:f4:14:a0:be:ac:70:
         73:4f:8d:86:f6:19:c8:0e:82:43:b3:05:b9:1b:3f:9d:c8:f3:
         65:62:d0:60:2c:fa:f8:24:07:83:97:fe:bf:34:6d:c2:76:41:
         af:3d:fd:ef:01:be:de:03:56:f4:e0:57:b0:26:71:0e:d8:32:
         96:8c:ff:61:8d:2b:f9:ab:43:23:13:df:f3:e3:8e:b3:4c:a3:
         ca:cc:c3:40:52:dd:a7:c6:63:c5:20:4e:07:97:72:3c:8d:5c:
         5c:91:b8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:04 2026 by rpki-client