Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9b78de0d-7c6b-34de-8a2d-4dfd6eb916ac.roa
File:                     9b78de0d-7c6b-34de-8a2d-4dfd6eb916ac.roa (raw, json)
Hash identifier:          KdUDRv7UFrMY7YSEuTdCIWYKmIVS/RmFaSAdXJn/IBo=
Subject key identifier:   47:F1:0E:22:B7:EF:0E:DE:02:DF:E3:BC:9B:D8:DF:90:3D:D9:67:73
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C268D7270CD27B2989FAA6
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9b78de0d-7c6b-34de-8a2d-4dfd6eb916ac.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4590::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:68:d7:27:0c:d2:7b:29:89:fa:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=13c97f16-5a09-4e81-83e2-689e9387204f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a7:cd:8f:8f:36:04:ed:b4:0e:22:af:31:a3:
                    13:13:bc:c6:ef:fe:41:6f:57:45:50:de:3d:5a:5e:
                    d4:bf:75:49:cc:01:01:29:c2:e8:29:3d:6e:56:e1:
                    03:16:8e:ea:32:87:7f:aa:a3:be:af:7e:b8:1b:bc:
                    93:cd:7c:7d:82:f9:b5:e2:8c:6e:f4:4a:7e:9f:98:
                    c0:72:6f:fc:0d:b2:0b:d0:73:4c:b1:e1:a4:4d:73:
                    a5:f9:61:f4:68:94:1a:08:a2:e1:77:2e:f5:1f:a4:
                    c2:84:fa:e3:5a:d5:4b:0e:da:5d:0e:e6:4d:1f:74:
                    6b:41:0f:6a:a6:d7:fe:48:5e:ea:49:3b:a3:45:9d:
                    0a:9c:99:f0:64:fc:c1:27:e3:70:2c:80:c3:d7:0a:
                    b8:a9:ac:7a:b4:b1:44:d1:27:71:ab:b4:af:5c:99:
                    f3:44:a5:f0:a0:9f:cd:53:54:f3:15:55:63:24:44:
                    98:a6:46:48:fc:57:53:28:42:50:3c:31:43:50:97:
                    2d:8a:d7:38:ee:91:74:21:7e:08:ac:e9:75:4f:a3:
                    77:7f:49:46:15:1d:f2:4b:68:ea:cc:8f:5d:1e:f0:
                    f3:59:ed:d4:fb:d5:43:eb:cd:c9:f4:f6:1a:9d:98:
                    5d:30:0e:30:67:da:74:04:df:cd:a2:f7:b5:ae:c3:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F1:0E:22:B7:EF:0E:DE:02:DF:E3:BC:9B:D8:DF:90:3D:D9:67:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9b78de0d-7c6b-34de-8a2d-4dfd6eb916ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4590::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:9c:05:95:7d:36:7e:71:67:24:dc:0b:dc:83:6a:4b:2c:28:
         c9:0d:91:53:d9:1a:81:23:ee:79:33:6c:68:64:9a:b0:2e:04:
         c5:1c:1e:4e:e1:f0:cf:61:21:db:39:f7:79:0c:0d:e9:82:05:
         c3:9f:8a:29:41:30:af:fd:7b:5e:d0:67:f1:4f:05:e3:80:b3:
         1f:3a:1a:00:0e:4f:4c:18:e0:da:85:2e:14:f0:35:8d:67:4f:
         83:f2:8a:28:66:ea:da:d3:53:b4:86:c0:d8:6e:1e:e3:87:f7:
         b8:ae:49:76:a5:e4:b7:ab:3c:36:a5:09:e0:e2:36:77:b9:54:
         c2:9c:47:f2:6f:7c:ee:8e:ae:a7:63:0e:ec:80:22:26:7a:1a:
         4e:80:b3:48:2d:2c:b9:e9:ca:94:00:ab:b0:bc:5b:83:20:3c:
         aa:56:5e:a7:c9:13:10:5e:9c:a4:10:40:47:79:d3:41:6b:4f:
         68:eb:72:32:f0:f1:e7:c2:7b:5f:2f:61:45:4b:37:6d:ac:12:
         14:29:94:79:49:71:89:77:17:2c:f8:06:d3:48:05:be:81:00:
         c9:ba:34:95:2c:72:74:89:36:5b:16:63:a0:84:cf:af:3e:ef:
         4a:bd:69:e3:a3:31:46:a3:05:61:4f:15:b8:4b:eb:b5:41:75:
         cd:b2:a0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:41:46 2026 by rpki-client