Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a446e551-9bf0-3bf2-8c6c-9389841ec4d7.roa
File:                     a446e551-9bf0-3bf2-8c6c-9389841ec4d7.roa (raw, json)
Hash identifier:          2knjwAyZO/vNgALzu7e/p4Oy0phml6JbTGrtphNhkS4=
Subject key identifier:   34:B3:6E:2D:0A:B9:79:31:BC:66:54:7C:BD:CD:B1:54:CB:32:BC:C8
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C26A91884AA329576B08C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a446e551-9bf0-3bf2-8c6c-9389841ec4d7.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4d40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:6a:91:88:4a:a3:29:57:6b:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=ca0fe3d9-c3bb-4248-926c-61082d9744c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:41:dd:69:7c:bd:58:a5:a6:d0:75:f9:34:2a:
                    f1:c7:e5:1e:46:e1:82:be:e6:f0:b0:5e:4b:64:2f:
                    c6:83:4b:a2:5e:4a:a5:20:d3:06:e8:24:40:ad:af:
                    09:fc:5f:19:e6:25:f2:55:2a:6a:a5:af:39:de:9c:
                    66:ff:60:22:fa:8a:0f:c7:dc:27:c4:64:40:93:52:
                    cd:08:95:b2:1b:00:cd:b0:59:98:0e:60:a4:e0:ea:
                    07:00:8f:7e:42:c8:ac:7f:42:31:69:ca:4d:68:e5:
                    bb:49:b2:62:d8:82:aa:66:9d:d4:31:99:24:37:ee:
                    b3:28:a0:33:71:79:2b:9b:25:0c:e4:db:bc:45:6f:
                    41:43:8a:df:b5:a3:69:90:f2:10:47:4c:bb:05:32:
                    25:7e:f1:6c:bd:8a:fa:94:50:5e:9a:22:39:2d:d8:
                    55:24:91:8a:66:c5:12:09:9a:5a:27:ea:05:5d:b9:
                    2b:66:5b:a7:a0:28:b6:a8:fe:38:f0:fe:c5:0b:eb:
                    f9:55:e3:79:87:80:4c:28:b5:0f:e2:62:b9:56:52:
                    5f:dc:87:fb:a7:03:3d:3e:c2:59:fc:5b:08:12:58:
                    34:d2:d8:84:d8:85:a4:ac:ee:6b:51:4c:fe:bf:24:
                    61:fe:ba:0d:40:98:5e:01:b7:1b:6a:72:5e:de:a1:
                    f9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B3:6E:2D:0A:B9:79:31:BC:66:54:7C:BD:CD:B1:54:CB:32:BC:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a446e551-9bf0-3bf2-8c6c-9389841ec4d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4d40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:1f:eb:ad:f6:c6:32:15:4a:23:48:1e:84:0d:e8:1e:06:72:
         5a:34:48:28:bd:c8:48:94:87:d2:27:55:75:28:46:85:30:88:
         7e:ad:8c:fb:e3:4b:72:58:2d:c8:2d:c4:d1:1b:cb:5f:e0:e5:
         b4:3b:9e:f8:f2:8e:4b:70:36:48:1d:75:b3:ce:74:db:51:e3:
         7b:de:00:28:f6:5a:b6:2c:38:a1:e2:80:7f:35:eb:28:c7:e8:
         22:e7:9a:c9:37:30:e5:90:22:6c:1e:62:25:91:8f:30:eb:af:
         97:14:2e:9a:61:84:50:f9:6a:74:8f:22:68:85:b8:d6:18:5b:
         4f:bb:a4:4a:1d:02:2e:a0:f2:d2:a7:84:4e:43:9c:05:32:e0:
         60:92:73:8a:55:24:76:21:a4:87:a1:80:14:e8:d9:45:2a:3a:
         01:87:ee:4f:4a:ad:3c:26:e7:f0:08:eb:ff:0f:35:14:74:57:
         83:ce:d6:60:d6:eb:4b:d2:ff:50:0f:2c:ef:57:9f:df:eb:f5:
         e9:3f:ec:af:be:18:5b:ba:bd:d2:ad:ed:12:1d:7b:e7:4e:72:
         1b:eb:81:38:76:59:24:7e:4c:cb:77:cb:1d:14:de:2e:a5:88:
         7c:99:da:85:46:62:4d:34:ea:05:7c:46:4f:61:a6:5d:66:f3:
         4f:03:4a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:51:20 2026 by rpki-client