Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa94bfa1-f6cd-39dd-8e11-e77b4b5b81d1.roa
File:                     aa94bfa1-f6cd-39dd-8e11-e77b4b5b81d1.roa (raw, json)
Hash identifier:          G3lTq53Af8KNz0rGpXsZo4S8+A/XpXqHqyHx+1E4vgU=
Subject key identifier:   3A:96:E3:20:37:3D:0A:91:52:88:5D:0B:3A:5B:B4:48:52:A4:6A:0A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C2712DF47FCE00C461A420
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa94bfa1-f6cd-39dd-8e11-e77b4b5b81d1.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4510::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:71:2d:f4:7f:ce:00:c4:61:a4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=3d093dc4-8c44-4fb2-8fe5-cbf69758d8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ad:fe:8f:53:6c:0e:00:6c:ab:dc:9a:e6:2c:
                    0f:6f:fd:3c:12:16:11:25:a3:9e:67:7f:d4:0d:71:
                    58:6a:bd:73:2f:6b:ac:d3:91:09:f8:3a:52:5a:fc:
                    64:e1:e4:72:2a:c5:12:ac:ee:a7:82:c0:a9:2e:ff:
                    09:3b:60:ff:5e:6d:15:fa:ef:bf:ed:f8:7e:57:20:
                    63:9c:8e:e5:6d:88:50:9e:d5:87:ae:a7:65:b8:b3:
                    31:e1:66:fa:25:65:03:75:0a:8e:ed:aa:75:25:a2:
                    48:09:57:12:85:d1:99:2a:b2:06:67:a4:17:7a:3a:
                    16:28:01:07:0f:00:97:08:f3:3e:83:6d:86:5a:38:
                    bc:68:9e:17:4d:08:5f:30:74:87:01:24:14:a2:28:
                    be:95:c7:65:c2:38:bf:4a:fd:9d:09:5d:9a:fa:8e:
                    cb:5d:ad:0b:10:99:af:e6:78:ab:1d:2b:f5:55:9d:
                    01:9a:a8:8d:16:58:32:00:7d:6c:a9:56:40:88:99:
                    41:41:07:1e:09:ea:74:34:b0:ad:42:1a:8c:c3:31:
                    7e:3d:d3:cc:ba:b7:ee:32:7c:54:2c:0c:e4:89:53:
                    64:6b:08:98:73:ab:30:c7:74:e6:d6:5a:f3:78:2e:
                    ac:90:27:40:a0:c7:1d:67:96:0a:be:74:9c:67:9e:
                    4e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:96:E3:20:37:3D:0A:91:52:88:5D:0B:3A:5B:B4:48:52:A4:6A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa94bfa1-f6cd-39dd-8e11-e77b4b5b81d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4510::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1a:60:1e:a2:76:a3:f9:74:99:a6:b6:75:7b:9b:86:93:4b:
         ac:7a:4e:d9:8a:36:8f:a0:d2:f1:e5:41:d7:53:58:70:d5:db:
         4d:a3:42:8f:34:70:d9:70:48:65:c5:1b:11:fd:d7:96:18:13:
         fc:3c:4d:bc:15:01:41:14:44:8d:85:5b:8e:e0:24:17:b7:e4:
         72:47:69:25:32:e7:2f:a0:e1:bf:3d:25:c1:f3:64:b7:bf:4c:
         a6:51:99:8a:d2:6b:37:54:e3:7c:8b:fa:b6:0b:32:5b:6a:25:
         bf:64:bd:c9:86:be:f6:5a:f1:97:fe:53:b9:7e:b6:cc:7e:a3:
         37:ed:9a:74:ae:c3:f3:b7:60:15:4d:53:32:34:7c:d3:e3:58:
         64:54:5a:fe:59:85:37:b6:05:b0:33:d0:ba:ae:8a:03:a3:74:
         5a:6f:1d:af:77:4c:82:8f:dc:76:e7:a1:46:b8:70:50:26:33:
         69:47:b9:27:be:fd:93:5a:4c:72:80:00:8a:b5:21:27:33:6a:
         b0:99:93:f7:4f:26:a6:f5:be:0d:7b:6c:7e:89:11:5f:eb:13:
         fd:55:80:3b:d0:5b:36:fc:02:16:a4:c6:e6:43:a6:d7:4e:ae:
         1e:f5:1d:e5:7c:5c:cf:11:c1:49:db:2d:76:93:c3:54:9d:06:
         d6:38:97:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:12:03 2026 by rpki-client