Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4104c60-839c-32b0-96f8-dbcd0fbc0700.roa
File:                     b4104c60-839c-32b0-96f8-dbcd0fbc0700.roa (raw, json)
Hash identifier:          u9S+s+6SpyUV1JDZ+8Y3vhsPAyKNpBU6YN1xqiH1xZ8=
Subject key identifier:   5D:59:74:13:32:0D:A8:1E:10:2B:CF:66:F0:58:C5:59:C2:FF:C5:53
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C27ACA021ACE2454C58D00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4104c60-839c-32b0-96f8-dbcd0fbc0700.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:5200::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:7a:ca:02:1a:ce:24:54:c5:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=315e10cc-e04c-4e7a-bc70-5b9649cb1e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:26:e6:da:41:0e:a9:09:ed:39:3e:91:ac:f4:
                    4f:fe:a8:dd:81:77:66:71:95:4c:38:54:49:f5:87:
                    a3:5a:18:b5:c6:43:25:55:d5:80:c6:ce:34:0a:38:
                    11:32:31:88:43:74:4c:33:3a:7a:70:e9:43:17:86:
                    ed:db:77:d0:3c:93:dc:f5:f1:da:cb:6b:12:d9:2d:
                    5a:33:80:84:10:c5:a6:1a:df:0c:d2:05:28:b5:a9:
                    bb:34:ee:94:73:65:95:4c:82:5f:b0:ae:36:ff:85:
                    99:41:23:c3:01:50:18:be:df:41:bb:b0:f8:45:54:
                    f3:f8:85:4a:00:07:2b:bd:6c:20:c2:7a:29:ca:c2:
                    63:76:41:48:d6:d3:0d:ea:8f:f4:d7:d6:3e:a1:c7:
                    f4:7b:92:04:c2:aa:70:90:f4:1c:30:ec:7d:0e:14:
                    aa:78:cd:d3:f1:02:f2:90:3a:2a:a4:cf:30:8a:5e:
                    50:13:8e:67:7e:01:bb:b6:12:a2:6f:f4:8b:46:d7:
                    2b:9d:a7:6e:18:d1:bb:2f:c4:9e:2e:db:0f:3b:b3:
                    c8:03:bc:cb:8f:bd:e6:2a:73:4f:b4:06:d4:47:f5:
                    a8:4d:7b:d8:36:b2:08:07:8e:97:be:90:8f:52:36:
                    2b:18:82:6f:63:fd:cc:04:8c:ad:fe:a5:2a:48:f8:
                    2f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:59:74:13:32:0D:A8:1E:10:2B:CF:66:F0:58:C5:59:C2:FF:C5:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4104c60-839c-32b0-96f8-dbcd0fbc0700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:08:ee:a2:5b:25:64:13:6a:dd:be:f1:3b:66:e1:6b:95:17:
         48:66:04:a5:51:c0:f5:e7:bb:c9:cf:07:c1:ba:a9:97:f7:8e:
         88:91:59:ef:d6:ba:bb:2d:ad:27:6d:7d:74:6a:26:8d:bd:eb:
         9d:64:d5:e0:4e:97:9b:60:3f:e5:8a:18:be:48:39:0c:b4:63:
         60:ae:1b:77:30:d9:27:86:39:b0:0f:eb:00:41:d6:45:47:4c:
         29:6a:6e:c5:82:a7:12:dc:5d:e8:44:5b:fa:58:bd:00:56:46:
         46:21:d4:cb:19:01:68:a4:27:14:df:27:d5:32:f3:f2:39:16:
         43:b5:81:f7:a3:fb:01:9f:7a:27:bf:2a:c7:b0:d7:f5:34:47:
         2c:4d:1f:0d:4b:77:49:79:e1:81:40:80:2f:b5:ce:7d:6c:9d:
         e5:6a:47:6c:73:59:2a:9c:05:d8:d4:ac:a1:03:ea:68:01:76:
         a2:21:06:1c:6f:28:d2:49:de:3a:a1:b7:8b:82:22:c0:55:1f:
         7e:3f:37:46:11:35:2a:90:6b:02:75:40:7c:49:3b:21:09:f1:
         39:ea:be:e5:73:47:2f:5f:1c:94:26:d8:ec:10:a2:e3:c2:4d:
         7c:e2:c6:78:60:21:4d:1d:05:61:95:60:0a:51:17:06:53:dd:
         fa:ef:e0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:00:20 2026 by rpki-client