Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a914a87-d42f-3891-842c-4a60b90e559d.roa
File:                     2a914a87-d42f-3891-842c-4a60b90e559d.roa (raw, json)
Hash identifier:          vgMdCcEwlpR+s5bjyZ6CKMnFywJzz7vtVRrWBJrtXQ4=
Subject key identifier:   6E:B1:7B:39:E0:EE:E4:29:85:C7:38:80:B1:A2:8E:7B:F1:B5:90:F1
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584FC5CBED6E18CCE805FD8D0940
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a914a87-d42f-3891-842c-4a60b90e559d.roa
Signing time:             Sun 08 Nov 2026 14:00:12 +0000
ROA not before:           Sun 08 Nov 2026 14:00:12 +0000
ROA not after:            Sat 06 Feb 2027 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:5670::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c5:cb:ed:6e:18:cc:e8:05:fd:8d:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov  8 14:00:12 2026 GMT
            Not After : Feb  6 14:00:12 2027 GMT
        Subject: CN=5f895ba9-721b-4036-8f4d-21f51b370b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:87:88:19:2e:bc:4a:ff:11:56:9e:f4:7e:9e:
                    fc:fd:d8:4d:e1:3d:ef:f9:93:06:77:cb:7a:99:c7:
                    46:bc:9c:81:30:99:67:ab:ce:92:72:89:0c:fc:d1:
                    b9:20:52:f8:72:cc:c3:64:87:2d:90:4f:12:ff:db:
                    1f:85:d7:c6:31:e4:bd:bb:f8:83:d7:a7:3b:7d:9c:
                    5c:a5:97:f4:b9:3b:ec:ef:d6:bf:5b:c6:36:97:5f:
                    da:6f:87:e1:08:a3:5a:9b:ab:1e:d5:01:77:87:46:
                    d2:c3:13:a0:ba:d6:ce:1e:ef:f4:53:5c:72:9b:cb:
                    34:70:fe:d8:06:bf:92:76:fb:89:31:c1:1c:31:92:
                    0d:7d:93:dd:72:1f:3f:6a:77:b5:b3:7d:3f:8a:29:
                    78:08:63:91:c5:e1:35:8b:14:e4:61:a9:11:14:7c:
                    a6:67:9a:aa:e9:a7:93:52:e1:36:07:5d:8f:c8:08:
                    eb:dc:43:62:39:ef:2d:c4:c2:7f:22:2a:b9:21:2c:
                    49:c1:8f:03:2e:0c:f7:72:e1:37:98:bb:f0:a4:f3:
                    fe:82:c9:01:1a:da:2a:bb:4b:4b:f9:49:de:ad:9f:
                    ec:07:96:78:c3:d7:d3:33:74:46:0b:90:43:21:f8:
                    3a:fc:85:11:3f:fc:f1:59:6c:64:9a:5b:89:54:ec:
                    1e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B1:7B:39:E0:EE:E4:29:85:C7:38:80:B1:A2:8E:7B:F1:B5:90:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a914a87-d42f-3891-842c-4a60b90e559d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5670::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:de:7e:23:4a:31:c2:6d:fc:a1:5e:ca:ca:ca:af:da:62:05:
         b9:9c:cc:79:22:a8:ba:11:b2:2f:8f:de:e8:0e:91:f5:3e:d3:
         76:3a:5e:01:ba:3d:1f:46:b0:46:4f:9f:97:d2:2c:24:7e:87:
         8f:8e:1d:dc:93:60:3a:22:08:25:d8:25:d3:d6:41:d2:ec:d8:
         eb:7d:69:99:86:2c:56:9c:a0:e0:f0:af:77:77:4c:14:7a:7f:
         bd:88:81:b5:87:c3:1b:79:e9:6b:72:ed:55:c2:2b:60:d6:22:
         81:93:3b:22:e5:be:11:4e:34:6d:d3:77:e1:2d:ac:4b:47:f0:
         cc:97:aa:05:97:a5:8e:87:a4:f9:1e:2c:4e:91:67:57:24:c8:
         a4:8e:45:75:f6:42:38:35:4a:55:3d:d6:59:05:e3:23:34:dd:
         60:f4:2a:95:8a:5a:e6:60:ac:3b:8e:ba:cf:4d:90:9b:a0:44:
         6f:67:2d:5c:5e:c4:a3:6d:ae:8c:bd:a2:8c:31:d9:7a:20:f6:
         5e:ce:2a:57:6b:1b:cb:3d:0e:86:20:5e:4e:a9:d3:00:f0:5b:
         32:ee:da:a6:4a:01:55:1a:33:eb:12:8f:8f:a6:a1:a4:cf:53:
         51:54:4f:90:4e:1b:5a:9c:e1:91:60:a3:eb:a3:4c:46:93:1b:
         7f:4b:58:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:38:59 2026 by rpki-client