Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4e02c13b-fb1b-3a83-ba2b-b9f6072ff382.roa
File:                     4e02c13b-fb1b-3a83-ba2b-b9f6072ff382.roa (raw, json)
Hash identifier:          VXFcH1ec04Bm7lU9kOveBbcl0e1BbHErowLosb5Ga0U=
Subject key identifier:   5C:1C:AE:6B:39:17:E1:76:DF:47:CE:B0:A1:BA:11:0D:44:58:F2:37
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584FC5CBE536C662CD282C6E3D00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4e02c13b-fb1b-3a83-ba2b-b9f6072ff382.roa
Signing time:             Sun 08 Nov 2026 14:00:12 +0000
ROA not before:           Sun 08 Nov 2026 14:00:12 +0000
ROA not after:            Sat 06 Feb 2027 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:52d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c5:cb:e5:36:c6:62:cd:28:2c:6e:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov  8 14:00:12 2026 GMT
            Not After : Feb  6 14:00:12 2027 GMT
        Subject: CN=8fad7ac5-599a-4c00-a3ba-677393533ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3e:ce:35:bd:f9:87:9b:ff:4b:b5:d1:0d:b4:
                    4a:48:59:03:91:18:21:68:18:24:97:eb:f1:d2:65:
                    66:11:ab:c8:50:c4:8f:0d:5b:6b:23:d9:84:41:f7:
                    2e:c2:65:81:dd:9d:69:88:f0:30:2c:86:80:66:b4:
                    25:14:df:fe:90:ac:e1:8d:1d:26:52:50:5a:95:11:
                    db:34:31:13:76:fe:b0:75:61:79:64:48:9a:1f:d5:
                    ee:4b:9f:04:a0:0c:6b:9e:b3:1e:57:82:06:3e:b9:
                    d8:81:31:13:bf:ae:61:c6:42:ce:18:48:df:43:d5:
                    6c:45:e9:1a:bc:3d:98:76:89:6b:d7:cc:99:7e:0b:
                    33:a9:72:bb:d6:0f:80:6f:27:ac:e2:93:eb:94:e1:
                    8a:7b:9d:2d:04:b3:97:7c:c7:d6:ee:a8:69:e7:4c:
                    0f:66:1b:0b:90:54:79:f6:55:9f:d7:88:79:81:7c:
                    b5:8b:cd:18:8a:fd:3f:d7:fc:1c:3d:d5:85:91:f5:
                    76:e2:ce:b7:27:f5:c8:cc:96:a9:8a:4e:ae:45:2b:
                    7f:f0:9e:c0:23:0f:48:86:b1:fc:4f:76:9e:8f:7f:
                    13:2b:bc:96:4b:d1:b6:41:07:08:0c:63:41:3a:bb:
                    70:5f:b3:90:e4:ab:b8:83:7e:d5:93:3b:e6:83:97:
                    56:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1C:AE:6B:39:17:E1:76:DF:47:CE:B0:A1:BA:11:0D:44:58:F2:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4e02c13b-fb1b-3a83-ba2b-b9f6072ff382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:52d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:c3:bb:e7:50:db:14:f2:90:d0:b7:ce:8e:65:62:79:71:83:
         6b:46:11:20:5a:ac:d6:92:03:4b:1b:42:11:ee:9b:df:a8:34:
         4c:46:58:ef:e0:14:26:18:1e:0f:ee:d4:53:0c:f0:60:b3:52:
         f5:24:7c:e6:2b:a9:43:85:58:62:c3:9e:03:b7:34:97:2a:53:
         55:62:28:1b:64:fd:f9:d0:25:10:8b:c2:05:0a:70:06:d7:cf:
         28:66:68:02:05:b3:8d:74:d0:d5:d3:60:e3:a8:0d:0a:1c:74:
         31:87:1a:4d:57:0b:66:60:b6:c8:32:70:44:80:99:95:67:6f:
         03:07:80:6e:81:b6:a3:13:4b:2e:06:50:4c:1f:c1:21:71:f4:
         f2:38:8f:f1:39:ea:83:48:d8:70:3c:c6:5a:7b:85:12:93:50:
         8b:65:e3:0b:8f:48:39:85:76:ff:a3:ea:f1:f5:a2:f3:55:02:
         0b:f0:47:da:13:3b:d3:f6:c7:fe:74:32:86:27:47:84:29:47:
         df:ad:5c:cb:8c:9c:51:01:46:47:7d:3f:c4:54:33:d5:f4:16:
         29:a6:25:f6:79:d4:26:ad:f8:ee:e3:21:2e:48:ff:59:b2:8f:
         9d:2b:c8:56:ee:a3:a1:13:42:cd:84:0c:df:5e:28:94:96:ff:
         16:67:c7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 22:51:39 2026 by rpki-client