Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa
File:                     4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa (raw, json)
Hash identifier:          0THLBMGT2csMKYu7gZvETMgGYfFEoyqzSxwWIw+LbrQ=
Subject key identifier:   0E:6B:56:AB:81:38:7F:BF:B7:06:F7:1A:F4:B1:01:C2:8B:AF:0C:6F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584FC5CBDA0E6B260EDE09B5CBC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa
Signing time:             Sun 08 Nov 2026 14:00:12 +0000
ROA not before:           Sun 08 Nov 2026 14:00:12 +0000
ROA not after:            Sat 06 Feb 2027 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4890::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c5:cb:da:0e:6b:26:0e:de:09:b5:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov  8 14:00:12 2026 GMT
            Not After : Feb  6 14:00:12 2027 GMT
        Subject: CN=409525b0-873d-4c5b-ae19-dfaec3dd95cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:dc:60:7c:21:55:ee:be:10:8d:b8:c2:5a:
                    bd:f4:4a:e0:bd:23:6a:27:cc:0f:3c:11:04:81:19:
                    90:01:66:29:c8:7c:04:19:29:7c:b3:d5:8f:b2:76:
                    8e:c8:e1:a3:d1:ec:58:0b:d5:a6:44:ca:51:ef:2d:
                    b6:1c:50:52:d3:29:fa:a1:c1:5b:86:9b:d3:9c:71:
                    64:fe:2c:c8:f5:0b:b0:e3:b3:59:26:8c:3f:65:92:
                    29:d8:3f:9e:c6:9d:40:6f:d3:e7:cd:f6:98:d6:66:
                    23:e4:81:e4:ad:13:cb:8d:52:c0:d7:a1:c4:46:b5:
                    f1:ce:7e:58:71:dd:f9:7a:af:4c:53:4c:28:21:7b:
                    2d:dd:a2:9d:41:09:ce:7a:36:9a:a9:df:de:c0:fe:
                    0c:cb:56:7b:93:9c:63:33:7a:23:49:77:dd:82:1a:
                    ee:4e:cd:f4:27:b4:6c:bf:5a:3c:e0:df:3d:b6:88:
                    aa:66:a6:14:b2:1f:97:30:1b:cc:d3:d8:59:cb:c6:
                    a7:46:11:a2:b3:77:ad:1b:80:7a:74:88:ec:ed:05:
                    10:f8:e5:e5:e8:db:32:ce:09:40:55:53:16:a3:c1:
                    8f:18:05:af:20:e5:45:3a:25:f8:05:de:85:69:bb:
                    8b:d6:4b:e7:66:6d:77:fb:03:77:00:62:63:0a:4f:
                    b9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6B:56:AB:81:38:7F:BF:B7:06:F7:1A:F4:B1:01:C2:8B:AF:0C:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fbe919f-0a17-3c51-88e7-e6447b2d4e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4890::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e4:1b:6e:38:89:ba:13:e5:79:38:16:6e:84:1f:be:2e:74:
         81:95:a0:fc:20:ff:78:e0:86:05:75:c8:02:fc:46:fa:0f:87:
         04:19:02:c4:b8:6a:06:8f:3c:46:d5:11:13:c6:dd:28:35:64:
         cf:1d:fc:48:86:44:4e:13:9b:9a:46:eb:ce:5e:6a:45:2e:43:
         52:cc:c2:41:cb:19:de:e8:2f:5a:e2:6c:84:45:8b:21:14:7b:
         1f:b7:98:69:fa:89:10:f4:da:66:04:33:53:86:53:ee:4c:f3:
         65:d3:dd:80:b3:60:53:51:1c:06:97:6c:91:8d:78:a3:8e:69:
         dd:33:d7:5b:4b:d0:fb:4a:1b:43:7b:c5:98:e0:5e:c8:d4:71:
         e2:ad:91:d5:49:2a:a6:cf:ec:fd:40:5a:12:ea:2a:23:be:ad:
         9a:09:ed:14:48:b8:6e:69:1f:56:27:39:ae:42:4b:90:53:d4:
         00:89:d1:cb:3e:77:d3:a4:2a:eb:ad:a0:9b:fc:f9:06:2b:ad:
         97:cf:7d:89:dc:bb:e8:98:f3:df:3d:ce:6a:14:84:60:bc:c9:
         14:99:06:04:29:df:96:6b:c8:68:bd:ca:f0:a0:22:bf:25:01:
         04:f6:56:95:41:29:41:70:49:91:3c:48:32:c4:3d:80:f6:2e:
         df:9e:bf:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy9oOayYO3gm1y8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk
NDA5NTI1YjAtODczZC00YzViLWFlMTktZGZhZWMzZGQ5NWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvErcYHwhVe6+EI24wlq99ErgvSNqJ8wPPBEE
gRmQAWYpyHwEGSl8s9WPsnaOyOGj0exYC9WmRMpR7y22HFBS0yn6ocFbhpvTnHFk
/izI9Quw47NZJow/ZZIp2D+exp1Ab9PnzfaY1mYj5IHkrRPLjVLA16HERrXxzn5Y
cd35eq9MU0woIXst3aKdQQnOejaaqd/ewP4My1Z7k5xjM3ojSXfdghruTs30J7Rs
v1o84N89toiqZqYUsh+XMBvM09hZy8anRhGis3etG4B6dIjs7QUQ+OXl6NsyzglA
VVMWo8GPGAWvIOVFOiX4Bd6FabuL1kvnZm13+wN3AGJjCk+58QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA5rVquBOH+/twb3GvSxAcKLrwxvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNGZiZTkxOWYtMGExNy0z
YzUxLTg4ZTctZTY0NDdiMmQ0ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEiQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAATkG244iboT5Xk4Fm6EH74udIGVoPwg/3jghgV1yAL8RvoPhwQZ
AsS4agaPPEbVERPG3Sg1ZM8d/EiGRE4Tm5pG685eakUuQ1LMwkHLGd7oL1ribIRF
iyEUex+3mGn6iRD02mYEM1OGU+5M82XT3YCzYFNRHAaXbJGNeKOOad0z11tL0PtK
G0N7xZjgXsjUceKtkdVJKqbP7P1AWhLqKiO+rZoJ7RRIuG5pH1YnOa5CS5BT1ACJ
0cs+d9OkKuutoJv8+QYrrZfPfYncu+iY8989zmoUhGC8yRSZBgQp35ZryGi9yvCg
Ir8lAQT2VpVBKUFwSZE8SDLEPYD2Lt+evwU=
-----END CERTIFICATE-----
Generated at Tue Nov 10 22:28:37 2026 by rpki-client