Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/882e417e-523c-30e6-ae36-7182231bcd11.roa
File:                     882e417e-523c-30e6-ae36-7182231bcd11.roa (raw, json)
Hash identifier:          KNtZrpYzPCT+AcvHSM+Y4xp1pPbGUNZ9zN8W8qmDNQk=
Subject key identifier:   D0:02:BB:D4:56:7B:7A:BF:A3:5C:E8:B8:2F:E7:69:85:81:BB:FC:C3
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584FC5CBEC77F87B5AE6B77FF944
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/882e417e-523c-30e6-ae36-7182231bcd11.roa
Signing time:             Sun 08 Nov 2026 14:00:12 +0000
ROA not before:           Sun 08 Nov 2026 14:00:12 +0000
ROA not after:            Sat 06 Feb 2027 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:53e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c5:cb:ec:77:f8:7b:5a:e6:b7:7f:f9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov  8 14:00:12 2026 GMT
            Not After : Feb  6 14:00:12 2027 GMT
        Subject: CN=e5550b09-dbb4-489b-8cf3-7013169d0cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:0b:93:29:37:75:b3:54:64:1b:6b:42:bf:
                    db:c8:88:78:c6:fd:81:71:49:14:13:ff:66:eb:d3:
                    7a:87:20:e9:0a:a1:a9:f7:18:f6:e8:98:ed:fc:cd:
                    b7:ff:26:e8:76:c4:bc:9c:59:15:76:f7:8a:0a:c1:
                    f1:1a:fb:6b:bc:28:18:db:30:10:c1:19:ad:48:ff:
                    3f:7d:2d:34:3d:80:a2:77:83:82:b3:ea:91:d8:75:
                    97:f3:af:4b:93:ce:e6:46:d1:a9:b3:1f:fa:c1:53:
                    f5:27:1a:18:8f:4d:d0:7b:78:bb:b3:7b:29:af:f5:
                    f6:ed:2e:f2:b7:ed:42:d4:94:98:56:f4:a5:4a:91:
                    3d:4d:b9:db:19:85:7b:8a:a7:2d:d2:34:08:b3:65:
                    48:fd:ab:82:18:28:6e:aa:5b:a8:b6:cf:d6:15:fd:
                    bb:0c:74:bc:48:d9:83:cf:8e:8e:12:ed:21:5d:83:
                    20:9e:b6:98:80:da:1c:68:e1:c5:bb:80:24:29:51:
                    5f:05:e5:12:b0:da:46:7d:4c:e8:3f:bb:02:84:31:
                    2e:c7:74:ad:3d:3d:8e:cd:17:e7:83:da:38:c8:61:
                    cc:79:b1:e5:23:d5:f3:6a:c1:32:ae:06:85:c0:40:
                    68:5d:b9:f6:51:c8:86:ce:d1:ed:01:cc:e4:d5:5c:
                    d4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:02:BB:D4:56:7B:7A:BF:A3:5C:E8:B8:2F:E7:69:85:81:BB:FC:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/882e417e-523c-30e6-ae36-7182231bcd11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:53e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:18:c2:1d:61:ba:64:0e:bd:93:14:13:62:cb:c9:e9:cc:35:
         3b:8d:a7:af:59:c7:a1:d0:c6:7d:eb:ef:d8:9d:3e:4e:5c:b1:
         75:15:39:6f:27:a0:95:0a:4f:7a:33:4f:13:da:cc:5e:8a:e1:
         3d:75:6b:84:8e:24:39:c6:49:b5:38:31:87:f4:a7:90:08:c7:
         76:a1:2c:99:3f:07:1c:2d:ba:1b:83:48:b3:55:bd:5b:ea:d9:
         56:d4:33:f5:40:eb:cb:89:0c:dc:3f:f7:5a:8b:fb:b8:24:e8:
         11:9b:ee:c7:f7:69:a9:34:15:1f:ee:f3:e6:65:3e:36:14:20:
         e9:bd:dd:0c:dd:b7:6a:b8:8c:41:98:76:84:a1:85:4c:e2:93:
         45:8e:79:92:ca:49:3e:1a:8c:1e:01:0d:4e:53:dc:d2:09:c8:
         4d:a7:82:d6:ae:d1:ae:33:15:b7:d3:25:f5:b2:43:61:6c:15:
         53:d4:0a:c7:44:cd:cb:ca:ce:0f:1d:5c:1d:82:a4:6d:76:56:
         7b:c5:8e:a7:58:db:27:0a:af:d3:a0:e6:5f:d0:ec:d3:3d:84:
         05:c7:c6:9e:69:c5:ee:62:f1:cc:a5:3d:ec:94:65:3c:8d:a8:
         99:08:3d:ce:98:ed:4e:5a:e2:6d:b2:8c:77:f0:96:4d:36:e8:
         76:3d:1a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:42:03 2026 by rpki-client