Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8a463ca3-0ba4-3d91-b9ae-2aaa9fe28d14.roa
File:                     8a463ca3-0ba4-3d91-b9ae-2aaa9fe28d14.roa (raw, json)
Hash identifier:          Lj17rJli3iJQhwSOthwWYBK1yekJ/Gw4O5+B6Vg7iJg=
Subject key identifier:   F3:1D:CF:0C:32:A8:D9:A0:6F:D8:83:1B:62:F4:AB:13:2B:BF:B7:A5
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584FC5CBE65E3637D60B24409400
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8a463ca3-0ba4-3d91-b9ae-2aaa9fe28d14.roa
Signing time:             Sun 08 Nov 2026 14:00:12 +0000
ROA not before:           Sun 08 Nov 2026 14:00:12 +0000
ROA not after:            Sat 06 Feb 2027 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4080::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c5:cb:e6:5e:36:37:d6:0b:24:40:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov  8 14:00:12 2026 GMT
            Not After : Feb  6 14:00:12 2027 GMT
        Subject: CN=ecbeb5ff-4bc7-4b09-aded-229488f0d61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:fa:d6:9d:e0:15:e6:48:1e:24:6b:71:f3:
                    ba:2e:bb:11:c3:ec:3a:a9:d9:80:6b:bd:f7:b5:fd:
                    38:99:6e:44:d5:8b:db:94:0a:50:2b:3c:a9:b0:fd:
                    aa:20:c0:73:08:78:d3:f5:88:b9:8c:2d:c4:2b:3d:
                    91:eb:68:22:cb:e0:ca:e8:72:1a:7b:7f:b5:56:e5:
                    27:0b:5d:d9:56:ac:15:98:95:fb:aa:cd:98:89:e7:
                    29:bf:0a:01:d8:fe:ea:7e:7b:66:73:77:c8:b6:43:
                    c4:e0:92:22:29:40:ba:4a:8b:7e:b8:bb:98:5a:69:
                    e0:fc:18:f0:fa:35:8c:ea:4f:80:1f:27:f6:44:d6:
                    78:5b:8f:94:ab:c4:aa:95:10:17:d0:e8:62:12:16:
                    6a:e9:26:1a:64:09:03:09:90:ec:df:41:35:89:d8:
                    25:19:2e:19:39:44:fd:47:7b:b3:98:05:95:21:99:
                    c3:84:7a:4d:47:50:83:8e:2d:11:45:74:4a:65:c3:
                    5a:bb:ca:e1:1e:60:e6:49:ac:23:a2:24:e3:06:41:
                    dd:8d:f9:c2:11:42:6a:2e:d9:2c:6b:3d:9b:e0:8e:
                    b7:b8:5c:29:e6:0b:e3:78:be:1c:28:48:bb:4c:c0:
                    50:32:ec:43:e7:33:74:93:c2:a9:2c:e4:b7:fb:46:
                    24:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1D:CF:0C:32:A8:D9:A0:6F:D8:83:1B:62:F4:AB:13:2B:BF:B7:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8a463ca3-0ba4-3d91-b9ae-2aaa9fe28d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:df:44:d9:ce:fd:50:7c:57:de:f2:cb:a9:1a:54:71:b4:32:
         b1:e8:44:e6:24:75:63:c1:fc:1f:e1:13:0e:30:7e:42:d4:eb:
         ae:5d:8c:c4:a2:bd:8d:0f:38:f5:60:81:50:6c:24:23:05:34:
         2a:13:fd:ea:e3:55:43:b8:79:95:a2:11:a7:ac:a9:83:10:5a:
         af:55:9e:0c:c8:cf:55:6f:70:b2:86:db:b1:bd:f0:df:09:32:
         21:50:c7:da:37:30:69:f4:31:ce:2e:7d:60:bb:01:df:9a:6d:
         a9:aa:69:92:54:46:60:63:70:a2:4c:fe:cc:fc:93:3f:85:02:
         f7:7a:ce:b7:14:99:8f:23:72:f6:5b:7b:47:bd:0e:79:35:41:
         76:9d:33:1f:8a:05:50:34:8a:9f:ab:7b:00:e6:a6:51:74:e6:
         a5:92:8b:c8:1c:41:ba:02:69:c0:21:b9:0f:d2:09:ca:71:d4:
         de:c9:2b:b5:e2:80:61:ef:dc:43:59:f1:1d:5e:af:cf:2e:57:
         a3:06:34:74:e6:96:ff:fb:a9:e0:c6:43:a3:45:f8:72:dc:9a:
         1d:ac:da:b0:8d:7f:16:6b:8f:0d:4e:a0:f6:19:37:fe:d2:58:
         c5:32:bb:74:2d:04:7e:81:13:39:6e:ff:1d:ff:7f:b6:8e:3e:
         db:be:5f:d8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy+ZeNjfWCyRAlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk
ZWNiZWI1ZmYtNGJjNy00YjA5LWFkZWQtMjI5NDg4ZjBkNjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDH61p3gFeZIHiRrcfO6LrsRw+w6qdmAa733
tf04mW5E1YvblApQKzypsP2qIMBzCHjT9Yi5jC3EKz2R62giy+DK6HIae3+1VuUn
C13ZVqwVmJX7qs2YiecpvwoB2P7qfntmc3fItkPE4JIiKUC6Sot+uLuYWmng/Bjw
+jWM6k+AHyf2RNZ4W4+Uq8SqlRAX0OhiEhZq6SYaZAkDCZDs30E1idglGS4ZOUT9
R3uzmAWVIZnDhHpNR1CDji0RRXRKZcNau8rhHmDmSawjoiTjBkHdjfnCEUJqLtks
az2b4I63uFwp5gvjeL4cKEi7TMBQMuxD5zN0k8KpLOS3+0YkewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPMdzwwyqNmgb9iDG2L0qxMrv7elMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOGE0NjNjYTMtMGJhNC0z
ZDkxLWI5YWUtMmFhYTlmZTI4ZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQECA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACTfRNnO/VB8V97yy6kaVHG0MrHoROYkdWPB/B/hEw4wfkLU665d
jMSivY0POPVggVBsJCMFNCoT/erjVUO4eZWiEaesqYMQWq9VngzIz1VvcLKG27G9
8N8JMiFQx9o3MGn0Mc4ufWC7Ad+abamqaZJURmBjcKJM/sz8kz+FAvd6zrcUmY8j
cvZbe0e9Dnk1QXadMx+KBVA0ip+rewDmplF05qWSi8gcQboCacAhuQ/SCcpx1N7J
K7XigGHv3ENZ8R1er88uV6MGNHTmlv/7qeDGQ6NF+HLcmh2s2rCNfxZrjw1OoPYZ
N/7SWMUyu3QtBH6BEzlu/x3/f7aOPtu+X9g=
-----END CERTIFICATE-----
Generated at Wed Nov 11 01:42:45 2026 by rpki-client