Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9c4ed43f-36c3-34e6-aa65-91510c82cdbf.roa
File:                     9c4ed43f-36c3-34e6-aa65-91510c82cdbf.roa (raw, json)
Hash identifier:          XyIWczzw+Zr6E1eayKgXyozIPeDeEcHU1Y8UpLkPhD8=
Subject key identifier:   E5:DA:68:BA:89:A3:7C:63:55:6B:3A:BD:71:3F:49:BA:0B:C0:BC:27
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584FC5CBEA80F29A42B4261D4280
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9c4ed43f-36c3-34e6-aa65-91510c82cdbf.roa
Signing time:             Sun 08 Nov 2026 14:00:12 +0000
ROA not before:           Sun 08 Nov 2026 14:00:12 +0000
ROA not after:            Sat 06 Feb 2027 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:5da0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c5:cb:ea:80:f2:9a:42:b4:26:1d:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov  8 14:00:12 2026 GMT
            Not After : Feb  6 14:00:12 2027 GMT
        Subject: CN=e8de1b87-b007-4fc8-865c-e9a00912ff54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:7d:ba:24:0e:81:03:c9:bb:08:b2:35:cb:
                    8d:62:d3:c1:51:9a:98:2a:1e:32:30:40:9c:a6:bf:
                    57:90:6b:6d:86:43:bf:9f:64:5f:52:f9:a0:db:d4:
                    ef:fd:fd:57:a2:b8:91:e6:1c:c2:ac:ea:2d:11:f5:
                    6c:4c:fa:f0:ad:37:02:06:6e:64:cc:92:b5:91:de:
                    cc:be:a3:ea:41:55:eb:e3:b9:64:23:ca:6f:c0:8b:
                    e3:21:ab:35:2c:52:b9:37:42:e8:fe:11:a9:12:d9:
                    98:ec:43:72:ce:6e:36:eb:34:d4:6e:2d:f9:5a:96:
                    74:9b:b7:32:fd:04:28:05:3f:6a:f5:eb:8b:54:58:
                    be:85:dc:3e:34:82:9b:8e:9f:18:3a:25:d5:ad:9c:
                    b8:4e:ae:32:c3:8b:f9:27:36:56:b1:ed:c6:40:4b:
                    dd:68:f2:24:99:3c:2f:a0:79:b7:1f:49:6f:1e:7e:
                    c9:a7:c1:70:df:17:13:b7:95:28:6c:fb:2f:0c:c0:
                    ba:e9:69:c2:20:94:46:5a:b5:fa:d2:56:fd:4f:2b:
                    fa:b1:12:50:4b:ca:f0:e9:9a:2d:74:53:41:af:02:
                    5a:62:21:57:41:b4:f4:24:ae:a8:27:5a:1c:b5:a8:
                    5b:7e:7a:4a:6c:dd:02:fb:79:3a:4a:bb:0f:db:9d:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DA:68:BA:89:A3:7C:63:55:6B:3A:BD:71:3F:49:BA:0B:C0:BC:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9c4ed43f-36c3-34e6-aa65-91510c82cdbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5da0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:01:8e:c4:26:75:d7:bf:d7:ca:43:08:56:ca:e6:87:9a:2f:
         c8:05:28:60:9f:e8:c5:ed:16:32:67:73:e9:39:99:d0:5b:ae:
         a9:a2:93:84:f6:40:26:61:b5:10:16:88:b9:0c:e0:f6:94:64:
         f6:d8:d2:ad:90:9c:45:a0:e5:ad:84:67:35:7d:3e:a9:01:a8:
         66:3f:fd:f9:33:c5:09:0f:1f:e0:ef:99:48:69:24:ad:aa:d9:
         84:e3:37:e7:5d:6a:26:bc:34:2a:82:ee:0e:80:ee:a0:22:94:
         f7:ec:01:15:dc:a0:ac:27:1b:34:b1:7e:f8:bc:7d:2d:f4:f9:
         a0:40:60:9d:b8:0c:06:dc:a7:dd:b2:6d:b4:77:0a:0d:20:84:
         33:56:13:97:56:52:c4:5a:f5:ba:7d:04:c8:a5:92:1e:1c:83:
         35:c4:0b:3d:e8:91:be:b1:9e:8a:79:81:9a:5c:a8:f3:6e:c6:
         cd:88:bb:ac:41:02:73:b5:c6:87:bd:9d:7f:70:18:d9:6b:6f:
         2d:b1:84:be:fc:93:45:86:69:5d:6e:8a:ed:73:07:92:09:da:
         39:93:b4:a7:a1:96:e5:32:24:20:41:e5:69:f9:61:67:c6:7b:
         4a:3c:cf:30:51:93:95:d1:54:0f:de:04:87:cb:65:fb:6e:b5:
         9d:c3:eb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:33:44 2026 by rpki-client