Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa94bfa1-f6cd-39dd-8e11-e77b4b5b81d1.roa
File:                     aa94bfa1-f6cd-39dd-8e11-e77b4b5b81d1.roa (raw, json)
Hash identifier:          H1QGvOaUvIKdt3fO5dcJ/cIt4wJlZrFGbcNKTbhCVTI=
Subject key identifier:   22:0E:9E:26:BC:A1:6F:84:E9:27:3F:48:E5:E4:E2:C9:7E:DF:2A:F8
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584FC5CBE744938D79866A979120
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa94bfa1-f6cd-39dd-8e11-e77b4b5b81d1.roa
Signing time:             Sun 08 Nov 2026 14:00:12 +0000
ROA not before:           Sun 08 Nov 2026 14:00:12 +0000
ROA not after:            Sat 06 Feb 2027 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4510::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c5:cb:e7:44:93:8d:79:86:6a:97:91:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov  8 14:00:12 2026 GMT
            Not After : Feb  6 14:00:12 2027 GMT
        Subject: CN=698fff35-dee2-4519-b973-9411fc429a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:be:f3:1b:17:5e:f7:ea:0c:c4:29:75:43:
                    53:8a:64:cf:23:d8:75:4d:d7:51:af:be:da:31:49:
                    59:16:57:7f:04:80:b0:90:88:d4:70:0d:6d:7e:7b:
                    c4:ee:6c:81:1e:4a:80:44:bc:8e:7f:2c:2b:d1:40:
                    72:30:41:82:ff:db:19:b2:fb:9a:ba:55:f5:0e:5b:
                    3d:86:7c:e1:2b:0b:c7:d5:b3:4c:f7:7a:25:a3:2c:
                    ba:94:7d:ab:a5:9a:c5:10:f2:c8:ec:94:71:c9:40:
                    39:f7:c7:3a:49:d8:5d:53:b9:bc:df:5d:b1:96:cf:
                    f9:4f:32:dc:ac:52:2f:b0:43:59:d7:a3:af:e1:6f:
                    57:f1:39:15:b3:bb:53:15:bb:94:a6:3d:7d:b8:0b:
                    52:52:f3:e7:20:2a:8b:e5:76:e7:b7:d4:4a:ad:fd:
                    ed:99:09:58:ee:3c:7b:cd:5d:c2:7b:aa:a3:eb:ff:
                    86:cc:e0:6e:de:51:e1:a1:20:45:ab:a9:88:a0:d9:
                    d9:1b:6d:99:73:b8:8b:6f:84:4f:18:2f:f6:b1:ab:
                    26:ac:6e:6b:2b:a3:9a:72:da:f6:9b:2f:86:7c:f5:
                    fb:97:19:45:a4:44:9c:9a:1a:38:8e:37:12:3f:75:
                    de:1a:75:31:b1:5f:81:21:93:e4:17:6b:d7:ab:e2:
                    b5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0E:9E:26:BC:A1:6F:84:E9:27:3F:48:E5:E4:E2:C9:7E:DF:2A:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa94bfa1-f6cd-39dd-8e11-e77b4b5b81d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4510::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c4:2e:7a:57:aa:e8:fa:42:a4:35:e9:ea:0e:43:cc:63:b1:
         07:37:a4:89:c8:b7:af:aa:d0:8e:c2:c2:23:03:6b:db:9a:e7:
         9e:58:a5:6a:7d:99:8c:6a:64:f5:51:dd:2e:fc:8f:5a:5f:32:
         32:11:55:0b:06:4e:8a:23:c2:2f:ce:5b:9d:63:79:e5:da:8c:
         b1:d8:28:27:b6:b0:2a:9e:58:1a:fd:63:37:46:a7:61:03:3d:
         48:b6:b2:f0:99:e9:87:c7:e2:f0:4b:6b:63:ad:c0:49:28:5a:
         c3:7e:48:95:94:f5:71:c7:1b:e8:73:99:f4:9b:5a:90:fd:56:
         e7:11:35:a6:5b:c4:ce:5e:50:51:dc:71:f6:6c:4a:10:82:09:
         89:ae:e7:a9:60:ed:79:cc:16:52:ea:0f:76:33:97:66:64:93:
         e0:6c:e0:73:4d:3c:d7:10:08:e0:a8:de:86:da:f6:4a:2e:44:
         a5:5e:24:55:61:e8:12:43:12:be:a4:2b:40:63:a7:9e:2f:63:
         e5:90:f7:85:a3:01:0b:41:18:2e:66:30:b9:5a:68:1b:1b:d3:
         cf:fc:e9:12:b0:92:58:2e:0e:19:6e:4c:ad:c4:e6:2c:cd:57:
         d6:92:20:c0:c9:18:34:be:fc:fe:6a:37:cf:b3:0c:84:17:f8:
         2d:e6:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 22:47:46 2026 by rpki-client