Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad9b4c98-b9fd-34d2-a752-a1b9ecd5305f.roa
File:                     ad9b4c98-b9fd-34d2-a752-a1b9ecd5305f.roa (raw, json)
Hash identifier:          ybIAK+eSTwI2jVcWrfXws5j3rEJMm38/poDtVbw6dKI=
Subject key identifier:   25:88:BC:DD:95:DF:67:C7:88:7D:42:CF:0E:0F:B0:90:C9:9B:82:C2
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584FC5CBEB710FA49A6FAEFD9420
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad9b4c98-b9fd-34d2-a752-a1b9ecd5305f.roa
Signing time:             Sun 08 Nov 2026 14:00:12 +0000
ROA not before:           Sun 08 Nov 2026 14:00:12 +0000
ROA not after:            Sat 06 Feb 2027 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4270::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c5:cb:eb:71:0f:a4:9a:6f:ae:fd:94:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov  8 14:00:12 2026 GMT
            Not After : Feb  6 14:00:12 2027 GMT
        Subject: CN=19709604-fb3e-452d-abf5-bf08bef3e95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:5c:63:9e:57:e4:c5:b6:da:2e:90:b2:4c:
                    41:4c:09:20:e0:25:0b:1a:94:3a:e0:65:03:7f:45:
                    1a:7f:56:e2:36:ac:1e:8f:37:0a:df:f4:68:0e:88:
                    b2:11:30:a0:c6:15:b3:40:37:e1:51:a5:94:d7:f2:
                    06:b2:36:3b:4d:45:b5:b2:73:1c:42:b7:6f:00:f2:
                    b9:28:8d:19:ff:49:5f:c7:8c:b0:96:54:f9:03:22:
                    1c:8d:66:b4:07:a4:10:72:dc:8b:d1:80:c1:73:d0:
                    cd:14:3f:4d:10:64:8e:14:8c:2a:5e:cf:bf:ee:9a:
                    63:92:e1:21:d2:56:49:3f:02:28:86:83:2f:4f:01:
                    83:df:00:b3:f6:02:ee:68:30:74:d9:d7:3a:bb:3e:
                    d4:ba:00:43:c8:18:36:d5:36:6c:67:8c:5e:43:b1:
                    6c:00:ca:d3:16:6b:de:a7:6a:4f:d1:c6:13:b1:53:
                    5a:d4:26:ca:7a:f5:96:f4:e1:aa:c6:80:c3:ce:68:
                    3c:ed:15:14:57:c8:48:db:6a:17:04:83:fe:2c:55:
                    6e:ee:bf:33:64:12:13:b9:57:7c:4e:04:6e:83:ce:
                    b9:f1:53:4f:a1:70:35:ba:31:98:a6:77:4f:93:c7:
                    85:2b:d0:b8:9b:1e:81:62:de:0e:cf:e4:bc:e3:8a:
                    fd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:88:BC:DD:95:DF:67:C7:88:7D:42:CF:0E:0F:B0:90:C9:9B:82:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad9b4c98-b9fd-34d2-a752-a1b9ecd5305f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4270::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:9b:f8:85:ae:51:2e:d4:36:85:70:8c:73:d0:b1:f6:c6:59:
         28:68:f8:74:b9:c4:a2:2d:3d:96:86:ee:c0:5a:72:11:dc:ca:
         a8:5f:44:36:f8:a3:22:70:2d:ff:59:2f:e3:e5:c5:3d:8d:6e:
         d5:45:a6:23:1b:5b:1d:0a:ab:69:bc:1e:61:b7:49:7a:29:1a:
         5c:29:7e:04:a6:22:0f:9e:9f:e5:20:0a:3b:41:1f:47:a4:b6:
         62:d9:a3:e9:ab:01:fe:6d:61:07:56:cc:a1:37:eb:2a:3c:ff:
         50:15:f0:92:c8:45:08:ff:df:9d:99:5d:ac:09:01:49:cb:f0:
         9f:eb:93:09:f8:5f:17:44:e1:5c:3e:40:76:fb:ca:ca:2f:45:
         fe:61:d1:7e:07:2c:26:20:ad:26:d9:5c:93:00:0b:bc:f5:96:
         28:68:4a:68:d3:87:5f:08:8d:8a:83:66:be:69:c4:e1:cb:7a:
         4a:d1:0e:c5:9c:d6:0d:57:60:c8:15:c3:75:69:8f:df:fe:f4:
         b0:f9:58:88:65:6a:fa:f4:cc:85:14:63:7c:1b:42:15:42:1e:
         34:6b:fa:7e:14:18:75:62:9b:05:6a:0a:56:44:79:2b:1b:13:
         be:90:90:b8:bf:a3:ef:48:a9:75:52:f5:10:12:ce:27:52:df:
         aa:c0:ba:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:28:02 2026 by rpki-client