Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af1fb947-e10a-391d-86d4-69d3c8d8c2b9.roa
File:                     af1fb947-e10a-391d-86d4-69d3c8d8c2b9.roa (raw, json)
Hash identifier:          d4IyjiKndRODqt2SaHFus58Ccmt0xMvicg+AZBKFibw=
Subject key identifier:   A0:97:FC:B1:3B:EE:BE:AB:B5:B8:2A:DA:67:07:19:E7:BB:3F:29:20
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584FC5CBD63F2CCA8156815A8120
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af1fb947-e10a-391d-86d4-69d3c8d8c2b9.roa
Signing time:             Sun 08 Nov 2026 14:00:12 +0000
ROA not before:           Sun 08 Nov 2026 14:00:12 +0000
ROA not after:            Sat 06 Feb 2027 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:5380::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c5:cb:d6:3f:2c:ca:81:56:81:5a:81:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov  8 14:00:12 2026 GMT
            Not After : Feb  6 14:00:12 2027 GMT
        Subject: CN=d1f893d4-d6e9-417f-a1ce-7a053e362d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c1:4d:df:9c:62:6e:b1:51:69:05:cb:33:b9:
                    27:ac:ec:c4:a6:fd:4f:73:34:a3:88:71:f8:df:7b:
                    1d:b4:b6:34:4f:b8:8c:7d:d0:75:0b:a2:d6:2e:aa:
                    03:d9:60:19:90:01:1c:ee:46:a1:c3:94:34:cc:16:
                    79:1b:7e:4b:ea:e3:a9:1f:ea:74:0b:1f:30:77:04:
                    ba:62:c6:f5:01:02:b9:1d:a8:1f:e9:b6:be:8f:ef:
                    ce:5d:16:a1:90:0b:37:14:1a:f9:7d:68:ba:ff:1f:
                    5d:ec:97:6b:32:56:86:2d:62:59:c0:f4:6f:b0:f7:
                    db:a5:26:f9:c5:60:05:a7:3d:a1:2d:50:68:84:28:
                    53:bf:98:6b:b1:87:d1:56:ec:36:80:4a:dd:92:ad:
                    4d:10:dd:af:c8:1f:a3:ac:d5:8e:13:59:d6:a4:b8:
                    f0:b1:a6:cb:22:92:f8:a1:59:db:6e:90:40:5e:e3:
                    91:3d:5b:b1:a3:38:b1:96:d2:df:5e:89:ce:a3:4a:
                    66:12:92:96:cb:59:63:c9:fc:29:c9:07:80:f4:0d:
                    0d:28:3d:9b:2f:84:4c:9d:97:ef:92:46:d9:e3:43:
                    a0:5c:f5:44:5f:c6:52:4a:bc:d6:c8:f4:95:9c:78:
                    7a:e5:6e:2d:c3:15:db:c0:a0:fb:46:94:9f:6f:30:
                    e5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:97:FC:B1:3B:EE:BE:AB:B5:B8:2A:DA:67:07:19:E7:BB:3F:29:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af1fb947-e10a-391d-86d4-69d3c8d8c2b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5380::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:51:bb:a6:af:eb:4b:21:cb:07:7c:b1:32:b8:e7:9b:0f:2e:
         6d:46:c2:66:1a:ee:f3:56:4f:b5:b9:90:a4:90:49:d5:20:f7:
         f0:da:5d:8c:73:5c:a4:45:27:6e:35:9d:60:e8:96:fe:9d:7f:
         bb:16:73:6d:a6:28:22:8f:5b:b8:c9:e4:df:43:a8:f8:5d:91:
         e4:e5:1c:fe:af:0e:c5:f4:f8:d0:22:51:b5:f7:17:62:7d:01:
         ca:c7:59:c5:8a:4e:c0:5f:fa:e3:5c:0e:bd:d2:bc:18:42:23:
         e2:43:33:05:32:ae:e9:80:74:aa:ff:92:38:88:5d:ed:f6:38:
         9d:af:66:e3:09:d7:89:70:d9:83:40:c3:4a:df:63:bd:c0:0e:
         f2:cb:36:96:ce:c8:d9:b0:6a:d8:ed:c6:ce:7a:9c:48:48:5d:
         d5:ad:5c:59:ca:e2:49:21:e2:04:fa:27:61:01:21:21:5f:6d:
         d9:46:33:41:fe:a2:d2:0f:8c:46:5d:57:d3:ad:ca:3f:42:c6:
         04:f6:f9:1d:b2:0d:8d:0b:b9:c7:27:a6:67:c8:f8:11:94:04:
         aa:93:c1:1b:cc:c0:80:75:1d:42:66:c7:4a:39:9d:5e:6e:f2:
         49:2d:03:9d:59:cf:4f:6e:24:0b:06:40:54:de:de:1a:6c:18:
         78:6b:18:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 22:33:04 2026 by rpki-client