Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/74cf7195-ef68-329c-8c2b-4f51ca23517e.roa
File:                     74cf7195-ef68-329c-8c2b-4f51ca23517e.roa (raw, json)
Hash identifier:          tJOq1Ef9WgpwElqFRL6rTsN+Qdo8iM6dUybhVyWNFUU=
Subject key identifier:   9B:01:B4:DF:B9:C7:F3:AF:06:E0:57:17:0A:D3:B2:9D:3A:90:33:DF
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C26B9C433C639045625B00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/74cf7195-ef68-329c-8c2b-4f51ca23517e.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4310::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:6b:9c:43:3c:63:90:45:62:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=1af86698-11b2-416b-a22b-f553c11bb297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:eb:3c:af:da:cf:b6:46:c8:d0:4d:5b:ff:
                    6e:0b:54:22:9d:b2:8f:78:2a:28:74:46:17:e1:99:
                    b4:64:57:f6:2f:f8:d5:eb:cf:7f:a9:e7:e0:aa:9d:
                    0c:9e:80:c1:5f:1a:51:44:66:24:4c:91:c2:d6:57:
                    c4:ed:00:e4:84:6b:25:e7:9e:39:ec:5a:e9:e6:2e:
                    a2:e8:1a:4d:db:fe:10:a3:60:50:4b:ab:8f:61:aa:
                    78:6a:16:9c:bb:86:45:a6:6a:a0:35:a4:4c:1d:49:
                    f8:2d:bb:b1:c7:45:32:85:77:36:bd:81:22:c6:1b:
                    6b:97:55:79:2d:26:3f:0d:98:23:e4:71:78:4b:1f:
                    fd:dd:2e:a1:39:b4:b8:eb:8f:00:74:2f:80:7d:83:
                    a7:d8:94:b1:75:ef:68:db:9f:38:75:54:8d:78:c8:
                    ea:22:5d:b9:ff:21:9e:f9:e3:fc:c5:69:ad:a2:41:
                    b0:0b:fb:45:36:8c:a3:cd:55:08:d7:00:40:1b:d8:
                    a6:c1:b6:8c:cc:13:7f:08:95:6c:f0:1d:e1:ab:73:
                    ec:ef:d0:63:bb:e7:be:1d:61:8a:88:1d:e7:bc:31:
                    6e:09:0b:48:78:2c:c2:f1:d7:13:7a:ca:b0:19:1f:
                    d7:6e:be:0a:3e:c8:92:01:27:7f:72:12:e2:23:c4:
                    dc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:01:B4:DF:B9:C7:F3:AF:06:E0:57:17:0A:D3:B2:9D:3A:90:33:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/74cf7195-ef68-329c-8c2b-4f51ca23517e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4310::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ce:9a:17:f3:7c:38:01:a9:2a:4f:01:c0:43:73:c8:c6:57:
         63:c2:4f:d1:fc:2b:c7:d4:9c:14:4e:0f:68:f6:4e:ac:7d:a7:
         e2:a3:a3:28:b4:d9:7b:49:5b:83:30:29:2d:f0:3d:ba:60:0a:
         b2:aa:d5:3d:d8:8f:d3:e5:fb:5a:ae:d5:33:b0:0d:dd:74:21:
         3c:fa:cf:13:42:49:c0:dd:97:9f:7a:d8:a8:8a:65:7b:79:d1:
         65:eb:d5:b1:a4:74:8a:b9:94:58:82:66:1f:e0:28:52:dc:4e:
         6d:90:ec:27:8a:d7:2c:9a:35:3a:49:67:fb:3c:fb:2c:f4:9c:
         18:02:63:7d:a4:fa:e2:2c:9f:ce:61:c2:ae:41:6b:f0:9a:aa:
         bb:18:43:60:3c:4a:cd:16:3d:50:69:38:75:67:51:9a:4b:da:
         58:ac:b8:1b:ce:fd:69:cb:c6:80:19:1f:14:59:0c:9d:68:c9:
         ae:3b:b5:48:cc:ee:76:0a:aa:31:1d:eb:81:ef:93:43:6a:32:
         d8:2c:cd:bc:74:82:dd:40:a7:34:01:50:a0:2a:e1:dd:d9:d6:
         a8:62:30:d1:f2:9f:00:ec:f7:77:44:de:b3:91:33:ed:99:55:
         07:21:7a:ee:4f:97:c1:1b:fd:f3:94:15:47:7e:fa:43:2d:7c:
         9f:6e:63:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:24:08 2026 by rpki-client