Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/238e2630-7258-3069-bdcf-1765282bf379.roa
File:                     238e2630-7258-3069-bdcf-1765282bf379.roa (raw, json)
Hash identifier:          obhsCaCfYGGFrdAVb2l6HslF5aL3GMmBa7MbklbQLk0=
Subject key identifier:   1A:53:B1:32:D2:6E:44:26:72:AF:97:B7:74:B3:0A:EE:0E:46:A1:E2
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C271806474D1B972003180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/238e2630-7258-3069-bdcf-1765282bf379.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4f30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:71:80:64:74:d1:b9:72:00:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=0eaeb8a2-2e92-45af-b688-1412f9c1f73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:79:3e:bd:bc:d4:f5:43:25:9b:7f:b2:9d:03:
                    d5:b0:99:46:a3:13:e1:28:10:6b:f6:d6:9c:17:88:
                    02:20:05:7d:76:d4:6a:73:68:dc:7b:0d:3e:d0:89:
                    a5:6e:a8:54:27:c5:0f:97:17:81:80:45:78:83:6c:
                    b9:a7:df:23:21:0e:b4:61:bf:d5:b7:bc:09:0a:20:
                    b9:53:62:f6:24:ff:63:90:4a:8a:05:23:95:14:57:
                    8b:fc:b6:c8:68:86:50:ca:0c:cb:26:05:8e:67:6c:
                    b3:7f:87:7a:e9:8c:55:7e:ee:be:8f:96:4e:e3:ee:
                    ff:b6:4f:95:94:ac:8e:ff:a3:94:0d:92:2a:88:44:
                    d5:07:9e:42:f8:6b:e4:7b:fb:a5:5e:89:ee:d6:dc:
                    46:6f:99:e9:6c:7b:cc:d0:73:50:b0:c9:64:cb:46:
                    69:4e:35:08:26:82:f8:98:9e:4b:7e:fe:f9:15:c0:
                    0f:c7:ba:5e:60:78:42:c4:25:ac:4b:79:10:12:24:
                    6d:f8:a2:68:dd:ba:39:41:79:6b:54:0d:3a:3b:f0:
                    77:0e:c5:cb:9c:7f:34:a0:dd:d6:50:cb:e5:f5:fa:
                    31:3b:bf:87:cd:08:a1:1c:00:36:a3:b4:63:4d:29:
                    a2:ff:1d:10:07:97:76:ed:63:6e:b1:6d:a7:c5:a3:
                    83:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:53:B1:32:D2:6E:44:26:72:AF:97:B7:74:B3:0A:EE:0E:46:A1:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/238e2630-7258-3069-bdcf-1765282bf379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4f30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:1b:2c:44:43:8c:5c:ac:8b:c4:39:2e:f0:d4:68:3d:40:18:
         ef:a8:bd:4a:ce:c9:54:6c:fc:cd:b7:c7:14:e4:c1:64:4b:c5:
         14:21:75:01:64:c0:76:8b:df:dd:e4:5d:4e:85:2f:25:a9:30:
         40:68:09:40:01:82:83:fe:18:75:e8:74:23:a2:d9:ed:6a:55:
         a7:db:db:62:60:73:d5:5f:ca:41:09:26:4d:d2:70:18:a3:92:
         88:3e:4a:c4:e3:19:a1:78:fd:7d:85:58:f7:b8:5d:e8:e9:8a:
         5a:cb:69:d7:e9:b7:5f:64:51:e7:af:07:8d:0a:4e:94:da:2f:
         ff:3c:7a:15:2f:51:65:bd:dc:9d:01:43:88:0a:a9:83:c4:f6:
         61:ef:4d:7a:a0:c3:91:f4:85:91:6e:b8:9b:46:2e:95:ce:bc:
         8f:8c:95:06:82:4c:0c:85:f2:82:9f:3e:f7:2b:38:39:63:a6:
         28:9a:e7:8f:9c:cd:8a:14:13:18:0b:bc:38:2c:1e:7b:fa:f0:
         c1:54:35:d5:7d:43:45:52:98:e3:25:02:6c:7c:7d:27:b5:9b:
         4b:13:50:d1:2d:da:13:da:56:35:8c:52:81:53:16:af:09:d4:
         3f:e2:1d:a6:f9:9a:82:94:60:77:4a:0b:52:bc:ff:88:33:f5:
         a1:aa:63:43
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwnGAZHTRuXIAMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk
MGVhZWI4YTItMmU5Mi00NWFmLWI2ODgtMTQxMmY5YzFmNzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nk+vbzU9UMlm3+ynQPVsJlGoxPhKBBr9tac
F4gCIAV9dtRqc2jcew0+0ImlbqhUJ8UPlxeBgEV4g2y5p98jIQ60Yb/Vt7wJCiC5
U2L2JP9jkEqKBSOVFFeL/LbIaIZQygzLJgWOZ2yzf4d66YxVfu6+j5ZO4+7/tk+V
lKyO/6OUDZIqiETVB55C+Gvke/ulXonu1txGb5npbHvM0HNQsMlky0ZpTjUIJoL4
mJ5Lfv75FcAPx7peYHhCxCWsS3kQEiRt+KJo3bo5QXlrVA06O/B3DsXLnH80oN3W
UMvl9foxO7+HzQihHAA2o7RjTSmi/x0QB5d27WNusW2nxaODcwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBpTsTLSbkQmcq+Xt3SzCu4ORqHiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjM4ZTI2MzAtNzI1OC0z
MDY5LWJkY2YtMTc2NTI4MmJmMzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQE8w
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAobLERDjFysi8Q5LvDUaD1AGO+ovUrOyVRs/M23xxTkwWRLxRQh
dQFkwHaL393kXU6FLyWpMEBoCUABgoP+GHXodCOi2e1qVafb22Jgc9VfykEJJk3S
cBijkog+SsTjGaF4/X2FWPe4XejpilrLadfpt19kUeevB40KTpTaL/88ehUvUWW9
3J0BQ4gKqYPE9mHvTXqgw5H0hZFuuJtGLpXOvI+MlQaCTAyF8oKfPvcrODljpiia
54+czYoUExgLvDgsHnv68MFUNdV9Q0VSmOMlAmx8fSe1m0sTUNEt2hPaVjWMUoFT
Fq8J1D/iHab5moKUYHdKC1K8/4gz9aGqY0M=
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:08:47 2026 by rpki-client