Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30e3b6b2-8b9c-3b13-bda4-e13a1846bcaa.roa
File:                     30e3b6b2-8b9c-3b13-bda4-e13a1846bcaa.roa (raw, json)
Hash identifier:          tdVAunlEKqQBiIh12RT5zcule3FzSMXCkQSW48xzNXs=
Subject key identifier:   E2:41:DA:2B:FF:F2:18:E4:E9:1B:90:37:51:55:7D:0C:A9:F2:9E:C9
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584D703FEB4FE4C65A3C646A1F60
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30e3b6b2-8b9c-3b13-bda4-e13a1846bcaa.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     54113
IP address blocks:        131.125.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:eb:4f:e4:c6:5a:3c:64:6a:1f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=3a4bc266-ead5-4470-af03-bdeb99cc6482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d3:23:ab:ef:94:43:69:88:be:5a:81:23:d5:
                    79:cd:56:a2:cb:92:09:d7:86:81:cf:52:61:75:2f:
                    09:a6:4b:55:6e:62:54:21:f2:1a:12:64:c6:b7:07:
                    b1:b1:17:94:8e:97:4e:b2:bd:5e:63:20:c2:79:cb:
                    7e:7d:ea:46:ab:62:4d:05:e6:ec:d8:24:ae:1a:1c:
                    77:79:68:ca:dc:58:6f:6f:b5:ae:7d:a1:72:0d:c7:
                    7d:9c:0c:c3:c6:f8:bc:cf:8e:ca:41:26:7a:7a:1e:
                    df:36:be:9d:ce:1c:9c:71:2a:ed:c0:b4:d5:57:81:
                    94:71:ad:15:c8:e9:08:5e:55:2d:27:b9:d6:00:ff:
                    55:95:c7:c4:9e:f2:b9:81:e8:44:51:94:e0:ca:85:
                    25:d0:b7:7c:76:8e:24:c2:2e:39:9f:b6:55:4d:c1:
                    e1:6b:41:9d:f8:f9:05:f7:e2:4d:d2:b2:7b:ff:15:
                    96:af:ec:17:25:4b:88:c1:22:0c:a6:4d:61:0d:98:
                    69:bb:30:63:38:28:ad:32:12:01:e6:4a:fd:8e:1d:
                    77:d1:cf:55:c7:1a:22:d0:de:2a:53:7c:05:10:e6:
                    73:61:9d:bd:2a:d0:5c:f7:46:34:75:02:82:31:bf:
                    95:6b:f1:3a:d9:b4:cc:00:02:ab:ae:3b:b3:03:c9:
                    76:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:41:DA:2B:FF:F2:18:E4:E9:1B:90:37:51:55:7D:0C:A9:F2:9E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30e3b6b2-8b9c-3b13-bda4-e13a1846bcaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:dc:e1:f0:90:8d:0a:a2:a8:b9:31:42:1c:09:b0:5f:6d:cf:
         86:b5:25:3a:37:ad:8b:9c:ef:a7:4e:75:8d:c4:53:25:4f:d9:
         71:67:b0:e3:79:2b:1b:50:84:37:01:d7:01:cd:61:17:7f:69:
         7b:4f:26:54:5a:42:51:4a:7f:22:87:83:97:37:79:b5:ad:94:
         2c:44:c6:5e:76:71:ff:1a:59:b5:61:76:c5:ac:b7:9d:3a:c0:
         9b:ec:f6:72:8e:b1:d3:22:a3:a0:79:b0:47:0b:d3:a8:50:23:
         df:3c:16:25:ca:62:8f:77:b0:bc:db:e3:f2:ee:16:39:b0:08:
         55:7b:66:90:6e:9c:0d:34:33:bd:11:f6:dc:86:f0:3d:15:b2:
         b9:69:bb:2d:5e:a5:e3:e7:99:e1:d0:ac:36:00:dd:3c:f7:b6:
         18:51:8f:68:44:88:a6:cf:d3:03:16:e1:e5:ee:62:be:06:5b:
         cb:48:72:90:00:a6:0e:94:34:35:72:dd:0f:4b:fd:ef:94:c4:
         28:5a:b2:7b:77:dd:cb:90:a5:fd:4f:d3:9a:e4:4c:85:9f:d3:
         ad:c8:c4:22:a0:44:72:a9:cf:d5:45:28:b8:20:4a:4e:f3:72:
         31:f4:89:54:28:f2:f2:1d:7a:36:05:e5:72:95:bb:6e:32:ec:
         0e:e6:d8:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+tP5MZaPGRqH2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
M2E0YmMyNjYtZWFkNS00NDcwLWFmMDMtYmRlYjk5Y2M2NDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdMjq++UQ2mIvlqBI9V5zVaiy5IJ14aBz1Jh
dS8JpktVbmJUIfIaEmTGtwexsReUjpdOsr1eYyDCect+fepGq2JNBebs2CSuGhx3
eWjK3Fhvb7WufaFyDcd9nAzDxvi8z47KQSZ6eh7fNr6dzhyccSrtwLTVV4GUca0V
yOkIXlUtJ7nWAP9VlcfEnvK5gehEUZTgyoUl0Ld8do4kwi45n7ZVTcHha0Gd+PkF
9+JN0rJ7/xWWr+wXJUuIwSIMpk1hDZhpuzBjOCitMhIB5kr9jh130c9Vxxoi0N4q
U3wFEOZzYZ29KtBc90Y0dQKCMb+Va/E62bTMAAKrrjuzA8l2gQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOJB2iv/8hjk6RuQN1FVfQyp8p7JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzBlM2I2YjItOGI5Yy0z
YjEzLWJkYTQtZTEzYTE4NDZiY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg316MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHnc4fCQjQqiqLkxQhwJsF9tz4a1JTo3rYuc76dOdY3EUyVP2XFnsON5
KxtQhDcB1wHNYRd/aXtPJlRaQlFKfyKHg5c3ebWtlCxExl52cf8aWbVhdsWst506
wJvs9nKOsdMio6B5sEcL06hQI988FiXKYo93sLzb4/LuFjmwCFV7ZpBunA00M70R
9tyG8D0Vsrlpuy1epePnmeHQrDYA3Tz3thhRj2hEiKbP0wMW4eXuYr4GW8tIcpAA
pg6UNDVy3Q9L/e+UxChasnt33cuQpf1P05rkTIWf063IxCKgRHKpz9VFKLggSk7z
cjH0iVQo8vIdejYF5XKVu24y7A7m2NM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:37 2026 by rpki-client