Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/340cd8f4-08a6-38c3-8f36-276f75a9fdd5.roa
File:                     340cd8f4-08a6-38c3-8f36-276f75a9fdd5.roa (raw, json)
Hash identifier:          J/L8Pk6svu0ZJY3/EPVYzh9c0iXuuXCZFrQYXcgrP0o=
Subject key identifier:   92:55:C0:0B:39:77:71:D9:57:AA:ED:01:74:E6:0A:17:CC:A2:48:9B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584D703FEA06D8CF01C61E1E8BC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/340cd8f4-08a6-38c3-8f36-276f75a9fdd5.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     54113
IP address blocks:        131.125.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:ea:06:d8:cf:01:c6:1e:1e:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=395f07a1-9589-4234-8d93-38724c7fcc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:14:3d:d0:e3:ee:d5:f6:39:6a:3a:ee:0a:f2:
                    ba:34:46:67:24:66:54:b9:f8:e4:fa:62:99:ac:5e:
                    31:9f:f2:dc:df:a8:dd:bd:f3:f3:2a:6f:43:9e:de:
                    5f:1c:6a:a1:3c:b8:ed:48:6d:4e:b5:30:d5:98:a4:
                    b9:61:d2:b7:a3:47:5f:08:a7:e8:28:9e:8e:a4:11:
                    7b:fe:11:04:d8:30:3e:64:d1:7e:e3:eb:ff:f8:55:
                    90:b9:38:35:4e:d0:e4:65:2f:3e:1d:8c:2b:cf:9f:
                    c0:b9:0d:bb:7b:2f:5c:bd:41:83:9f:1d:b3:aa:29:
                    45:21:ba:64:11:a7:52:d9:8e:ca:b9:17:23:45:dd:
                    08:19:5e:30:0f:d7:cf:ea:ea:e6:1b:44:fb:89:bc:
                    54:76:d3:98:e4:af:cf:77:17:65:33:34:b9:b0:14:
                    b9:df:d3:3f:a5:d6:90:7c:52:76:b1:5b:91:31:3e:
                    d6:90:3e:0f:de:46:88:e9:aa:d5:37:28:14:14:2f:
                    9f:85:04:7e:8c:2a:15:d3:6a:67:d3:48:71:ff:07:
                    9a:45:7e:55:26:c1:e7:5b:cc:2e:80:35:5c:82:b5:
                    83:b3:0e:ab:a5:8c:6b:1a:03:6d:08:4b:ce:77:ca:
                    ea:d9:ce:f8:0b:5e:cc:71:72:94:fe:0f:7b:ec:f4:
                    18:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:55:C0:0B:39:77:71:D9:57:AA:ED:01:74:E6:0A:17:CC:A2:48:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/340cd8f4-08a6-38c3-8f36-276f75a9fdd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f0:ea:2c:27:d8:50:01:59:9b:ad:96:35:cb:34:9d:5b:03:
         4b:c0:8f:30:d7:91:18:7f:52:81:ff:91:6b:ad:a2:e7:7f:81:
         6e:0f:63:3f:03:de:d3:2d:4c:02:ee:fd:68:33:db:85:50:82:
         d4:8c:d6:6e:b8:bb:3c:81:ca:bd:d1:f1:b1:90:b2:d1:28:70:
         39:f9:8d:bb:ed:b7:8d:55:8b:b5:b8:b1:97:40:5b:15:ac:a3:
         d5:ee:3b:1f:f2:97:91:93:c3:2d:f8:68:6a:48:7d:1d:aa:90:
         87:d7:fb:0b:99:89:67:c1:1c:d9:bc:fb:46:5b:49:03:5c:a7:
         8a:72:59:1c:1d:41:4b:25:3a:4d:23:50:e3:86:20:9f:dd:37:
         96:c2:88:89:93:54:e0:6d:d4:80:28:63:f9:28:88:f9:27:30:
         11:bc:58:7b:85:d9:0c:4b:70:80:6d:8e:09:c9:45:c8:01:f4:
         f0:f6:5c:4c:ae:b7:22:7f:d6:90:de:59:ca:63:a5:08:10:ba:
         eb:02:9f:d1:32:a2:00:32:88:fc:aa:8c:43:3b:1a:17:1c:56:
         70:a5:03:1f:82:88:9d:e2:2a:45:1c:48:9f:e4:82:26:1a:60:
         ac:3b:52:06:ac:c1:47:66:9b:5e:91:17:da:9e:75:0d:1b:f6:
         79:d2:fd:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+oG2M8Bxh4ei8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
Mzk1ZjA3YTEtOTU4OS00MjM0LThkOTMtMzg3MjRjN2ZjYzAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hQ90OPu1fY5ajruCvK6NEZnJGZUufjk+mKZ
rF4xn/Lc36jdvfPzKm9Dnt5fHGqhPLjtSG1OtTDVmKS5YdK3o0dfCKfoKJ6OpBF7
/hEE2DA+ZNF+4+v/+FWQuTg1TtDkZS8+HYwrz5/AuQ27ey9cvUGDnx2zqilFIbpk
EadS2Y7KuRcjRd0IGV4wD9fP6urmG0T7ibxUdtOY5K/PdxdlMzS5sBS539M/pdaQ
fFJ2sVuRMT7WkD4P3kaI6arVNygUFC+fhQR+jCoV02pn00hx/weaRX5VJsHnW8wu
gDVcgrWDsw6rpYxrGgNtCEvOd8rq2c74C17McXKU/g977PQYKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJJVwAs5d3HZV6rtAXTmChfMokibMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzQwY2Q4ZjQtMDhhNi0z
OGMzLThmMzYtMjc2Zjc1YTlmZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHw6iwn2FABWZutljXLNJ1bA0vAjzDXkRh/UoH/kWutoud/gW4PYz8D
3tMtTALu/Wgz24VQgtSM1m64uzyByr3R8bGQstEocDn5jbvtt41Vi7W4sZdAWxWs
o9XuOx/yl5GTwy34aGpIfR2qkIfX+wuZiWfBHNm8+0ZbSQNcp4pyWRwdQUslOk0j
UOOGIJ/dN5bCiImTVOBt1IAoY/koiPknMBG8WHuF2QxLcIBtjgnJRcgB9PD2XEyu
tyJ/1pDeWcpjpQgQuusCn9EyogAyiPyqjEM7GhccVnClAx+CiJ3iKkUcSJ/kgiYa
YKw7UgaswUdmm16RF9qedQ0b9nnS/ek=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:53:10 2026 by rpki-client