Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/51a0cea3-55a4-3927-af8b-7d6bcbcae715.roa
File:                     51a0cea3-55a4-3927-af8b-7d6bcbcae715.roa (raw, json)
Hash identifier:          1HgGZy24nLKrBezsL9N9D5LIca282kobeRNnV6Zms00=
Subject key identifier:   18:31:C6:61:B8:39:A8:49:96:4F:F2:7A:A0:66:81:2B:1A:24:23:74
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CB319762B7AEB943AC730
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/51a0cea3-55a4-3927-af8b-7d6bcbcae715.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:51f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:b3:19:76:2b:7a:eb:94:3a:c7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=ad32f9a3-c9f2-486f-9240-a7c79199d36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:07:67:d0:f8:f1:a3:56:b9:31:57:52:e2:
                    6b:44:dc:5e:05:34:df:5b:d6:35:af:2b:5d:34:fa:
                    9f:a8:30:e9:eb:10:75:a2:41:3a:3b:53:1c:b4:25:
                    30:56:4e:56:44:14:ca:05:e5:be:72:ce:ad:08:50:
                    d0:be:91:b9:ad:79:e0:03:f5:08:e3:1d:aa:01:35:
                    8b:0e:3c:5e:09:ec:ac:85:ae:57:38:46:fa:9a:63:
                    eb:98:96:80:bc:2d:66:46:f7:82:6e:f8:37:73:e4:
                    f1:7a:d0:24:0c:2b:10:02:87:cc:89:9c:9d:90:04:
                    94:fa:67:ac:e0:8e:58:7e:98:06:b2:73:f9:7a:5d:
                    95:23:fa:7c:b6:75:50:0b:0f:d6:f9:9a:5e:2c:1a:
                    fd:83:ae:9c:37:7d:f2:a5:8f:ff:6e:fa:d9:9e:5b:
                    38:28:29:a2:f8:68:e1:b9:18:50:44:5a:70:6a:97:
                    87:27:8c:03:b7:bf:94:75:fb:07:fb:60:24:93:f8:
                    8f:12:3a:73:99:76:26:8d:77:33:44:41:05:53:9a:
                    ff:37:31:a4:11:ca:04:cf:0e:65:f5:a0:20:cd:f7:
                    d5:6e:84:9a:d6:d8:01:e5:aa:fb:bc:09:3a:19:b5:
                    f3:d7:62:1a:4c:a1:5d:d5:04:75:66:a1:aa:96:e5:
                    7a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:31:C6:61:B8:39:A8:49:96:4F:F2:7A:A0:66:81:2B:1A:24:23:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/51a0cea3-55a4-3927-af8b-7d6bcbcae715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:51f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:42:db:1a:20:12:56:de:78:cd:93:5f:d5:ba:b3:ac:2a:55:
         00:14:1d:ec:16:2d:68:f5:6d:dc:b2:11:82:b8:73:a8:ec:93:
         58:04:72:34:e1:ff:3c:1d:8f:bb:78:3a:34:2e:e8:c2:48:36:
         23:bd:39:88:4e:c9:27:0b:55:d5:f8:9d:e4:06:f4:e2:ae:92:
         a5:11:db:c7:f6:90:bd:b0:1c:a6:4c:ab:86:0b:53:f2:d6:80:
         c5:2a:25:59:c3:6c:ed:62:f7:e9:25:85:1c:c1:64:b2:46:ec:
         9d:85:d2:8a:1e:36:e6:b9:2b:e3:10:75:ed:f9:12:6e:64:e5:
         e9:5c:67:f5:d1:d7:f6:22:51:02:24:34:f3:a4:e6:e5:1e:ce:
         0e:9a:bf:db:9c:84:97:30:95:0f:64:a5:6b:36:b0:c0:1d:78:
         77:31:ad:75:73:4f:df:38:6c:bd:fe:6b:35:0b:83:28:b5:19:
         f7:de:40:df:78:e6:17:6e:f0:b8:0d:26:fc:03:46:86:af:57:
         19:a2:f0:a5:42:f0:af:1d:ad:47:34:34:db:e3:65:89:9a:5b:
         72:8d:7b:93:6e:ed:f9:c2:aa:48:45:7d:65:91:ae:08:e8:c5:
         2c:fc:1b:7b:73:5e:9d:be:2a:c5:71:47:c8:3e:20:f2:f4:41:
         ee:c6:e5:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzAfLMZdit665Q6xzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk
YWQzMmY5YTMtYzlmMi00ODZmLTkyNDAtYTdjNzkxOTlkMzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojQHZ9D48aNWuTFXUuJrRNxeBTTfW9Y1rytd
NPqfqDDp6xB1okE6O1MctCUwVk5WRBTKBeW+cs6tCFDQvpG5rXngA/UI4x2qATWL
DjxeCeysha5XOEb6mmPrmJaAvC1mRveCbvg3c+TxetAkDCsQAofMiZydkASU+mes
4I5YfpgGsnP5el2VI/p8tnVQCw/W+ZpeLBr9g66cN33ypY//bvrZnls4KCmi+Gjh
uRhQRFpwapeHJ4wDt7+UdfsH+2Akk/iPEjpzmXYmjXczREEFU5r/NzGkEcoEzw5l
9aAgzffVboSa1tgB5ar7vAk6GbXz12IaTKFd1QR1ZqGqluV65wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBgxxmG4OahJlk/yeqBmgSsaJCN0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNTFhMGNlYTMtNTVhNC0z
OTI3LWFmOGItN2Q2YmNiY2FlNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFHw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB5C2xogElbeeM2TX9W6s6wqVQAUHewWLWj1bdyyEYK4c6jsk1gE
cjTh/zwdj7t4OjQu6MJINiO9OYhOyScLVdX4neQG9OKukqUR28f2kL2wHKZMq4YL
U/LWgMUqJVnDbO1i9+klhRzBZLJG7J2F0ooeNua5K+MQde35Em5k5elcZ/XR1/Yi
UQIkNPOk5uUezg6av9uchJcwlQ9kpWs2sMAdeHcxrXVzT984bL3+azULgyi1Gffe
QN945hdu8LgNJvwDRoavVxmi8KVC8K8drUc0NNvjZYmaW3KNe5Nu7fnCqkhFfWWR
rgjoxSz8G3tzXp2+KsVxR8g+IPL0Qe7G5e0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:16 2026 by rpki-client