Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/734464eb-29fe-3429-aa60-0b5cec51d986.roa
File:                     734464eb-29fe-3429-aa60-0b5cec51d986.roa (raw, json)
Hash identifier:          WsCBqWjWPF9xvVIRMChjQX+lZbaw479YLgtvzFxrIwE=
Subject key identifier:   D1:F7:CE:D9:CE:E3:6C:B0:24:C3:45:81:73:28:6B:CE:D1:F8:32:B9
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CAB51415F7ADE47F6C2C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/734464eb-29fe-3429-aa60-0b5cec51d986.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:4cd0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:ab:51:41:5f:7a:de:47:f6:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=170313eb-0271-455c-9159-ab7b49469866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fc:57:12:f3:fb:d2:18:ff:4a:ce:9f:15:bf:
                    0d:1e:7b:d8:49:9a:9f:03:08:fc:24:42:95:e9:e8:
                    28:53:bb:ac:4b:3f:a0:11:01:6c:e5:a0:c6:8c:41:
                    17:63:e5:a7:90:30:e3:8a:53:6c:92:b2:c7:9a:05:
                    d5:8d:10:9c:91:7f:3b:33:ae:9d:c8:1a:e6:91:44:
                    f3:39:ed:0a:59:f7:64:98:8f:8e:49:51:a8:e4:29:
                    12:b8:7e:80:cd:e3:23:a4:bd:dd:3c:cf:f3:90:33:
                    36:17:7a:d6:34:7e:ea:9a:3c:68:0d:d7:8c:6f:dd:
                    aa:da:18:a0:3a:d3:29:d6:d9:d5:fd:0a:3d:ea:6e:
                    97:c0:09:b4:68:52:17:0b:29:cc:8d:9c:fc:fa:04:
                    e1:04:4d:db:54:50:00:1c:f4:d0:ae:49:e8:c0:2e:
                    71:78:71:c6:30:34:6e:6b:13:89:1c:62:2a:70:03:
                    8b:18:e5:3d:15:38:51:00:16:86:64:1b:ce:63:22:
                    f7:82:eb:b3:1d:f6:ac:21:2d:57:9c:19:c4:cb:e5:
                    77:3c:49:94:cb:65:b7:54:5e:c7:8f:af:b9:c1:e4:
                    b9:2d:86:0d:b2:c2:c3:85:d0:8d:11:65:d1:42:36:
                    b8:ca:c8:a9:93:49:1a:4d:3a:ef:31:a3:5f:c5:91:
                    c8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F7:CE:D9:CE:E3:6C:B0:24:C3:45:81:73:28:6B:CE:D1:F8:32:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/734464eb-29fe-3429-aa60-0b5cec51d986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4cd0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:cf:89:44:af:8d:45:8b:98:5d:4c:d8:81:56:39:b9:4a:9d:
         93:70:08:46:dc:ee:05:e1:73:92:fc:c2:f6:53:68:f9:90:7b:
         4b:7b:91:d1:57:fe:15:23:08:59:21:a8:8c:76:7a:ca:05:ac:
         7c:b1:bf:0b:43:65:65:ce:42:50:03:3c:c0:c7:4a:26:f7:f3:
         1d:86:4c:a7:ae:ea:3f:eb:2b:f0:f3:97:57:5e:27:11:0c:35:
         72:a7:cc:d6:ff:a8:78:57:bf:ad:bd:99:7a:13:9e:ec:6a:5d:
         99:e6:77:67:db:1e:e5:07:da:d1:ce:ed:74:4d:74:5d:63:81:
         33:18:ab:06:43:81:b4:4b:0f:15:c6:50:87:f5:b4:eb:f1:0a:
         3e:fa:0f:f6:91:e9:f0:ff:7c:50:2d:95:64:1c:47:31:f2:e5:
         99:36:2c:ed:62:d4:e8:5c:f4:81:a4:3d:28:06:4f:68:c0:27:
         60:ce:9f:cc:4f:91:00:c4:d4:78:fd:5a:1e:34:33:ea:61:92:
         cb:aa:06:66:80:67:9e:f0:89:8c:ed:d0:4b:d3:19:46:f6:3d:
         51:d8:b7:44:1b:26:d9:b7:4b:ac:6d:97:9e:f7:74:28:42:65:
         5a:92:f1:f3:b8:40:c9:ba:b0:da:13:87:39:7f:85:1f:de:3c:
         86:ee:75:74
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzAfKtRQV963kf2wsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk
MTcwMzEzZWItMDI3MS00NTVjLTkxNTktYWI3YjQ5NDY5ODY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/xXEvP70hj/Ss6fFb8NHnvYSZqfAwj8JEKV
6egoU7usSz+gEQFs5aDGjEEXY+WnkDDjilNskrLHmgXVjRCckX87M66dyBrmkUTz
Oe0KWfdkmI+OSVGo5CkSuH6AzeMjpL3dPM/zkDM2F3rWNH7qmjxoDdeMb92q2hig
OtMp1tnV/Qo96m6XwAm0aFIXCynMjZz8+gThBE3bVFAAHPTQrknowC5xeHHGMDRu
axOJHGIqcAOLGOU9FThRABaGZBvOYyL3guuzHfasIS1XnBnEy+V3PEmUy2W3VF7H
j6+5weS5LYYNssLDhdCNEWXRQja4ysipk0kaTTrvMaNfxZHIbQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNH3ztnO42ywJMNFgXMoa87R+DK5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNzM0NDY0ZWItMjlmZS0z
NDI5LWFhNjAtMGI1Y2VjNTFkOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEzQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAArPiUSvjUWLmF1M2IFWOblKnZNwCEbc7gXhc5L8wvZTaPmQe0t7
kdFX/hUjCFkhqIx2esoFrHyxvwtDZWXOQlADPMDHSib38x2GTKeu6j/rK/Dzl1de
JxEMNXKnzNb/qHhXv629mXoTnuxqXZnmd2fbHuUH2tHO7XRNdF1jgTMYqwZDgbRL
DxXGUIf1tOvxCj76D/aR6fD/fFAtlWQcRzHy5Zk2LO1i1Ohc9IGkPSgGT2jAJ2DO
n8xPkQDE1Hj9Wh40M+phksuqBmaAZ57wiYzt0EvTGUb2PVHYt0QbJtm3S6xtl573
dChCZVqS8fO4QMm6sNoThzl/hR/ePIbudXQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:09 2026 by rpki-client