Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/74b31361-232f-3b12-bce2-7e186e0ed54a.roa
File:                     74b31361-232f-3b12-bce2-7e186e0ed54a.roa (raw, json)
Hash identifier:          anCJiIR3bVspanXV8XScGT13v+ujebXmE8x2Y/N3cRw=
Subject key identifier:   43:1B:0B:33:51:0A:99:27:79:5F:72:07:56:74:70:91:05:E4:2C:5C
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C2740941887770C59742E0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/74b31361-232f-3b12-bce2-7e186e0ed54a.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:49b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:74:09:41:88:77:70:c5:97:42:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=7ae5c1b6-c287-48ac-b06c-e6915ad9ac17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ad:21:c2:42:9d:24:73:60:26:ce:6f:fd:68:
                    07:5b:b4:7e:fb:4a:97:bc:6e:32:7f:21:60:0b:f5:
                    31:e2:44:ab:a5:55:b1:fc:23:e8:90:17:b3:20:1e:
                    22:2b:33:8c:aa:a6:a0:97:a3:5f:23:5f:8f:21:59:
                    22:6e:a1:32:d1:5f:5c:ee:a9:bd:86:b6:41:7f:80:
                    18:78:3c:56:60:b3:65:68:bc:b4:ce:5f:44:88:1c:
                    23:b7:bd:84:93:d7:fe:85:41:e9:ae:bc:fe:02:3b:
                    aa:06:b2:6c:37:ac:f9:a5:12:f1:5b:5d:a9:88:4f:
                    2a:c5:7f:6a:f2:58:04:72:0e:48:8f:f4:a9:39:32:
                    30:6e:91:11:82:33:fe:28:7d:54:4c:fe:a8:88:74:
                    6f:d6:ee:30:48:67:3c:6a:63:1f:fe:21:37:75:f0:
                    b9:10:3d:33:98:99:e1:b4:9f:63:d0:81:00:f2:d2:
                    1c:da:a8:c9:a3:72:6e:1b:5d:c5:7a:b5:a6:e2:d3:
                    02:d3:8b:5a:29:5e:9d:46:e9:fe:13:39:17:04:54:
                    03:df:bc:95:42:61:c2:8f:b6:7b:6b:49:fb:34:52:
                    5b:a9:a5:ab:ce:b9:84:2a:ce:e4:65:5f:19:d7:77:
                    63:ab:ee:49:e7:46:09:43:31:20:00:97:fe:6c:0d:
                    de:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1B:0B:33:51:0A:99:27:79:5F:72:07:56:74:70:91:05:E4:2C:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/74b31361-232f-3b12-bce2-7e186e0ed54a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:49b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:09:30:8a:4b:14:40:e1:89:14:47:75:bb:0e:c1:6e:e1:42:
         76:72:47:fd:3a:a0:74:5c:dd:a8:cf:4c:77:a8:d2:77:35:ec:
         fd:cd:8a:e4:03:36:91:e4:30:d9:f1:a6:34:ee:4c:1f:ee:36:
         ab:2b:60:7a:70:b1:e1:63:d9:2a:c2:b6:e9:49:7d:ac:2e:88:
         d2:46:6e:49:31:a9:e5:1d:da:b1:23:33:c6:97:96:be:50:c5:
         11:04:20:30:20:6c:c8:33:ef:a3:cf:db:37:99:44:c3:0d:bf:
         23:8f:7e:66:8f:09:4b:e3:a5:fc:ef:5e:fc:e9:10:f1:79:a1:
         9b:6f:eb:4c:e9:b1:5d:2f:55:3c:f8:9f:29:fa:c6:54:37:30:
         e8:a8:47:71:36:35:35:0a:53:35:c0:1a:fa:09:5a:7f:c7:55:
         5e:6d:c6:31:5b:7a:cd:17:fc:f5:af:68:04:21:6a:17:4b:9a:
         ab:b2:a1:ce:26:01:6d:77:07:ab:c2:f4:e7:b8:b3:e9:73:5b:
         28:9a:7b:e1:b1:af:8b:42:37:6e:39:4a:38:36:ce:79:48:09:
         d8:9f:db:8a:17:be:5c:d0:b8:ff:2d:e2:3e:38:7e:a8:64:32:
         14:06:f7:84:19:99:e3:41:0d:84:f0:62:1d:40:7d:d3:9e:46:
         1b:14:18:52
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwnQJQYh3cMWXQuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk
N2FlNWMxYjYtYzI4Ny00OGFjLWIwNmMtZTY5MTVhZDlhYzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj60hwkKdJHNgJs5v/WgHW7R++0qXvG4yfyFg
C/Ux4kSrpVWx/CPokBezIB4iKzOMqqagl6NfI1+PIVkibqEy0V9c7qm9hrZBf4AY
eDxWYLNlaLy0zl9EiBwjt72Ek9f+hUHprrz+AjuqBrJsN6z5pRLxW12piE8qxX9q
8lgEcg5Ij/SpOTIwbpERgjP+KH1UTP6oiHRv1u4wSGc8amMf/iE3dfC5ED0zmJnh
tJ9j0IEA8tIc2qjJo3JuG13FerWm4tMC04taKV6dRun+EzkXBFQD37yVQmHCj7Z7
a0n7NFJbqaWrzrmEKs7kZV8Z13djq+5J50YJQzEgAJf+bA3eYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEMbCzNRCpkneV9yB1Z0cJEF5CxcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNzRiMzEzNjEtMjMyZi0z
YjEyLWJjZTItN2UxODZlMGVkNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEmw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABgJMIpLFEDhiRRHdbsOwW7hQnZyR/06oHRc3ajPTHeo0nc17P3N
iuQDNpHkMNnxpjTuTB/uNqsrYHpwseFj2SrCtulJfawuiNJGbkkxqeUd2rEjM8aX
lr5QxREEIDAgbMgz76PP2zeZRMMNvyOPfmaPCUvjpfzvXvzpEPF5oZtv60zpsV0v
VTz4nyn6xlQ3MOioR3E2NTUKUzXAGvoJWn/HVV5txjFbes0X/PWvaAQhahdLmquy
oc4mAW13B6vC9Oe4s+lzWyiae+Gxr4tCN245Sjg2znlICdif24oXvlzQuP8t4j44
fqhkMhQG94QZmeNBDYTwYh1AfdOeRhsUGFI=
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:24:32 2026 by rpki-client