Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9299e9d2-e4aa-3af0-aacd-99711b8073ee.roa
File:                     9299e9d2-e4aa-3af0-aacd-99711b8073ee.roa (raw, json)
Hash identifier:          GSwt8j3/DpVYyy6YfbmRAB0+9oubo2Tqp3u560P0JgM=
Subject key identifier:   04:91:17:71:CF:09:0B:B5:97:60:62:46:75:85:36:F9:65:69:4B:6E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CC5EB2520AB8F5E6FE180
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9299e9d2-e4aa-3af0-aacd-99711b8073ee.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:55c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:c5:eb:25:20:ab:8f:5e:6f:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=dc37044c-c7ed-4d3f-ad4a-8a28921f0da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5b:a5:10:49:fe:4a:4e:c7:af:09:95:6a:f3:
                    3b:73:45:eb:72:e9:65:1c:f3:9c:8d:a7:82:cd:e1:
                    07:ca:0b:cc:a5:b4:4b:d4:7a:3c:28:da:89:36:93:
                    00:7d:3c:92:f2:fb:bb:d2:dc:6c:d7:74:81:31:15:
                    c0:7e:bc:06:fa:b0:31:6d:51:73:98:40:bd:87:22:
                    8d:7e:d7:75:39:90:59:85:01:70:a1:1c:99:2f:23:
                    34:32:40:2c:24:1d:50:c1:fa:5d:c8:47:fd:3a:58:
                    d9:13:82:a7:28:10:14:49:97:a5:90:0d:8c:ca:03:
                    c5:fa:87:c5:43:8c:2b:58:da:79:a3:88:d0:35:c7:
                    29:57:73:42:eb:66:19:9e:c3:f1:83:3c:69:2b:20:
                    fd:84:7f:62:f2:ca:cb:2a:9f:d3:41:c7:39:46:ac:
                    58:98:d9:9d:fc:a4:35:d8:15:18:b4:01:3b:e6:be:
                    a2:52:eb:47:2f:75:23:fb:28:31:09:9e:7a:5e:b5:
                    aa:78:26:94:35:7d:cc:9e:0b:cc:9c:ad:08:6c:1e:
                    f5:e6:b6:9f:70:01:e2:c8:32:40:6f:90:c6:b9:d2:
                    72:9f:97:23:f9:cb:6d:98:c3:a4:65:74:03:92:6c:
                    f7:91:9b:e8:05:02:d2:6b:ad:d2:7e:64:ac:ed:59:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:91:17:71:CF:09:0B:B5:97:60:62:46:75:85:36:F9:65:69:4B:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9299e9d2-e4aa-3af0-aacd-99711b8073ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:55c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:76:dd:78:6d:a7:ba:62:2c:64:56:8f:c8:52:18:15:a6:88:
         f1:d5:1e:02:57:8a:32:d4:96:fc:46:a2:a4:08:f1:2d:c1:b4:
         74:6e:ad:ab:06:0c:92:d9:1d:52:d4:af:db:39:57:2e:42:7b:
         dc:92:f8:cb:f1:2b:ad:b1:c3:82:dc:4b:bc:f3:1d:ff:16:aa:
         08:60:e8:56:88:2a:bf:18:b3:75:40:d3:27:f9:1f:93:b9:b0:
         07:66:97:8e:be:93:9a:e3:70:da:a0:f2:ca:b6:e9:61:58:75:
         e9:29:a9:63:72:9a:94:98:e6:cc:f6:a2:e8:9b:57:72:9d:cc:
         39:de:7c:17:14:a0:b4:a5:5e:86:3c:c1:78:ca:c1:28:56:9a:
         b2:6f:7c:29:9d:e4:95:48:3a:4b:d4:40:4c:40:37:bc:e0:84:
         b5:2b:72:51:ad:1f:e0:95:31:2c:f1:8b:ca:fe:6a:ab:8e:4e:
         92:3c:ba:38:22:10:e0:30:eb:5e:14:47:43:41:e9:44:4d:70:
         73:17:6a:48:e2:a4:49:3f:0b:24:d1:dd:3d:0c:c7:4d:f8:95:
         e4:46:da:cf:d0:f3:fb:e2:1c:44:61:3b:73:3f:fb:82:e0:d1:
         80:5f:24:55:8f:b9:f8:a8:e3:bc:97:0d:34:f1:35:d7:2c:03:
         69:18:e2:3a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzAfMXrJSCrj15v4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk
ZGMzNzA0NGMtYzdlZC00ZDNmLWFkNGEtOGEyODkyMWYwZGEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFulEEn+Sk7HrwmVavM7c0XrcullHPOcjaeC
zeEHygvMpbRL1Ho8KNqJNpMAfTyS8vu70txs13SBMRXAfrwG+rAxbVFzmEC9hyKN
ftd1OZBZhQFwoRyZLyM0MkAsJB1QwfpdyEf9OljZE4KnKBAUSZelkA2MygPF+ofF
Q4wrWNp5o4jQNccpV3NC62YZnsPxgzxpKyD9hH9i8srLKp/TQcc5RqxYmNmd/KQ1
2BUYtAE75r6iUutHL3Uj+ygxCZ56XrWqeCaUNX3MngvMnK0IbB715rafcAHiyDJA
b5DGudJyn5cj+cttmMOkZXQDkmz3kZvoBQLSa63SfmSs7VmZQQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFASRF3HPCQu1l2BiRnWFNvllaUtuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTI5OWU5ZDItZTRhYS0z
YWYwLWFhY2QtOTk3MTFiODA3M2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFXA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADZ23Xhtp7piLGRWj8hSGBWmiPHVHgJXijLUlvxGoqQI8S3BtHRu
rasGDJLZHVLUr9s5Vy5Ce9yS+MvxK62xw4LcS7zzHf8Wqghg6FaIKr8Ys3VA0yf5
H5O5sAdml46+k5rjcNqg8sq26WFYdekpqWNympSY5sz2ouibV3KdzDnefBcUoLSl
XoY8wXjKwShWmrJvfCmd5JVIOkvUQExAN7zghLUrclGtH+CVMSzxi8r+aquOTpI8
ujgiEOAw614UR0NB6URNcHMXakjipEk/CyTR3T0Mx034leRG2s/Q8/viHERhO3M/
+4Lg0YBfJFWPufio47yXDTTxNdcsA2kY4jo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:06 2026 by rpki-client