Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9e5238d0-9193-3e26-bcb6-f684dfa178b1.roa
File:                     9e5238d0-9193-3e26-bcb6-f684dfa178b1.roa (raw, json)
Hash identifier:          LGcc+S+aXTX9diC16ZNuWTIK37+bO64S7C73eK0Ulsg=
Subject key identifier:   7C:9C:30:37:CE:C8:46:10:C3:92:5E:AB:34:5D:7A:0A:E0:0E:3A:B3
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CBC93ECE030D2046D7EC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9e5238d0-9193-3e26-bcb6-f684dfa178b1.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5290::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:bc:93:ec:e0:30:d2:04:6d:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=003cc0be-2093-4ed6-a87a-acb3f3228832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:c4:00:c1:5a:65:af:c8:06:46:e4:18:53:
                    93:ca:1a:d4:c5:86:fa:2b:40:ce:58:a2:ea:bf:89:
                    7c:d5:b3:f1:33:5a:7d:ff:14:18:60:a1:74:6f:5a:
                    1f:f8:03:13:ed:69:33:4f:ca:ac:ab:e6:3d:a0:ad:
                    62:91:15:e0:8e:89:ac:c0:ec:76:30:b3:13:fa:8a:
                    1d:4b:27:33:59:c8:2c:d4:75:88:f7:94:38:ea:1f:
                    3d:a1:e5:e8:6d:ec:b9:87:44:7b:ac:e9:83:54:91:
                    67:00:5e:c2:a2:5d:61:42:c2:ff:7a:9e:5a:fa:51:
                    81:1f:ef:30:33:15:93:89:c4:66:8c:56:1b:e0:27:
                    26:52:69:2c:8d:b9:aa:0c:7a:d5:ea:ef:c3:03:d7:
                    9a:e7:de:fa:7e:b5:9c:43:17:c6:3b:e1:26:ab:d2:
                    d9:e0:28:50:aa:e7:3b:46:ee:01:10:35:ac:af:4f:
                    21:0e:88:a0:50:90:2e:69:45:95:39:68:be:31:0f:
                    e0:1c:9d:9c:be:ce:f8:7b:6c:93:2c:60:af:47:1b:
                    cb:9e:f5:f4:43:33:26:50:47:29:5a:64:30:1b:8a:
                    e7:ad:85:c7:42:2e:9a:86:28:3b:f2:7d:9c:91:0b:
                    c4:26:2a:c4:a5:d2:9e:a9:83:d7:ce:7d:52:14:ac:
                    de:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9C:30:37:CE:C8:46:10:C3:92:5E:AB:34:5D:7A:0A:E0:0E:3A:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9e5238d0-9193-3e26-bcb6-f684dfa178b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5290::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:f8:a0:d0:df:7e:46:19:51:0f:16:70:a6:6e:c6:77:59:15:
         c4:e3:29:ea:eb:d5:96:d9:75:6b:32:17:2e:fd:1d:e2:1c:68:
         54:f0:52:91:1e:c4:5d:4e:62:47:80:e8:d8:b6:53:ec:15:0f:
         e7:79:79:b3:7e:dd:25:12:63:62:8c:f4:66:7f:49:f5:ac:02:
         34:73:1a:f4:d2:f9:fb:26:42:33:56:e3:e6:7a:4e:97:35:db:
         cc:73:cd:24:ff:d7:d3:84:c8:b7:2d:61:66:4e:6b:22:6c:e2:
         44:33:e7:b5:e2:63:be:96:47:7e:04:5c:e8:f8:21:aa:8b:b8:
         03:5b:54:47:35:53:0c:57:3d:9a:95:95:e6:2c:2a:a9:ae:fd:
         61:0b:fa:22:d7:59:78:a5:f8:a9:d9:e3:b8:45:2b:69:20:87:
         cd:83:25:6c:2e:29:ae:9e:60:d0:d7:f4:d8:8f:d1:5f:76:01:
         31:b2:23:f8:75:ab:b9:77:4e:4a:1c:10:2c:52:95:8f:f1:83:
         b6:52:e9:91:26:b9:11:0a:4e:a1:ae:f4:4b:9d:34:d8:39:70:
         5c:ad:eb:35:9a:8e:bc:e5:8d:97:47:da:4f:2c:bd:31:18:a8:
         f1:af:cb:c7:68:16:76:6d:44:d9:65:6c:7f:78:6b:39:cf:23:
         1a:09:9b:5c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzAfLyT7OAw0gRtfsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk
MDAzY2MwYmUtMjA5My00ZWQ2LWE4N2EtYWNiM2YzMjI4ODMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsnEAMFaZa/IBkbkGFOTyhrUxYb6K0DOWKLq
v4l81bPxM1p9/xQYYKF0b1of+AMT7WkzT8qsq+Y9oK1ikRXgjomswOx2MLMT+ood
SyczWcgs1HWI95Q46h89oeXobey5h0R7rOmDVJFnAF7Col1hQsL/ep5a+lGBH+8w
MxWTicRmjFYb4CcmUmksjbmqDHrV6u/DA9ea5976frWcQxfGO+Emq9LZ4ChQquc7
Ru4BEDWsr08hDoigUJAuaUWVOWi+MQ/gHJ2cvs74e2yTLGCvRxvLnvX0QzMmUEcp
WmQwG4rnrYXHQi6ahig78n2ckQvEJirEpdKeqYPXzn1SFKzeuQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHycMDfOyEYQw5JeqzRdegrgDjqzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOWU1MjM4ZDAtOTE5My0z
ZTI2LWJjYjYtZjY4NGRmYTE3OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFKQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB34oNDffkYZUQ8WcKZuxndZFcTjKerr1ZbZdWsyFy79HeIcaFTw
UpEexF1OYkeA6Ni2U+wVD+d5ebN+3SUSY2KM9GZ/SfWsAjRzGvTS+fsmQjNW4+Z6
Tpc128xzzST/19OEyLctYWZOayJs4kQz57XiY76WR34EXOj4IaqLuANbVEc1UwxX
PZqVleYsKqmu/WEL+iLXWXil+KnZ47hFK2kgh82DJWwuKa6eYNDX9NiP0V92ATGy
I/h1q7l3TkocECxSlY/xg7ZS6ZEmuREKTqGu9EudNNg5cFyt6zWajrzljZdH2k8s
vTEYqPGvy8doFnZtRNllbH94aznPIxoJm1w=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:56 2026 by rpki-client