Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a09e9fcd-dc25-324d-954c-35df2c433a8e.roa
File:                     a09e9fcd-dc25-324d-954c-35df2c433a8e.roa (raw, json)
Hash identifier:          ZTr80I/RlPBFjncS20RzOloBK2ofYhKUE1Ew2lYWWNk=
Subject key identifier:   FD:74:20:06:CE:59:9B:50:2D:A7:CE:24:03:79:C4:93:F7:35:00:AC
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CC07CC18BB2EC353D85B8E100
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a09e9fcd-dc25-324d-954c-35df2c433a8e.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     54113
IP address blocks:        2607:8940:5330::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:c1:8b:b2:ec:35:3d:85:b8:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=9dbc05a5-29d7-4ed0-8e1f-3c0f4e4bf508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:98:76:01:37:2c:b6:99:24:df:e2:1e:ba:
                    b7:c2:f0:05:ec:bf:56:41:2b:0c:62:8b:7f:ca:67:
                    ea:79:3d:17:d0:67:a1:8e:da:98:9e:37:2a:f2:11:
                    6f:20:49:bb:61:fb:ba:de:98:14:cd:da:2c:17:44:
                    c0:17:87:16:27:5b:f9:7e:3e:04:ef:1c:89:97:75:
                    55:59:03:2c:3c:9b:0a:62:ca:74:48:c8:b1:d9:a0:
                    f1:d9:17:f4:d1:68:20:f7:d5:51:73:0d:65:0a:26:
                    a6:91:db:ea:2a:81:35:24:91:0a:10:d4:5a:92:96:
                    e2:35:54:fb:6f:c4:95:0d:8a:f2:90:5e:e3:07:41:
                    bb:40:57:08:37:0f:61:5b:77:3a:3a:08:16:e9:d1:
                    66:e3:be:4d:7b:92:6f:4e:df:ed:2e:44:91:32:65:
                    54:ff:b9:d3:b7:01:63:fc:19:75:bd:c2:09:d8:b0:
                    76:f8:35:88:a9:c6:a1:49:fa:f8:11:10:d2:fb:d3:
                    a2:a8:2a:9b:99:2b:1d:d2:0e:a4:b9:98:6b:9b:42:
                    4d:10:48:9f:06:6a:ad:69:fb:53:fb:11:70:f2:bf:
                    c4:47:c0:c3:24:5b:b2:af:49:a6:84:d5:28:d5:32:
                    2a:94:54:d5:c0:be:94:f3:55:6b:fb:42:8a:ea:5e:
                    37:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:74:20:06:CE:59:9B:50:2D:A7:CE:24:03:79:C4:93:F7:35:00:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a09e9fcd-dc25-324d-954c-35df2c433a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5330::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:8b:dc:03:14:f3:0a:bb:4f:e0:5e:fb:91:f4:fe:4c:1a:74:
         6b:f3:0d:fc:e6:4d:bc:23:e1:4f:16:e8:c1:40:74:1f:47:c3:
         aa:dd:b3:80:45:77:64:f2:83:b5:2b:70:75:fd:52:a0:42:f3:
         16:0b:bd:08:1e:ee:15:82:7c:c2:ad:9a:55:a2:d6:9b:68:23:
         b4:be:08:cb:8e:8d:0a:c2:07:e1:be:04:30:8a:4a:e5:ed:8e:
         b5:54:23:c6:36:2c:9e:5b:45:d7:f9:43:9e:df:1e:43:a1:36:
         8d:1d:5a:ef:b5:b7:93:09:0f:f4:db:89:64:8f:1b:08:a5:83:
         4a:f3:67:8e:e9:8f:51:da:77:60:66:b5:d4:34:d6:e7:67:36:
         40:08:a5:fd:25:cb:78:10:66:89:70:c5:6e:84:10:cc:d7:b1:
         87:33:ed:95:e4:ce:97:ad:a4:f8:70:b2:0f:9d:0c:0c:d0:3a:
         d2:47:c5:94:36:d9:d7:03:40:84:c3:22:3e:21:c1:16:2c:bf:
         5a:8b:48:87:f5:f4:8c:6d:37:07:08:6e:a3:5d:ee:0f:4e:91:
         31:3b:4a:a6:85:90:7a:f7:f2:3b:ae:7f:75:3f:d1:a1:6c:69:
         d5:8a:5c:cc:21:65:a3:f8:0b:90:9a:b9:51:18:51:49:92:e0:
         8e:db:5d:93
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzAfMGLsuw1PYW44QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk
OWRiYzA1YTUtMjlkNy00ZWQwLThlMWYtM2MwZjRlNGJmNTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXKYdgE3LLaZJN/iHrq3wvAF7L9WQSsMYot/
ymfqeT0X0GehjtqYnjcq8hFvIEm7Yfu63pgUzdosF0TAF4cWJ1v5fj4E7xyJl3VV
WQMsPJsKYsp0SMix2aDx2Rf00Wgg99VRcw1lCiamkdvqKoE1JJEKENRakpbiNVT7
b8SVDYrykF7jB0G7QFcINw9hW3c6OggW6dFm475Ne5JvTt/tLkSRMmVU/7nTtwFj
/Bl1vcIJ2LB2+DWIqcahSfr4ERDS+9OiqCqbmSsd0g6kuZhrm0JNEEifBmqtaftT
+xFw8r/ER8DDJFuyr0mmhNUo1TIqlFTVwL6U81Vr+0KK6l43lQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP10IAbOWZtQLafOJAN5xJP3NQCsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTA5ZTlmY2QtZGMyNS0z
MjRkLTk1NGMtMzVkZjJjNDMzYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFMw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF+L3AMU8wq7T+Be+5H0/kwadGvzDfzmTbwj4U8W6MFAdB9Hw6rd
s4BFd2Tyg7UrcHX9UqBC8xYLvQge7hWCfMKtmlWi1ptoI7S+CMuOjQrCB+G+BDCK
SuXtjrVUI8Y2LJ5bRdf5Q57fHkOhNo0dWu+1t5MJD/TbiWSPGwilg0rzZ47pj1Ha
d2BmtdQ01udnNkAIpf0ly3gQZolwxW6EEMzXsYcz7ZXkzpetpPhwsg+dDAzQOtJH
xZQ22dcDQITDIj4hwRYsv1qLSIf19IxtNwcIbqNd7g9OkTE7SqaFkHr38juuf3U/
0aFsadWKXMwhZaP4C5CauVEYUUmS4I7bXZM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:57 2026 by rpki-client