Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/beff694d-1ca2-3b4c-928b-216f33196e5c.roa
File:                     beff694d-1ca2-3b4c-928b-216f33196e5c.roa (raw, json)
Hash identifier:          1iUziR1kTR3sRLQdmmMYpmZZkaWMQC0dmQj33pS5XYo=
Subject key identifier:   97:BC:A4:03:F6:C4:85:19:9A:7E:BA:E8:51:65:31:3E:56:F2:E8:5F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F23C26ACDB1A7917094BB0980
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/beff694d-1ca2-3b4c-928b-216f33196e5c.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:41e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:6a:cd:b1:a7:91:70:94:bb:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=f32d70a2-af2a-4127-b942-377158ca6b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0a:dc:cd:0c:f5:e9:fd:3c:7c:97:1d:d1:ae:
                    d9:b1:ce:5b:77:85:05:96:a3:3e:bc:c2:68:20:24:
                    73:27:d6:ea:04:18:8d:ac:ca:e7:99:52:d0:77:fb:
                    b8:50:6d:d2:63:1e:01:15:cd:a4:7f:e7:a6:33:e2:
                    88:64:d7:05:22:7a:dc:c5:f2:68:d0:a3:7c:c4:9d:
                    c4:8a:f2:e8:8d:b4:0b:a4:ed:14:d6:81:e4:6e:f0:
                    e1:ea:2c:23:fc:9a:f5:a1:3c:cb:55:68:dd:42:40:
                    61:bf:2f:27:a3:8c:82:ad:06:ce:74:30:67:0c:7b:
                    6a:e5:cb:77:9e:47:82:1e:c4:0c:6d:56:0a:1a:90:
                    09:23:7c:b3:68:ea:9b:22:c2:f8:6d:e2:49:2b:31:
                    c4:c4:7c:34:70:5e:82:05:b9:2d:35:1a:c1:98:8c:
                    9f:bf:da:df:37:b4:97:91:e7:95:c8:2e:00:dd:94:
                    1d:d5:da:d6:e3:6a:e0:f0:b7:89:a2:88:9c:9c:dd:
                    4a:ec:4a:81:92:4d:1e:4a:30:01:95:6e:be:ea:dc:
                    64:c8:5a:f7:da:fc:08:16:45:95:a7:b2:d7:c2:b7:
                    59:77:34:97:2f:59:ff:d5:19:5b:bf:73:90:a4:79:
                    2b:16:25:3c:fa:1b:ff:cf:43:5e:b6:a2:b2:13:3d:
                    cd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BC:A4:03:F6:C4:85:19:9A:7E:BA:E8:51:65:31:3E:56:F2:E8:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/beff694d-1ca2-3b4c-928b-216f33196e5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:41e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:00:5a:4f:51:a3:c4:61:9c:01:2c:b4:05:7e:6a:68:52:3e:
         ca:5e:fa:1f:10:03:e7:d9:fb:32:f7:09:e8:6b:1d:23:97:3d:
         d1:03:c5:44:e7:8d:16:ee:53:5b:a5:c2:c5:4a:d3:60:39:de:
         37:d9:77:c4:1a:a8:fa:6c:73:e5:67:87:d8:dc:a1:e5:15:85:
         57:2d:fd:b9:df:21:7a:06:be:d6:01:a2:75:ed:89:ab:5f:23:
         ed:0e:ff:a4:29:42:5a:df:47:f8:c2:74:be:8a:1b:97:c9:e8:
         a2:60:f5:06:b1:e0:94:26:0d:38:81:34:00:f1:36:a3:00:9c:
         91:28:31:cf:04:b6:63:bd:6f:fa:be:49:d7:81:ec:34:91:47:
         a3:cd:82:f1:8e:a7:75:2b:50:4f:3f:f8:1b:68:60:2b:1d:35:
         01:58:1e:6c:61:63:40:3e:aa:fd:08:25:7a:46:5b:7d:76:5b:
         69:c3:8d:03:21:85:69:30:8f:a6:f1:b5:f4:a6:2d:f7:ad:2a:
         3c:44:07:e3:42:22:5e:d8:60:78:de:4a:d5:62:40:66:db:38:
         ec:c5:78:86:18:f8:2d:57:d0:41:27:94:ab:0b:1d:69:3c:de:
         d3:c5:24:41:8b:c5:a8:c2:52:0f:d7:6b:d3:ab:52:e4:e7:5a:
         40:02:92:1c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwmrNsaeRcJS7CYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk
ZjMyZDcwYTItYWYyYS00MTI3LWI5NDItMzc3MTU4Y2E2YjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQrczQz16f08fJcd0a7Zsc5bd4UFlqM+vMJo
ICRzJ9bqBBiNrMrnmVLQd/u4UG3SYx4BFc2kf+emM+KIZNcFInrcxfJo0KN8xJ3E
ivLojbQLpO0U1oHkbvDh6iwj/Jr1oTzLVWjdQkBhvy8no4yCrQbOdDBnDHtq5ct3
nkeCHsQMbVYKGpAJI3yzaOqbIsL4beJJKzHExHw0cF6CBbktNRrBmIyfv9rfN7SX
keeVyC4A3ZQd1drW42rg8LeJooicnN1K7EqBkk0eSjABlW6+6txkyFr32vwIFkWV
p7LXwrdZdzSXL1n/1Rlbv3OQpHkrFiU8+hv/z0NetqKyEz3NMQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJe8pAP2xIUZmn666FFlMT5W8uhfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmVmZjY5NGQtMWNhMi0z
YjRjLTkyOGItMjE2ZjMzMTk2ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEHg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD4AWk9Ro8RhnAEstAV+amhSPspe+h8QA+fZ+zL3CehrHSOXPdED
xUTnjRbuU1ulwsVK02A53jfZd8QaqPpsc+Vnh9jcoeUVhVct/bnfIXoGvtYBonXt
iatfI+0O/6QpQlrfR/jCdL6KG5fJ6KJg9Qax4JQmDTiBNADxNqMAnJEoMc8EtmO9
b/q+SdeB7DSRR6PNgvGOp3UrUE8/+BtoYCsdNQFYHmxhY0A+qv0IJXpGW312W2nD
jQMhhWkwj6bxtfSmLfetKjxEB+NCIl7YYHjeStViQGbbOOzFeIYY+C1X0EEnlKsL
HWk83tPFJEGLxajCUg/Xa9OrUuTnWkACkhw=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:09:22 2026 by rpki-client