Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/10a4ae85-a3a7-3e82-8fe2-4844df5f5016.roa
File:                     10a4ae85-a3a7-3e82-8fe2-4844df5f5016.roa (raw, json)
Hash identifier:          cEkcZcE8F+5DPZlSKb8HKm3zG/NEUm1LOTr3yyjFo4Y=
Subject key identifier:   61:AB:85:A7:FA:45:6C:13:9C:56:C2:70:28:4F:7F:90:4B:F8:34:10
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11ADAA990520DF9424B5E20
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/10a4ae85-a3a7-3e82-8fe2-4844df5f5016.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:5740::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:da:a9:90:52:0d:f9:42:4b:5e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=9e69273e-d37a-4306-9d29-290fc58dd5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7c:5d:97:b6:17:48:b6:47:38:fa:59:1a:53:
                    ca:7c:5f:c4:24:19:30:b2:ae:4e:b9:b0:db:72:0f:
                    73:0a:38:88:e9:6b:6e:5c:04:6f:3f:08:9e:3d:c5:
                    5b:b6:8e:00:18:cf:d1:d7:f6:75:93:2d:dd:a8:4c:
                    7b:74:d3:46:66:b3:69:c5:4c:68:54:36:51:06:ba:
                    16:7f:74:7b:e7:af:45:b0:cc:a7:d6:ed:2b:97:71:
                    e4:0a:88:8b:0a:7c:84:59:97:ec:5b:99:f4:17:0b:
                    8a:06:18:f8:c1:9c:ad:e7:f2:93:bf:16:6d:9e:55:
                    e7:9c:39:92:3b:72:d5:07:20:51:d3:4e:68:12:ed:
                    c9:65:e0:8c:aa:98:15:8c:ca:ac:da:0c:a6:3b:90:
                    fb:c5:c7:58:20:ed:d9:9b:14:89:b2:b1:8e:c9:d0:
                    31:6a:bc:f3:32:dd:cf:7f:84:be:b8:be:5b:46:e1:
                    ce:a8:65:12:11:bd:62:ad:af:3c:12:b1:bf:50:56:
                    bb:b7:16:63:09:ea:55:23:71:78:1f:a1:dc:d3:1b:
                    52:68:a7:b4:cd:4d:c1:22:a3:28:1f:a4:b7:4c:83:
                    a9:7a:ac:f3:8d:a6:72:f7:54:3e:c4:ab:77:14:cd:
                    b7:64:23:8a:84:71:f3:42:6a:52:4e:ab:0e:a7:af:
                    98:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AB:85:A7:FA:45:6C:13:9C:56:C2:70:28:4F:7F:90:4B:F8:34:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/10a4ae85-a3a7-3e82-8fe2-4844df5f5016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5740::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:12:d3:74:84:e1:7d:3b:31:f7:be:ff:9f:77:6e:f4:ca:e4:
         f7:49:fe:02:f9:58:92:9d:78:e2:0d:f1:7c:ae:a7:c1:cf:06:
         3d:b2:48:12:00:5c:bb:01:36:26:e6:3c:1d:d1:a2:24:1d:6e:
         c4:f0:8b:83:55:b7:ec:95:4e:7e:a8:21:ac:ee:67:9a:0f:5c:
         94:01:c6:a1:72:f4:c3:99:33:98:ae:15:1d:bd:77:76:de:d7:
         57:d3:2c:14:88:c1:20:78:22:1f:b3:cf:ea:31:03:d3:7f:70:
         cd:23:8a:3c:61:8f:27:47:4e:c9:0e:8f:30:c6:34:31:be:90:
         7b:fc:50:84:b0:25:99:c3:26:8d:a5:a1:16:95:37:84:af:75:
         23:05:82:d7:b2:c1:eb:54:64:d2:25:65:da:81:f0:dc:eb:05:
         0d:ce:6d:f2:ef:df:0d:38:37:1d:07:d7:1b:dd:d0:99:bb:67:
         9f:44:76:2b:46:31:e7:a7:45:46:18:56:9b:92:aa:1b:09:aa:
         7f:24:9b:d7:bb:6a:d1:c0:62:9d:32:bc:d1:67:21:91:31:ea:
         b4:b1:a8:05:c8:4e:f1:1e:49:53:8a:38:0d:35:c8:d3:67:f3:
         b9:6f:69:22:65:e6:4e:0d:81:f5:23:1f:ee:75:15:d7:88:31:
         ab:5a:4f:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2hGtqpkFIN+UJLXiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
OWU2OTI3M2UtZDM3YS00MzA2LTlkMjktMjkwZmM1OGRkNWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Hxdl7YXSLZHOPpZGlPKfF/EJBkwsq5OubDb
cg9zCjiI6WtuXARvPwiePcVbto4AGM/R1/Z1ky3dqEx7dNNGZrNpxUxoVDZRBroW
f3R7569FsMyn1u0rl3HkCoiLCnyEWZfsW5n0FwuKBhj4wZyt5/KTvxZtnlXnnDmS
O3LVByBR005oEu3JZeCMqpgVjMqs2gymO5D7xcdYIO3ZmxSJsrGOydAxarzzMt3P
f4S+uL5bRuHOqGUSEb1ira88ErG/UFa7txZjCepVI3F4H6Hc0xtSaKe0zU3BIqMo
H6S3TIOpeqzzjaZy91Q+xKt3FM23ZCOKhHHzQmpSTqsOp6+YVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGGrhaf6RWwTnFbCcChPf5BL+DQQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMTBhNGFlODUtYTNhNy0z
ZTgyLThmZTItNDg0NGRmNWY1MDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFdA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA8S03SE4X07Mfe+/593bvTK5PdJ/gL5WJKdeOIN8Xyup8HPBj2y
SBIAXLsBNibmPB3RoiQdbsTwi4NVt+yVTn6oIazuZ5oPXJQBxqFy9MOZM5iuFR29
d3be11fTLBSIwSB4Ih+zz+oxA9N/cM0jijxhjydHTskOjzDGNDG+kHv8UISwJZnD
Jo2loRaVN4SvdSMFgteywetUZNIlZdqB8NzrBQ3ObfLv3w04Nx0H1xvd0Jm7Z59E
ditGMeenRUYYVpuSqhsJqn8km9e7atHAYp0yvNFnIZEx6rSxqAXITvEeSVOKOA01
yNNn87lvaSJl5k4NgfUjH+51FdeIMataTwU=
-----END CERTIFICATE-----
Generated at Wed May 13 04:08:19 2026 by rpki-client