Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a2202de2-2aea-3fb9-8c47-c0d09ba47560.roa
File:                     a2202de2-2aea-3fb9-8c47-c0d09ba47560.roa (raw, json)
Hash identifier:          9NCJFhGkugDvnqz4jh2gQh0q4BIN6x2pv7cKyIYa6E4=
Subject key identifier:   6B:02:4B:9B:F6:7C:87:0D:8B:8F:CD:9D:FF:48:1B:F6:EA:BF:25:79
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11AD05055AE416487EAF500
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a2202de2-2aea-3fb9-8c47-c0d09ba47560.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:5ce0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:d0:50:55:ae:41:64:87:ea:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=d4e1e3fd-0108-4848-b24d-ecbb5214ddc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:dd:a6:52:dd:f8:fc:67:0b:fc:07:fe:f3:
                    c6:ff:7d:58:fc:2f:19:5f:96:cc:6f:00:eb:5a:27:
                    80:b6:6b:3a:58:26:67:d6:8e:56:cb:5b:b9:96:c3:
                    19:7c:7a:de:c8:e0:df:a1:b6:bf:26:e1:1f:93:2b:
                    69:5a:b8:20:eb:8f:a1:3c:0a:ed:c4:b8:72:dc:c5:
                    a5:a0:67:2c:38:fd:93:14:13:33:48:0e:3e:b3:61:
                    14:f3:e0:81:68:77:87:10:c5:b5:e3:74:5c:87:d2:
                    f5:63:5b:44:7f:91:89:c8:76:b0:60:14:48:cf:f0:
                    f3:a0:ae:93:d6:13:a1:c7:53:24:41:15:03:65:8b:
                    8a:31:c8:48:53:4c:08:54:ad:80:f7:1d:46:96:4c:
                    a7:48:ab:23:04:0a:3c:58:f5:0c:40:d8:dc:b4:c9:
                    c4:68:dc:68:8d:bc:21:5d:ef:99:80:18:c5:3c:95:
                    f9:9e:72:74:b6:28:aa:47:55:df:1d:0d:e3:07:e2:
                    57:8d:6a:29:62:57:91:a8:91:f3:80:d7:fd:6a:19:
                    00:0f:fc:dc:5f:8e:61:63:ad:64:fe:06:6e:ed:9e:
                    a3:2d:5b:12:bf:62:14:ad:55:ab:80:4d:83:08:a7:
                    a0:5f:e9:c9:1f:bd:50:26:6b:13:13:87:d6:5e:c0:
                    b8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:02:4B:9B:F6:7C:87:0D:8B:8F:CD:9D:FF:48:1B:F6:EA:BF:25:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a2202de2-2aea-3fb9-8c47-c0d09ba47560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5ce0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f7:74:6d:1a:f4:5a:84:e1:e3:0a:7f:91:d0:60:b4:e2:9c:
         c4:f5:be:dc:e7:67:97:87:91:37:e2:b9:f2:6f:7a:1b:6f:63:
         43:48:e2:82:17:d2:32:06:e0:cd:af:0e:ac:6c:6c:29:92:ea:
         68:b0:89:90:8e:87:e5:91:26:68:af:3e:12:df:6c:85:0a:6a:
         9c:a6:94:e2:de:10:93:50:e4:9d:18:db:dd:b8:47:63:71:46:
         2d:4d:a6:f9:33:cb:34:94:d7:82:4b:a7:b9:38:3f:9f:33:ae:
         f8:b0:d1:74:17:17:e4:fb:fd:a6:42:29:2a:f9:dc:6d:2b:fd:
         ba:0f:bb:16:15:25:fd:c5:75:de:d0:61:9e:33:47:9e:7b:9f:
         76:ae:4c:8b:bd:d9:98:78:1a:65:bf:b7:58:c8:7a:e1:66:16:
         b8:83:a4:45:a3:b2:ce:d9:e5:ce:f0:7c:9f:07:e0:ce:13:44:
         e4:2f:1c:bc:ff:70:07:3f:95:50:c5:ec:36:6f:08:1a:9f:46:
         81:09:c8:fd:17:63:f3:ac:14:ac:23:6a:93:78:d7:42:db:73:
         4f:81:05:cf:e5:3c:03:dd:76:93:a3:13:48:76:b8:cb:a9:0a:
         76:78:14:ea:05:ee:d8:b7:c1:a3:21:66:f4:03:73:b5:b5:b3:
         cd:9d:11:20
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2hGtBQVa5BZIfq9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
ZDRlMWUzZmQtMDEwOC00ODQ4LWIyNGQtZWNiYjUyMTRkZGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd3dplLd+PxnC/wH/vPG/31Y/C8ZX5bMbwDr
WieAtms6WCZn1o5Wy1u5lsMZfHreyODfoba/JuEfkytpWrgg64+hPArtxLhy3MWl
oGcsOP2TFBMzSA4+s2EU8+CBaHeHEMW143Rch9L1Y1tEf5GJyHawYBRIz/DzoK6T
1hOhx1MkQRUDZYuKMchIU0wIVK2A9x1GlkynSKsjBAo8WPUMQNjctMnEaNxojbwh
Xe+ZgBjFPJX5nnJ0tiiqR1XfHQ3jB+JXjWopYleRqJHzgNf9ahkAD/zcX45hY61k
/gZu7Z6jLVsSv2IUrVWrgE2DCKegX+nJH71QJmsTE4fWXsC4oQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGsCS5v2fIcNi4/Nnf9IG/bqvyV5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTIyMDJkZTItMmFlYS0z
ZmI5LThjNDctYzBkMDliYTQ3NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFzg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACz3dG0a9FqE4eMKf5HQYLTinMT1vtznZ5eHkTfiufJvehtvY0NI
4oIX0jIG4M2vDqxsbCmS6miwiZCOh+WRJmivPhLfbIUKapymlOLeEJNQ5J0Y2924
R2NxRi1NpvkzyzSU14JLp7k4P58zrviw0XQXF+T7/aZCKSr53G0r/boPuxYVJf3F
dd7QYZ4zR557n3auTIu92Zh4GmW/t1jIeuFmFriDpEWjss7Z5c7wfJ8H4M4TROQv
HLz/cAc/lVDF7DZvCBqfRoEJyP0XY/OsFKwjapN410Lbc0+BBc/lPAPddpOjE0h2
uMupCnZ4FOoF7ti3waMhZvQDc7W1s82dESA=
-----END CERTIFICATE-----
Generated at Wed May 13 03:54:11 2026 by rpki-client