Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a4a2a398-bf7f-3236-8a6e-74d106df7b3b.roa
File:                     a4a2a398-bf7f-3236-8a6e-74d106df7b3b.roa (raw, json)
Hash identifier:          lbUhFeCfIN7/0IazJa45WuVZUoiADkyyOit4quE60M4=
Subject key identifier:   00:AB:3A:C5:2B:4C:1C:CC:54:6F:4B:F9:28:D4:B2:6F:26:70:C4:9E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584DA11ADA58CE8582822F62E680
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a4a2a398-bf7f-3236-8a6e-74d106df7b3b.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     54113
IP address blocks:        2607:8940:4ae0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:da:58:ce:85:82:82:2f:62:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=02832280-ecb3-460a-bf93-baef2f9baae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3c:96:2b:1b:7e:57:48:49:96:36:b0:e1:a2:
                    c8:a4:70:cf:49:e9:30:8f:ec:bf:4d:32:19:e8:ac:
                    81:1c:47:cf:da:58:f2:dc:64:dd:e3:7b:59:e1:d9:
                    84:f9:63:1f:d0:9c:81:f1:1e:3c:ce:8c:39:18:9a:
                    68:07:66:67:00:33:ff:43:75:d4:a3:6f:c6:cf:36:
                    80:56:4d:f4:38:e0:b6:a2:38:a5:54:0f:49:f6:31:
                    11:79:98:9e:bb:6c:d5:63:e9:8e:18:51:1b:85:f8:
                    ad:a3:89:f1:66:c0:75:d8:a1:99:55:48:d8:a7:94:
                    bd:09:45:47:7b:44:97:83:2d:6d:91:e5:42:de:de:
                    ab:35:49:ca:9a:6d:db:7c:01:c6:68:87:fd:c5:43:
                    dd:2f:bb:14:e5:af:1d:d3:6e:c9:cd:81:a6:dc:c3:
                    c2:89:19:68:75:7b:c9:01:a3:18:c3:a4:98:1a:d1:
                    51:f3:a8:e5:31:30:fa:36:76:cb:0e:25:6b:6e:a7:
                    cb:67:ea:a6:f7:39:33:f6:74:9a:fc:83:29:44:33:
                    6f:c3:08:81:27:22:e7:02:9c:86:12:d8:29:a5:b9:
                    f3:44:27:a8:57:54:7f:4d:e3:c8:75:db:ab:ec:2e:
                    45:52:91:35:2b:07:4f:9d:10:50:c9:57:f2:10:8d:
                    0c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AB:3A:C5:2B:4C:1C:CC:54:6F:4B:F9:28:D4:B2:6F:26:70:C4:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a4a2a398-bf7f-3236-8a6e-74d106df7b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4ae0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:a3:97:69:d9:cf:bb:43:fb:93:73:7b:d9:11:cd:dd:25:d6:
         2c:ab:b0:d7:5f:02:f7:c7:73:27:8b:82:ab:c9:64:68:2c:ed:
         5b:bc:12:82:84:a6:b1:f3:38:39:17:8f:be:9c:ff:85:28:a4:
         c9:31:ec:67:3c:23:5d:04:b7:9f:8e:9b:ed:ac:56:c8:95:51:
         15:6c:24:a7:6d:98:7a:de:52:93:cf:74:3b:06:a2:80:58:f9:
         df:14:e6:ee:db:28:1b:22:6a:65:ec:5e:1b:89:7f:02:40:7b:
         5b:f2:80:fe:15:9e:a3:11:9a:b8:4a:cb:ef:3d:ad:07:1b:01:
         d4:58:83:3c:bc:8d:33:fa:c6:d3:e5:97:c1:fc:eb:5d:07:51:
         3c:bc:3a:2f:17:6f:cd:c3:bf:d8:d9:d0:70:fe:c2:97:e2:f4:
         21:bf:15:36:67:9a:79:15:ea:8c:83:b9:66:32:53:68:5e:99:
         21:6a:b6:3b:69:04:a8:c5:67:37:86:af:94:ce:c7:cb:a7:70:
         62:6c:bc:ef:6e:3a:23:6a:e9:e7:37:53:d3:b9:97:26:cd:2d:
         8e:d4:9b:22:aa:ed:14:10:9c:10:e2:0b:25:eb:45:22:f3:09:
         42:77:bc:5b:91:9a:5c:63:cd:d5:db:fa:05:0d:a1:8f:c9:17:
         51:22:d8:ab
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2hGtpYzoWCgi9i5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
MDI4MzIyODAtZWNiMy00NjBhLWJmOTMtYmFlZjJmOWJhYWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjyWKxt+V0hJljaw4aLIpHDPSekwj+y/TTIZ
6KyBHEfP2ljy3GTd43tZ4dmE+WMf0JyB8R48zow5GJpoB2ZnADP/Q3XUo2/GzzaA
Vk30OOC2ojilVA9J9jEReZieu2zVY+mOGFEbhfito4nxZsB12KGZVUjYp5S9CUVH
e0SXgy1tkeVC3t6rNUnKmm3bfAHGaIf9xUPdL7sU5a8d027JzYGm3MPCiRlodXvJ
AaMYw6SYGtFR86jlMTD6NnbLDiVrbqfLZ+qm9zkz9nSa/IMpRDNvwwiBJyLnApyG
EtgppbnzRCeoV1R/TePIddur7C5FUpE1KwdPnRBQyVfyEI0MKQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFACrOsUrTBzMVG9L+SjUsm8mcMSeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTRhMmEzOTgtYmY3Zi0z
MjM2LThhNmUtNzRkMTA2ZGY3YjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQErg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIGjl2nZz7tD+5Nze9kRzd0l1iyrsNdfAvfHcyeLgqvJZGgs7Vu8
EoKEprHzODkXj76c/4UopMkx7Gc8I10Et5+Om+2sVsiVURVsJKdtmHreUpPPdDsG
ooBY+d8U5u7bKBsiamXsXhuJfwJAe1vygP4VnqMRmrhKy+89rQcbAdRYgzy8jTP6
xtPll8H8610HUTy8Oi8Xb83Dv9jZ0HD+wpfi9CG/FTZnmnkV6oyDuWYyU2hemSFq
tjtpBKjFZzeGr5TOx8uncGJsvO9uOiNq6ec3U9O5lybNLY7UmyKq7RQQnBDiCyXr
RSLzCUJ3vFuRmlxjzdXb+gUNoY/JF1Ei2Ks=
-----END CERTIFICATE-----
Generated at Wed May 13 04:13:59 2026 by rpki-client