Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aecc9c52-f551-3d50-8bba-8f9b37bf779b.roa
File:                     aecc9c52-f551-3d50-8bba-8f9b37bf779b.roa (raw, json)
Hash identifier:          mQES/xwlxDRtfrZ4t1PtohwW9julY90fKGq2aC/jtuA=
Subject key identifier:   B8:26:79:DB:A3:09:1C:1F:12:1D:1F:C8:8F:DA:C3:16:7C:73:01:29
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584D143D81B96C025FA2C429E800
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aecc9c52-f551-3d50-8bba-8f9b37bf779b.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     54113
IP address blocks:        157.5.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:81:b9:6c:02:5f:a2:c4:29:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=d324040a-8b9a-4c1a-8e30-06c59c387a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:99:9a:68:7a:62:2f:9f:12:f0:9e:0b:01:02:
                    8c:89:9f:e5:bd:f8:66:ab:99:ea:ff:fe:53:51:ab:
                    7e:00:8b:b2:fb:c1:37:eb:dd:ca:09:63:2a:5c:c1:
                    98:f7:94:98:20:ea:db:3d:9e:1c:c5:66:2d:bc:1e:
                    59:c1:9f:8f:d0:63:be:e1:58:d3:4a:4a:be:97:c5:
                    a4:0c:2e:f0:d3:74:50:31:1b:83:6d:72:af:f2:ce:
                    03:63:b6:98:bb:9a:51:d7:f2:d0:76:f6:75:29:a1:
                    b4:48:13:bf:c3:b1:c4:13:0e:07:6e:e7:90:d2:12:
                    f5:e8:c0:6f:b0:c8:9c:0d:e1:40:4f:7f:44:a4:3b:
                    c8:4f:ac:f2:51:ce:5f:79:55:f7:eb:e1:c8:cb:1b:
                    64:83:86:67:37:c0:3f:f5:bd:78:17:2c:90:bf:77:
                    c1:0b:5d:48:33:77:3a:eb:9a:5a:40:e7:2f:81:6a:
                    9a:61:10:14:eb:04:c6:77:d5:c2:0f:e2:6f:18:c0:
                    29:87:dc:8e:88:41:35:93:58:9a:2b:2e:2e:38:cd:
                    82:c2:55:27:75:23:cf:74:9d:cf:ae:77:fe:13:06:
                    66:7e:89:e8:e5:a3:10:13:d5:27:50:c6:7b:09:7d:
                    dd:6d:c6:fa:18:91:18:42:bc:70:a2:95:4e:76:e6:
                    d0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:26:79:DB:A3:09:1C:1F:12:1D:1F:C8:8F:DA:C3:16:7C:73:01:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aecc9c52-f551-3d50-8bba-8f9b37bf779b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:77:75:fc:10:af:6d:c0:ce:76:fe:99:44:3d:00:57:87:54:
         78:a4:07:db:db:d3:c9:8b:6a:65:b4:88:06:c2:44:7f:91:94:
         6c:b3:ec:f3:c6:ac:f8:a0:07:49:f9:21:98:a7:2f:af:17:36:
         21:27:b0:85:12:9c:8a:dc:f3:01:25:2d:e9:46:ba:b5:02:1e:
         2a:fc:76:f9:5d:54:e1:26:87:e9:be:de:a8:2d:79:c0:20:65:
         5b:29:a7:e2:55:9a:cf:3d:64:1d:a4:d8:77:57:2a:de:21:c1:
         80:e7:ab:c7:08:18:45:81:6e:08:a2:0e:9a:af:20:85:28:50:
         cc:4e:4e:e7:36:a7:99:b6:45:f9:61:5d:94:d3:7d:cf:30:13:
         fc:82:53:dc:1a:02:ec:2b:2a:e9:e7:06:7a:d8:6e:09:d6:7a:
         25:55:f8:57:9e:05:7e:a8:af:d2:69:a1:a1:9d:a0:d9:a7:2e:
         72:5e:e9:0c:fe:70:27:81:5c:92:8a:8f:ea:a6:73:f3:4f:60:
         15:25:1b:27:ab:f2:6a:5e:67:a3:93:26:d1:a7:d6:a1:43:68:
         17:4f:71:98:9c:de:61:72:38:65:5c:a0:33:09:05:8c:c6:a0:
         0d:e5:83:94:3f:ef:34:18:03:2d:d2:96:95:c3:1d:59:1a:cb:
         ce:1b:53:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYG5bAJfosQp6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
ZDMyNDA0MGEtOGI5YS00YzFhLThlMzAtMDZjNTljMzg3YTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJmaaHpiL58S8J4LAQKMiZ/lvfhmq5nq//5T
Uat+AIuy+8E3693KCWMqXMGY95SYIOrbPZ4cxWYtvB5ZwZ+P0GO+4VjTSkq+l8Wk
DC7w03RQMRuDbXKv8s4DY7aYu5pR1/LQdvZ1KaG0SBO/w7HEEw4HbueQ0hL16MBv
sMicDeFAT39EpDvIT6zyUc5feVX36+HIyxtkg4ZnN8A/9b14FyyQv3fBC11IM3c6
65paQOcvgWqaYRAU6wTGd9XCD+JvGMAph9yOiEE1k1iaKy4uOM2CwlUndSPPdJ3P
rnf+EwZmfono5aMQE9UnUMZ7CX3dbcb6GJEYQrxwopVOdubQHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLgmedujCRwfEh0fyI/awxZ8cwEpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYWVjYzljNTItZjU1MS0z
ZDUwLThiYmEtOGY5YjM3YmY3NzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF93dfwQr23Aznb+mUQ9AFeHVHikB9vb08mLamW0iAbCRH+RlGyz7PPG
rPigB0n5IZinL68XNiEnsIUSnIrc8wElLelGurUCHir8dvldVOEmh+m+3qgtecAg
ZVspp+JVms89ZB2k2HdXKt4hwYDnq8cIGEWBbgiiDpqvIIUoUMxOTuc2p5m2Rflh
XZTTfc8wE/yCU9waAuwrKunnBnrYbgnWeiVV+FeeBX6or9JpoaGdoNmnLnJe6Qz+
cCeBXJKKj+qmc/NPYBUlGyer8mpeZ6OTJtGn1qFDaBdPcZic3mFyOGVcoDMJBYzG
oA3lg5Q/7zQYAy3SlpXDHVkay84bU3o=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:25:57 2026 by rpki-client