Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/777bd38f-1c67-375f-8205-dbac4f884106.roa
File:                     777bd38f-1c67-375f-8205-dbac4f884106.roa (raw, json)
Hash identifier:          Wgff0n4LFQcpvB26tKVdqqd69J0Rotjstom5ti1228M=
Subject key identifier:   16:21:8E:F1:85:A5:36:D9:00:21:7F:13:C8:41:77:CA:96:E2:63:D8
Certificate issuer:       /CN=00cce351-050e-4c52-bceb-c8ccc4c6257e
Certificate serial:       010D0C9F4328584D9FB58C2A52BFD1BBF882FB80
Authority key identifier: BD:6D:F5:00:E5:E2:97:6C:A0:10:0A:95:BE:7D:71:57:FF:CD:84:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/777bd38f-1c67-375f-8205-dbac4f884106.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     11019
IP address blocks:        2604:cac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/00cce351-050e-4c52-bceb-c8ccc4c6257e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/00cce351-050e-4c52-bceb-c8ccc4c6257e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:8c:2a:52:bf:d1:bb:f8:82:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cce351-050e-4c52-bceb-c8ccc4c6257e
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=849e8998-74cf-483f-8b59-36993b4d246d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:5b:76:0d:52:6a:cb:c8:b5:55:f6:49:cc:
                    06:4b:ed:26:66:03:b8:07:b0:03:d7:50:f3:ab:1f:
                    85:2a:61:66:06:6c:e3:35:8a:9f:ad:ae:66:4b:df:
                    0b:e7:aa:2d:2f:cf:95:a1:8a:f2:18:90:ad:7c:b1:
                    ef:7c:7d:f3:f0:d4:1c:94:4b:15:00:c5:91:80:12:
                    80:8f:ac:16:0e:d2:98:05:bd:3e:64:c7:e3:23:e7:
                    3a:cc:65:56:6c:e8:17:f6:84:3e:6c:2f:be:f7:94:
                    d1:fe:9f:a6:9f:bf:08:3b:9d:ab:75:13:d7:16:6d:
                    7c:d3:4c:51:b6:73:44:5a:8d:4c:fc:c1:aa:75:81:
                    45:79:ec:ce:1d:34:d3:27:b4:09:9d:f0:22:b6:d8:
                    60:4b:bd:ee:89:c6:12:33:f1:b0:ff:03:95:80:30:
                    6a:fb:fe:66:cf:4b:b4:bb:bb:30:ac:74:11:57:e2:
                    db:30:5b:25:d2:88:e4:c1:9c:52:ee:5e:a9:cb:28:
                    f6:67:ca:b4:f4:cd:b8:9e:d1:bd:cc:5d:22:c2:e7:
                    72:fb:87:4b:83:67:ba:71:cb:80:8f:6c:36:81:23:
                    0e:e9:94:4e:dd:e8:8a:5a:5a:3e:9c:06:85:80:93:
                    27:2d:13:10:69:26:44:63:ae:74:39:c0:0f:58:2f:
                    a9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:21:8E:F1:85:A5:36:D9:00:21:7F:13:C8:41:77:CA:96:E2:63:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/777bd38f-1c67-375f-8205-dbac4f884106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/00cce351-050e-4c52-bceb-c8ccc4c6257e.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6D:F5:00:E5:E2:97:6C:A0:10:0A:95:BE:7D:71:57:FF:CD:84:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:87:2e:7c:e2:8e:f5:b0:9d:d7:5d:b6:8f:93:88:da:56:f5:
         28:3b:eb:2a:94:64:5c:d4:03:b5:60:f8:af:65:f6:1c:e9:85:
         18:1c:90:75:dc:57:97:34:4d:50:a7:be:58:86:89:de:7b:30:
         75:6b:cc:e5:fa:21:0f:13:4a:f3:6e:19:6b:2c:ba:db:32:d4:
         9b:5e:f1:18:e1:f4:46:27:8a:55:e1:cf:81:b9:d7:be:13:de:
         3d:09:6e:e7:89:a2:66:2e:b2:60:05:db:63:a7:f2:54:cf:c9:
         b6:ef:bb:55:11:c4:d5:37:d3:be:e4:25:7c:8a:90:9d:c0:e6:
         67:06:bc:18:04:52:a1:d3:f4:82:78:22:9c:17:c2:f0:b2:3d:
         22:39:7a:e7:46:95:21:13:d0:9c:80:1f:45:5f:49:00:73:05:
         7f:14:4a:8f:5d:74:a3:4e:f0:29:e2:5a:c4:8e:e0:d6:be:b6:
         80:77:89:72:10:ba:1c:0d:58:b3:5c:b8:50:28:f5:2b:d8:d0:
         62:5b:d7:93:88:0b:ac:5d:0d:77:e2:cb:37:ca:60:0a:95:fc:
         68:06:4b:cc:80:86:7b:0a:fe:ba:18:b9:70:da:45:18:40:fe:
         5e:6b:69:7e:ea:08:f3:d5:fb:5b:13:bf:31:30:0c:cb:a3:24:
         6b:a4:e1:ea
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2ftYwqUr/Ru/iC+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBjY2UzNTEtMDUwZS00YzUyLWJjZWItYzhjY2M0YzYy
NTdlMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
ODQ5ZTg5OTgtNzRjZi00ODNmLThiNTktMzY5OTNiNGQyNDZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAFbdg1SasvItVX2ScwGS+0mZgO4B7AD11Dz
qx+FKmFmBmzjNYqfra5mS98L56otL8+VoYryGJCtfLHvfH3z8NQclEsVAMWRgBKA
j6wWDtKYBb0+ZMfjI+c6zGVWbOgX9oQ+bC++95TR/p+mn78IO52rdRPXFm1800xR
tnNEWo1M/MGqdYFFeezOHTTTJ7QJnfAitthgS73uicYSM/Gw/wOVgDBq+/5mz0u0
u7swrHQRV+LbMFsl0ojkwZxS7l6pyyj2Z8q09M24ntG9zF0iwudy+4dLg2e6ccuA
j2w2gSMO6ZRO3eiKWlo+nAaFgJMnLRMQaSZEY650OcAPWC+p5QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBYhjvGFpTbZACF/E8hBd8qW4mPYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wMGNj
ZTM1MS0wNTBlLTRjNTItYmNlYi1jOGNjYzRjNjI1N2UvNzc3YmQzOGYtMWM2Ny0z
NzVmLTgyMDUtZGJhYzRmODg0MTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDBjY2UzNTEtMDUwZS00YzUyLWJj
ZWItYzhjY2M0YzYyNTdlLzAwY2NlMzUxLTA1MGUtNGM1Mi1iY2ViLWM4Y2NjNGM2
MjU3ZS5jcmwwHwYDVR0jBBgwFoAUvW31AOXil2ygEAqVvn1xV//NhPUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8wMGNjZTM1MS0wNTBlLTRjNTItYmNlYi1jOGNj
YzRjNjI1N2UuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTKwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBUhy584o71sJ3XXbaPk4jaVvUoO+sqlGRc1AO1YPivZfYc6YUYHJB1
3FeXNE1Qp75YhoneezB1a8zl+iEPE0rzbhlrLLrbMtSbXvEY4fRGJ4pV4c+Bude+
E949CW7niaJmLrJgBdtjp/JUz8m277tVEcTVN9O+5CV8ipCdwOZnBrwYBFKh0/SC
eCKcF8Lwsj0iOXrnRpUhE9CcgB9FX0kAcwV/FEqPXXSjTvAp4lrEjuDWvraAd4ly
ELocDVizXLhQKPUr2NBiW9eTiAusXQ134ss3ymAKlfxoBkvMgIZ7Cv66GLlw2kUY
QP5ea2l+6gjz1ftbE78xMAzLoyRrpOHq
-----END CERTIFICATE-----
Generated at Wed May 13 05:23:22 2026 by rpki-client