Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/777bd38f-1c67-375f-8205-dbac4f884106.roa
File:                     777bd38f-1c67-375f-8205-dbac4f884106.roa (raw, json)
Hash identifier:          tr1UQquAwO/HC+ao3OYcwPoeUlfdnPwuXlr1z9Z1Wrc=
Subject key identifier:   A1:20:BF:37:80:37:52:9E:70:E9:8E:D5:C9:4A:90:6B:22:65:7C:41
Certificate issuer:       /CN=00cce351-050e-4c52-bceb-c8ccc4c6257e
Certificate serial:       010D0C9F4328584F225D215E0D3F46EF4BA29440
Authority key identifier: BD:6D:F5:00:E5:E2:97:6C:A0:10:0A:95:BE:7D:71:57:FF:CD:84:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/777bd38f-1c67-375f-8205-dbac4f884106.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     11019
IP address blocks:        2604:cac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/00cce351-050e-4c52-bceb-c8ccc4c6257e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/00cce351-050e-4c52-bceb-c8ccc4c6257e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:21:5e:0d:3f:46:ef:4b:a2:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00cce351-050e-4c52-bceb-c8ccc4c6257e
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=aa2061df-de49-47c3-a2e1-069b7a5dc413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4a:0f:d2:ea:a8:c8:19:fd:c7:07:53:a3:8b:
                    16:e1:69:25:ed:1b:1e:6c:3f:ba:29:d0:a2:b7:2f:
                    ee:da:1f:ff:14:94:3f:4d:ca:20:a6:11:e6:54:35:
                    f8:c3:1b:b0:6f:41:e2:06:dd:37:ce:e7:97:81:82:
                    83:ca:86:a7:43:0d:8b:b0:59:10:e5:56:ab:77:74:
                    cf:08:80:51:e7:14:e6:e9:5a:d9:8c:0e:fb:f0:9f:
                    b9:2b:df:19:c6:cc:63:6d:f6:5b:f9:c1:ed:75:0b:
                    ab:ca:81:b6:43:5f:19:d5:5c:36:bb:54:86:a3:2d:
                    7f:73:82:3d:8d:60:71:12:28:f4:be:d8:fc:9d:ac:
                    ac:2b:f3:11:1a:dd:1e:2c:c1:77:65:f6:0f:f7:ea:
                    76:f0:5e:d8:c7:fc:93:8f:eb:4c:57:d5:77:ea:6a:
                    59:af:e2:5e:ee:2a:54:71:03:c2:c4:2c:a7:0d:ba:
                    f3:3c:fd:9d:44:02:7d:a9:13:59:a8:3d:34:69:63:
                    e1:3c:4d:2a:4e:f5:c0:d2:cb:47:f2:29:83:22:fb:
                    05:04:f3:2e:65:7b:f8:e4:52:32:0a:0d:b1:5c:1a:
                    b2:98:2d:8c:e5:1e:b3:c7:84:c3:de:b5:1b:4f:41:
                    c5:6b:b0:98:98:05:6a:93:38:9b:f5:53:f4:f1:c9:
                    b1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:20:BF:37:80:37:52:9E:70:E9:8E:D5:C9:4A:90:6B:22:65:7C:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/777bd38f-1c67-375f-8205-dbac4f884106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e/00cce351-050e-4c52-bceb-c8ccc4c6257e.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6D:F5:00:E5:E2:97:6C:A0:10:0A:95:BE:7D:71:57:FF:CD:84:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/00cce351-050e-4c52-bceb-c8ccc4c6257e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:0c:b5:66:09:16:15:ea:be:2e:26:d5:f2:bc:5d:8e:a7:69:
         46:11:e6:3e:7f:de:55:26:26:55:be:11:49:dd:1f:62:e7:9b:
         1d:e9:d9:1c:ae:d3:79:42:b2:1c:ec:c2:9b:e4:b8:27:97:04:
         7a:f9:68:08:79:e3:9e:09:4c:08:d7:c4:5e:92:ee:80:40:59:
         4c:ef:62:1b:9c:f6:4b:9d:bd:d7:a6:50:5a:22:67:25:cb:d0:
         0d:0e:cd:3f:3a:95:37:db:a8:fb:62:b4:1c:85:99:2a:0c:0d:
         6d:6c:6e:36:f6:c8:8e:33:e3:b3:07:68:c1:5e:50:ca:ab:7a:
         0d:35:0c:53:4e:df:ec:63:06:d7:33:50:17:25:4b:27:46:41:
         d1:86:97:db:1d:47:a2:c7:ce:a3:56:63:cc:8c:ff:be:40:d5:
         b4:53:9b:f5:a9:5e:1d:f7:5a:09:06:46:d8:2b:89:b5:76:fb:
         9f:52:0c:27:79:e8:31:c7:62:17:07:1b:01:d6:3f:79:7c:ea:
         52:60:49:c0:e3:33:b1:16:0b:0b:c5:3b:cc:3a:fc:37:86:64:
         32:f4:db:d9:a2:17:50:78:47:b0:47:3a:a9:09:a6:d6:4c:6d:
         28:f0:1d:4f:fe:8a:b1:8b:96:17:57:51:15:dc:47:94:de:c2:
         c6:db:27:98
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8iXSFeDT9G70uilEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBjY2UzNTEtMDUwZS00YzUyLWJjZWItYzhjY2M0YzYy
NTdlMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk
YWEyMDYxZGYtZGU0OS00N2MzLWEyZTEtMDY5YjdhNWRjNDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEoP0uqoyBn9xwdTo4sW4Wkl7RsebD+6KdCi
ty/u2h//FJQ/TcogphHmVDX4wxuwb0HiBt03zueXgYKDyoanQw2LsFkQ5Vard3TP
CIBR5xTm6VrZjA778J+5K98ZxsxjbfZb+cHtdQuryoG2Q18Z1Vw2u1SGoy1/c4I9
jWBxEij0vtj8naysK/MRGt0eLMF3ZfYP9+p28F7Yx/yTj+tMV9V36mpZr+Je7ipU
cQPCxCynDbrzPP2dRAJ9qRNZqD00aWPhPE0qTvXA0stH8imDIvsFBPMuZXv45FIy
Cg2xXBqymC2M5R6zx4TD3rUbT0HFa7CYmAVqkzib9VP08cmxgwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKEgvzeAN1KecOmO1clKkGsiZXxBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wMGNj
ZTM1MS0wNTBlLTRjNTItYmNlYi1jOGNjYzRjNjI1N2UvNzc3YmQzOGYtMWM2Ny0z
NzVmLTgyMDUtZGJhYzRmODg0MTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDBjY2UzNTEtMDUwZS00YzUyLWJj
ZWItYzhjY2M0YzYyNTdlLzAwY2NlMzUxLTA1MGUtNGM1Mi1iY2ViLWM4Y2NjNGM2
MjU3ZS5jcmwwHwYDVR0jBBgwFoAUvW31AOXil2ygEAqVvn1xV//NhPUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8wMGNjZTM1MS0wNTBlLTRjNTItYmNlYi1jOGNj
YzRjNjI1N2UuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTKwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBqDLVmCRYV6r4uJtXyvF2Op2lGEeY+f95VJiZVvhFJ3R9i55sd6dkc
rtN5QrIc7MKb5LgnlwR6+WgIeeOeCUwI18Reku6AQFlM72IbnPZLnb3XplBaImcl
y9ANDs0/OpU326j7YrQchZkqDA1tbG429siOM+OzB2jBXlDKq3oNNQxTTt/sYwbX
M1AXJUsnRkHRhpfbHUeix86jVmPMjP++QNW0U5v1qV4d91oJBkbYK4m1dvufUgwn
eegxx2IXBxsB1j95fOpSYEnA4zOxFgsLxTvMOvw3hmQy9NvZohdQeEewRzqpCabW
TG0o8B1P/oqxi5YXV1EV3EeU3sLG2yeY
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:48:44 2026 by rpki-client