Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/ddb14da2-2d01-3fd6-9848-cb8323faf421.roa
File:                     ddb14da2-2d01-3fd6-9848-cb8323faf421.roa (raw, json)
Hash identifier:          vUaGcPUERREWny1uHhz+ErQsBe6NMTDc7bFZYTY+L+g=
Subject key identifier:   23:0A:6F:BC:BB:F2:AF:0A:17:44:93:0C:7B:60:2B:76:AF:1D:31:83
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F4328584EC371C2563E54203EB7026600
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/ddb14da2-2d01-3fd6-9848-cb8323faf421.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     10126
IP address blocks:        2606:c00:8000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:c2:56:3e:54:20:3e:b7:02:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=1bfb3d3d-a5f6-4ffc-9d6d-c4a847406b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8c:a6:58:9c:6f:28:38:64:40:df:b0:a4:62:
                    d9:e2:0e:64:8b:8a:17:b9:d1:f8:87:7d:bb:87:72:
                    0d:16:5a:a2:d5:a4:86:99:2d:6d:cc:3f:20:ef:7b:
                    4a:85:6e:6e:31:2a:0c:1d:a8:f6:ca:23:38:12:cb:
                    16:e9:d8:c6:30:22:cc:84:3f:1d:8d:6d:b6:af:50:
                    87:6c:52:01:aa:47:c3:26:c7:00:6e:a6:08:e0:14:
                    05:39:de:d2:e4:fe:47:91:6b:66:4c:0b:67:3e:ba:
                    97:e6:ca:4a:4e:3f:86:d2:06:7f:20:ab:ec:03:d1:
                    7a:b5:0c:86:b1:d4:e9:f7:76:19:73:9a:a1:1c:3a:
                    c3:cb:4f:26:9c:21:6e:fd:a2:c8:7e:e0:86:1e:fb:
                    43:49:08:44:92:69:36:ed:b0:85:b0:95:96:b0:db:
                    ed:51:e6:fb:4d:f6:c1:9c:eb:b9:3a:34:aa:4d:1f:
                    18:54:b8:db:92:83:d1:5c:37:0a:0d:d7:a8:30:ce:
                    64:50:b3:e2:bf:ee:eb:5b:73:a1:19:2f:67:0f:ef:
                    90:06:55:22:17:52:12:70:4c:7f:5c:40:88:5b:45:
                    33:9d:b7:f8:10:36:3a:a7:97:ca:7d:02:71:a4:4d:
                    30:2e:c1:d8:26:88:a0:12:39:c4:2c:3f:aa:39:07:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0A:6F:BC:BB:F2:AF:0A:17:44:93:0C:7B:60:2B:76:AF:1D:31:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/ddb14da2-2d01-3fd6-9848-cb8323faf421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c00:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:45:fa:02:99:35:41:32:7e:1b:4a:1a:25:fc:3c:af:07:43:
         60:1e:79:aa:d4:d2:26:95:e9:13:70:96:47:71:c8:f5:b3:50:
         18:da:6d:ca:7a:cd:f7:ae:43:8c:d3:ce:ec:cc:52:1d:2e:60:
         a6:91:87:94:70:1c:a6:8f:b7:fc:12:23:48:35:59:75:70:54:
         e1:f3:1d:37:1d:2c:20:18:5b:ff:b5:51:a3:c3:e5:d0:9f:c2:
         29:2f:ec:91:fe:c4:84:e7:03:8d:b6:0e:8e:83:e4:f7:23:87:
         e7:da:af:eb:1b:20:e6:dc:c6:ec:74:f9:44:fe:c7:03:00:d5:
         4f:c4:9f:e9:c5:51:c8:7d:00:dd:3f:2c:d4:3a:de:1d:3c:46:
         23:4f:df:33:94:f0:72:28:62:69:49:64:14:ac:ae:97:38:84:
         3c:e4:d3:2a:f9:70:96:42:22:5c:bd:51:f0:46:11:6b:aa:5b:
         d0:19:3e:b4:93:39:c3:87:7e:d2:b8:e4:fd:49:c9:17:02:5e:
         15:25:64:2d:24:87:2b:92:42:f0:54:0d:e6:4a:c2:c4:71:3b:
         45:da:df:c5:bf:af:bd:6a:85:a8:f5:f3:17:c8:bb:37:47:fe:
         b8:5b:f9:ec:20:7c:25:78:bc:0c:3b:17:df:30:1c:cb:84:1d:
         44:0d:6b:1c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7DccJWPlQgPrcCZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzdjNGM2MmEtM2Y2ZC00YzFjLThiZGItMzcwNjI0NmNi
ZmQ2MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
MWJmYjNkM2QtYTVmNi00ZmZjLTlkNmQtYzRhODQ3NDA2Yjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IymWJxvKDhkQN+wpGLZ4g5ki4oXudH4h327
h3INFlqi1aSGmS1tzD8g73tKhW5uMSoMHaj2yiM4EssW6djGMCLMhD8djW22r1CH
bFIBqkfDJscAbqYI4BQFOd7S5P5HkWtmTAtnPrqX5spKTj+G0gZ/IKvsA9F6tQyG
sdTp93YZc5qhHDrDy08mnCFu/aLIfuCGHvtDSQhEkmk27bCFsJWWsNvtUeb7TfbB
nOu5OjSqTR8YVLjbkoPRXDcKDdeoMM5kULPiv+7rW3OhGS9nD++QBlUiF1IScEx/
XECIW0Uznbf4EDY6p5fKfQJxpE0wLsHYJoigEjnELD+qOQcvPwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCMKb7y78q8KF0STDHtgK3avHTGDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0
YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2MjQ2Y2JmZDYvZGRiMTRkYTItMmQwMS0z
ZmQ2LTk4NDgtY2I4MzIzZmFmNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzdjNGM2MmEtM2Y2ZC00YzFjLThi
ZGItMzcwNjI0NmNiZmQ2Lzc3YzRjNjJhLTNmNmQtNGMxYy04YmRiLTM3MDYyNDZj
YmZkNi5jcmwwHwYDVR0jBBgwFoAU4p3oDYbgi/0iz/5leJQg8L1y3xMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2
MjQ2Y2JmZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgYMAIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdkX6Apk1QTJ+G0oaJfw8rwdDYB55qtTSJpXpE3CWR3HI9bNQGNpt
ynrN965DjNPO7MxSHS5gppGHlHAcpo+3/BIjSDVZdXBU4fMdNx0sIBhb/7VRo8Pl
0J/CKS/skf7EhOcDjbYOjoPk9yOH59qv6xsg5tzG7HT5RP7HAwDVT8Sf6cVRyH0A
3T8s1DreHTxGI0/fM5TwcihiaUlkFKyulziEPOTTKvlwlkIiXL1R8EYRa6pb0Bk+
tJM5w4d+0rjk/UnJFwJeFSVkLSSHK5JC8FQN5krCxHE7Rdrfxb+vvWqFqPXzF8i7
N0f+uFv57CB8JXi8DDsX3zAcy4QdRA1rHA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:04:59 2026 by rpki-client