Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ffe8475-c7c7-3bfa-85cd-70fd14896814.roa
File:                     0ffe8475-c7c7-3bfa-85cd-70fd14896814.roa (raw, json)
Hash identifier:          xxLBCmDlUhwkR5QppL/aJCz2/ukFb5Kp71hQcdXhZSo=
Subject key identifier:   E1:39:76:13:72:7E:58:BB:9D:2B:7D:BB:B8:03:DA:D2:E1:90:83:11
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E815FAA9FF347A12209A17100
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ffe8475-c7c7-3bfa-85cd-70fd14896814.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     54113
IP address blocks:        2607:8940:5600::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:aa:9f:f3:47:a1:22:09:a1:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=04a20a81-b57c-41c5-af28-a9251cadd119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ee:97:de:95:d6:4e:96:b7:8b:14:da:d7:b1:
                    63:89:38:c0:9a:ec:cc:3e:49:24:11:67:c4:61:a1:
                    53:2c:90:5a:ff:05:7d:6c:b6:e1:73:17:29:55:cb:
                    ac:a0:0c:e4:35:72:26:c8:11:b3:a4:cb:fc:8d:04:
                    f9:da:6b:ac:28:75:09:61:8d:35:7e:90:cd:d3:27:
                    ba:48:2b:b3:8a:35:f8:07:f4:aa:70:ad:20:85:38:
                    de:6d:58:65:ce:1b:4c:aa:61:b1:78:d4:a4:73:4b:
                    8e:f1:24:92:05:f3:a1:6b:be:65:1b:b1:47:f1:f0:
                    98:40:34:4d:35:59:94:f4:bc:2d:4a:a7:e6:4f:0e:
                    de:91:9f:0b:03:35:29:01:0b:ca:42:8b:aa:c5:5c:
                    82:6d:c1:37:2a:b6:e7:b6:66:7d:f6:8b:9b:c3:f6:
                    74:e5:e7:aa:fb:0d:3c:cd:d0:da:9a:84:bb:89:27:
                    1b:1f:d1:9b:9c:73:f2:4f:32:ba:c9:bb:4e:6c:ee:
                    5f:a1:98:a6:85:8a:d2:db:94:7f:2d:39:58:e5:58:
                    23:fb:26:34:b1:e1:5c:e0:77:0b:11:1a:82:5b:4a:
                    fa:cf:ef:fa:ab:9f:d5:d4:d1:2b:95:f3:7f:76:98:
                    f2:01:6a:0b:9c:bc:c1:4b:77:3a:58:f0:70:f1:e7:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:39:76:13:72:7E:58:BB:9D:2B:7D:BB:B8:03:DA:D2:E1:90:83:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ffe8475-c7c7-3bfa-85cd-70fd14896814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5600::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:18:3a:da:6a:be:c4:7f:af:ce:10:53:7b:1b:f4:6b:a7:a2:
         78:a3:fb:f3:8b:c6:1b:9d:e2:8c:b5:6c:10:7d:25:4e:6c:79:
         4e:b9:4a:51:35:46:6a:76:de:05:09:d9:9b:36:93:ef:1e:86:
         e1:c5:7b:ad:fb:3b:ab:21:3f:84:87:06:17:f8:bc:51:ed:b8:
         bf:7b:7c:c3:11:ee:f9:f5:61:ba:18:59:95:f0:4e:ba:0c:6d:
         76:8a:4f:72:30:b5:32:8d:f0:c3:8f:8c:c5:29:b7:ec:4c:18:
         d2:d9:d7:9c:8a:f9:bc:d5:36:e7:83:8d:ee:a2:ad:8a:72:dc:
         fe:2c:3d:a9:3e:98:4e:9a:21:dd:06:74:32:c0:1e:6d:db:ce:
         98:ac:89:a9:3e:29:33:7f:3f:79:57:26:53:01:64:cf:0d:32:
         e6:ba:d3:7a:e1:6d:5d:9f:11:1d:9f:23:67:92:5d:83:31:d6:
         01:39:18:fa:e9:29:df:cc:89:fe:ec:72:ae:7b:9f:d2:a7:3c:
         c2:2b:82:2e:d1:fe:41:34:43:0e:2f:df:3b:ac:d9:55:57:c8:
         ea:fe:87:aa:ef:63:35:8f:6e:f8:7c:63:34:cb:7d:72:eb:ad:
         fd:99:4f:cc:2d:49:49:dc:79:af:c2:44:ba:68:ed:ac:cc:c1:
         ad:91:91:92
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6BX6qf80ehIgmhcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
MDRhMjBhODEtYjU3Yy00MWM1LWFmMjgtYTkyNTFjYWRkMTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO6X3pXWTpa3ixTa17FjiTjAmuzMPkkkEWfE
YaFTLJBa/wV9bLbhcxcpVcusoAzkNXImyBGzpMv8jQT52musKHUJYY01fpDN0ye6
SCuzijX4B/SqcK0ghTjebVhlzhtMqmGxeNSkc0uO8SSSBfOha75lG7FH8fCYQDRN
NVmU9LwtSqfmTw7ekZ8LAzUpAQvKQouqxVyCbcE3KrbntmZ99oubw/Z05eeq+w08
zdDamoS7iScbH9GbnHPyTzK6ybtObO5foZimhYrS25R/LTlY5Vgj+yY0seFc4HcL
ERqCW0r6z+/6q5/V1NErlfN/dpjyAWoLnLzBS3c6WPBw8ecMaQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOE5dhNyfli7nSt9u7gD2tLhkIMRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGZmZTg0NzUtYzdjNy0z
YmZhLTg1Y2QtNzBmZDE0ODk2ODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFYA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADAYOtpqvsR/r84QU3sb9Gunonij+/OLxhud4oy1bBB9JU5seU65
SlE1Rmp23gUJ2Zs2k+8ehuHFe637O6shP4SHBhf4vFHtuL97fMMR7vn1YboYWZXw
TroMbXaKT3IwtTKN8MOPjMUpt+xMGNLZ15yK+bzVNueDje6irYpy3P4sPak+mE6a
Id0GdDLAHm3bzpisiak+KTN/P3lXJlMBZM8NMua603rhbV2fER2fI2eSXYMx1gE5
GPrpKd/Mif7scq57n9KnPMIrgi7R/kE0Qw4v3zus2VVXyOr+h6rvYzWPbvh8YzTL
fXLrrf2ZT8wtSUncea/CRLpo7azMwa2RkZI=
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:56:33 2026 by rpki-client