Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/507e4b5a-6933-3737-b5ad-a08690070f72.roa
File:                     507e4b5a-6933-3737-b5ad-a08690070f72.roa (raw, json)
Hash identifier:          jgMCkTQtUuU5FrTCatknTuACY+6QQZx2EbNLcwtlTM4=
Subject key identifier:   1F:90:09:26:ED:FA:C9:6C:85:AE:FB:34:76:64:D1:B2:A0:11:23:70
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E815FAD5A2898DE46CE913A00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/507e4b5a-6933-3737-b5ad-a08690070f72.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     54113
IP address blocks:        2607:8940:4430::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:ad:5a:28:98:de:46:ce:91:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=98e70d9e-7de4-46c3-85e0-e58a26031fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b6:99:ed:27:6c:d2:0d:3e:55:6c:8b:55:72:
                    f2:75:6c:83:ad:73:cc:0e:4c:2e:28:01:87:0a:37:
                    de:94:68:49:e0:1e:a7:3b:1c:76:66:c9:0f:f8:72:
                    c2:4d:1c:f7:ed:9a:bb:74:c6:6d:d0:f8:5e:81:10:
                    c1:ef:3d:49:12:cc:49:b2:29:51:48:f3:fc:62:d2:
                    d2:95:94:f4:29:e8:d9:88:09:eb:11:cf:63:dc:38:
                    f2:47:3d:3b:cc:cd:2d:17:73:a4:12:55:98:b1:32:
                    4a:b0:00:b5:5c:ac:d4:63:27:9d:62:09:53:4f:0e:
                    f3:cd:b7:e1:5e:59:b7:a6:99:bf:bd:a4:53:ae:47:
                    6d:ff:82:c5:72:af:f2:22:16:a3:00:39:b2:90:23:
                    f4:11:d8:4d:14:1a:43:b8:fa:2d:74:ad:5d:b4:13:
                    de:fa:28:a1:bc:47:46:18:b9:fc:65:35:47:c3:0d:
                    67:41:eb:5f:66:dd:55:ca:98:ba:31:e1:39:69:66:
                    68:40:bc:c9:23:51:24:29:87:98:1d:f9:bc:98:29:
                    e6:d0:ac:3c:e6:93:d3:0c:f2:64:e3:82:b9:c2:d5:
                    5a:3b:c6:fc:2b:42:de:67:7a:7d:4a:52:87:d9:4b:
                    53:0f:66:c4:8c:24:83:98:51:c7:48:6a:4e:3f:74:
                    56:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:90:09:26:ED:FA:C9:6C:85:AE:FB:34:76:64:D1:B2:A0:11:23:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/507e4b5a-6933-3737-b5ad-a08690070f72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4430::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1c:d2:68:37:a9:16:c7:96:7e:8e:a6:d6:a4:81:64:aa:ea:
         dc:2c:90:a5:41:ed:db:97:54:d8:04:75:b1:5e:a5:37:9a:1d:
         f7:77:1f:dd:ee:3e:19:2f:83:0e:63:ef:92:7f:e4:7d:c9:95:
         5e:dc:f9:76:b1:72:a9:ec:35:de:c0:49:a9:dc:f5:3c:ad:9f:
         71:61:8e:69:d5:ac:52:88:3e:68:49:c8:50:54:67:79:d7:76:
         21:ad:f1:26:e8:93:e4:08:bf:2b:3d:5c:46:e5:f0:9c:e9:50:
         a8:06:db:73:17:9c:55:6f:de:4c:01:e2:b1:65:26:fa:a4:99:
         c2:32:64:1f:69:e7:11:27:02:d4:16:94:09:a8:96:7c:55:11:
         58:c7:fe:d4:4b:d1:1c:e3:b2:7a:f4:6c:1f:d3:57:55:3e:84:
         7c:6f:62:b9:91:87:f9:26:4c:9f:30:ca:e3:8a:f7:96:f8:48:
         f4:74:c4:f4:13:07:79:73:e7:3b:1b:b6:2b:08:85:20:b3:fa:
         c8:72:8d:c9:2e:d6:4d:5c:b3:c0:e2:57:76:a9:6e:5c:d1:9f:
         c6:12:8c:2a:9a:11:55:74:db:e9:da:e9:ef:2c:5e:94:9c:a4:
         46:44:52:50:cc:3f:04:a6:d2:0f:8e:de:a3:c9:4b:cc:4a:aa:
         49:1a:13:57
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6BX61aKJjeRs6ROgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
OThlNzBkOWUtN2RlNC00NmMzLTg1ZTAtZTU4YTI2MDMxZmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7aZ7Sds0g0+VWyLVXLydWyDrXPMDkwuKAGH
CjfelGhJ4B6nOxx2ZskP+HLCTRz37Zq7dMZt0PhegRDB7z1JEsxJsilRSPP8YtLS
lZT0KejZiAnrEc9j3DjyRz07zM0tF3OkElWYsTJKsAC1XKzUYyedYglTTw7zzbfh
Xlm3ppm/vaRTrkdt/4LFcq/yIhajADmykCP0EdhNFBpDuPotdK1dtBPe+iihvEdG
GLn8ZTVHww1nQetfZt1Vypi6MeE5aWZoQLzJI1EkKYeYHfm8mCnm0Kw85pPTDPJk
44K5wtVaO8b8K0LeZ3p9SlKH2UtTD2bEjCSDmFHHSGpOP3RW/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB+QCSbt+slsha77NHZk0bKgESNwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNTA3ZTRiNWEtNjkzMy0z
NzM3LWI1YWQtYTA4NjkwMDcwZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEQw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHMc0mg3qRbHln6OptakgWSq6twskKVB7duXVNgEdbFepTeaHfd3
H93uPhkvgw5j75J/5H3JlV7c+XaxcqnsNd7ASanc9Tytn3FhjmnVrFKIPmhJyFBU
Z3nXdiGt8Sbok+QIvys9XEbl8JzpUKgG23MXnFVv3kwB4rFlJvqkmcIyZB9p5xEn
AtQWlAmolnxVEVjH/tRL0Rzjsnr0bB/TV1U+hHxvYrmRh/kmTJ8wyuOK95b4SPR0
xPQTB3lz5zsbtisIhSCz+shyjcku1k1cs8DiV3apblzRn8YSjCqaEVV02+na6e8s
XpScpEZEUlDMPwSm0g+O3qPJS8xKqkkaE1c=
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:59:15 2026 by rpki-client