Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4104c60-839c-32b0-96f8-dbcd0fbc0700.roa
File:                     b4104c60-839c-32b0-96f8-dbcd0fbc0700.roa (raw, json)
Hash identifier:          Fgu/yEpKOiwcJTs6/34K5XjAXPEhbVA6SuWS5hm6+j8=
Subject key identifier:   BF:2C:E8:5A:81:E5:9E:9C:78:94:17:69:20:21:14:D8:99:07:FE:33
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E815FB37365A146E47DF31360
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4104c60-839c-32b0-96f8-dbcd0fbc0700.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     54113
IP address blocks:        2607:8940:5200::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:b3:73:65:a1:46:e4:7d:f3:13:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=5023d592-a7c1-4250-8722-e3b3da31a6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:70:37:16:f3:a9:da:40:19:26:d0:be:cd:b9:
                    fd:6a:2d:38:ac:c3:e7:d9:2a:c0:e4:26:f9:41:c1:
                    99:43:6c:95:35:63:0b:47:c4:86:ef:dd:f2:cc:5c:
                    f9:da:df:52:bc:bc:29:d8:9f:30:7f:46:51:38:7f:
                    01:1c:79:b7:77:14:ff:3f:df:b2:c6:b2:6f:c1:8f:
                    a8:3c:fc:d6:cc:5c:02:48:e6:1f:43:63:40:ba:d0:
                    83:a9:93:ea:a6:fa:8d:de:57:bf:b2:f7:85:61:9b:
                    db:d8:e5:59:55:7d:86:58:9a:3a:0e:65:1a:61:33:
                    79:b5:b9:ed:d3:87:4a:40:69:a5:17:24:39:a1:b8:
                    fd:e1:5b:27:fd:6e:2d:54:b4:9a:c2:95:33:09:1d:
                    f3:1f:3c:e6:0e:5b:e8:21:9b:1c:78:41:66:3e:5a:
                    44:cf:7c:40:b3:71:33:5f:75:57:84:84:f1:26:86:
                    ff:23:92:22:b0:0e:a8:45:d8:1c:39:3a:2f:08:6f:
                    1e:ae:ef:ed:0d:5c:2b:c2:b7:85:47:0d:81:d8:93:
                    0e:d3:5c:88:3c:93:cc:9e:3e:36:ea:ec:14:24:47:
                    03:6d:87:7a:4c:a5:8b:10:cb:28:4c:c6:0c:62:6b:
                    25:b4:da:91:f1:8c:ed:78:ee:ef:46:1f:a3:d9:5a:
                    64:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2C:E8:5A:81:E5:9E:9C:78:94:17:69:20:21:14:D8:99:07:FE:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b4104c60-839c-32b0-96f8-dbcd0fbc0700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:5200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:1e:5d:38:a6:40:27:38:9c:b1:07:67:00:ce:da:42:26:b4:
         c4:58:e5:92:3e:ea:32:b4:ae:98:e0:3f:8b:3c:a8:da:bf:64:
         4c:3b:a1:24:93:b6:9b:fc:ec:af:50:47:04:72:d4:e9:f4:88:
         4f:52:d9:a6:68:97:41:7f:12:38:68:4a:0b:f3:c0:eb:44:0f:
         de:c7:83:78:c5:89:10:4f:30:99:ad:63:00:9f:2d:02:92:fa:
         ed:34:c2:fa:b8:fb:a7:48:66:6a:d7:0e:c5:02:e6:2c:cb:e2:
         af:c6:60:f8:be:1d:08:51:fb:14:d8:e4:d4:d5:7c:3f:9f:c8:
         09:b5:67:3e:7f:7d:93:c9:9c:eb:54:dc:6e:18:a3:7c:a4:e7:
         67:b2:e1:6b:54:a4:2b:76:19:a2:2a:1a:bb:3f:01:a5:88:34:
         6b:df:43:1f:c9:15:74:b7:d6:20:37:bf:19:ed:ab:64:3b:c4:
         bb:59:fd:67:ef:72:aa:e6:5b:a4:ce:7e:db:97:46:6d:36:73:
         fe:a3:69:56:6b:b1:17:b3:a2:ed:39:8f:19:a8:3d:e9:a0:72:
         a4:e9:fd:44:48:b8:e4:8e:9c:66:57:38:22:25:c1:d0:47:bc:
         d3:28:78:f7:e6:d6:13:5e:e8:48:99:8e:25:0e:51:99:9c:d9:
         a3:13:6f:92
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6BX7NzZaFG5H3zE2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
NTAyM2Q1OTItYTdjMS00MjUwLTg3MjItZTNiM2RhMzFhNmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nA3FvOp2kAZJtC+zbn9ai04rMPn2SrA5Cb5
QcGZQ2yVNWMLR8SG793yzFz52t9SvLwp2J8wf0ZROH8BHHm3dxT/P9+yxrJvwY+o
PPzWzFwCSOYfQ2NAutCDqZPqpvqN3le/sveFYZvb2OVZVX2GWJo6DmUaYTN5tbnt
04dKQGmlFyQ5obj94Vsn/W4tVLSawpUzCR3zHzzmDlvoIZsceEFmPlpEz3xAs3Ez
X3VXhITxJob/I5IisA6oRdgcOTovCG8eru/tDVwrwreFRw2B2JMO01yIPJPMnj42
6uwUJEcDbYd6TKWLEMsoTMYMYmsltNqR8YzteO7vRh+j2VpkRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL8s6FqB5Z6ceJQXaSAhFNiZB/4zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjQxMDRjNjAtODM5Yy0z
MmIwLTk2ZjgtZGJjZDBmYmMwNzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIQeXTimQCc4nLEHZwDO2kImtMRY5ZI+6jK0rpjgP4s8qNq/ZEw7
oSSTtpv87K9QRwRy1On0iE9S2aZol0F/EjhoSgvzwOtED97Hg3jFiRBPMJmtYwCf
LQKS+u00wvq4+6dIZmrXDsUC5izL4q/GYPi+HQhR+xTY5NTVfD+fyAm1Zz5/fZPJ
nOtU3G4Yo3yk52ey4WtUpCt2GaIqGrs/AaWINGvfQx/JFXS31iA3vxntq2Q7xLtZ
/WfvcqrmW6TOftuXRm02c/6jaVZrsRezou05jxmoPemgcqTp/URIuOSOnGZXOCIl
wdBHvNMoePfm1hNe6EiZjiUOUZmc2aMTb5I=
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:58:19 2026 by rpki-client