Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b7fc6ecb-6a89-35b7-a939-18cf41189276.roa
File:                     b7fc6ecb-6a89-35b7-a939-18cf41189276.roa (raw, json)
Hash identifier:          T0I8GCmu3ijcFOv50IIxisWeEKrnW0Lpr5JcYdm1s/c=
Subject key identifier:   79:00:AE:5E:47:B2:55:7E:90:9B:73:55:D3:F7:11:B8:D5:99:0E:85
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E00060C325BD00BBF20A7F280
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b7fc6ecb-6a89-35b7-a939-18cf41189276.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     54113
IP address blocks:        157.5.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:0c:32:5b:d0:0b:bf:20:a7:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=1a8b2148-e7dc-4d6f-803a-9d0599959273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:07:63:f6:e2:0c:ee:5c:96:3b:a2:25:44:34:
                    bf:f8:85:f0:92:7e:45:9e:00:a6:a1:f3:cf:74:a2:
                    c5:35:b0:33:e7:67:a0:2d:b6:0b:91:8c:dc:cd:e9:
                    6d:1c:89:2b:1c:02:4a:51:7f:33:96:71:c0:fc:4b:
                    76:83:82:e0:73:b3:3f:87:96:49:70:2b:09:c7:58:
                    51:84:24:b5:ec:30:4e:13:26:4e:11:90:20:0c:a6:
                    c6:f1:16:96:11:39:1f:0a:8f:97:09:a0:51:e5:3f:
                    e0:af:81:fc:b4:d1:12:90:2b:c3:f1:99:cb:76:53:
                    de:c6:99:05:d6:5b:04:df:70:7b:ba:52:60:ea:9b:
                    b8:53:15:4a:17:ca:c0:92:cb:db:60:6a:b6:59:ae:
                    5e:aa:59:0a:31:e4:ca:90:10:22:5c:98:2b:8e:2c:
                    86:d1:60:28:31:64:67:70:b3:4c:ab:ee:e7:d5:0f:
                    54:ed:7d:c1:ea:89:e3:49:27:b1:aa:2b:d1:de:33:
                    f7:16:88:53:58:2d:b0:c9:71:d1:d8:ab:dd:62:9c:
                    2f:7f:dc:d8:35:db:9b:69:1f:56:c9:28:a7:6f:71:
                    ad:1a:13:6d:15:46:86:0d:44:fc:b4:5a:25:d1:56:
                    5b:41:54:2b:77:ad:79:a6:32:2d:f1:28:02:d1:e5:
                    7a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:00:AE:5E:47:B2:55:7E:90:9B:73:55:D3:F7:11:B8:D5:99:0E:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b7fc6ecb-6a89-35b7-a939-18cf41189276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:da:1f:44:2f:4b:d3:46:60:55:96:8a:fa:6d:27:fe:52:
         89:a6:42:39:6e:19:1c:28:89:40:21:ab:f4:d7:6f:a7:1b:d2:
         f2:28:89:11:08:b3:d0:f3:b6:e6:ba:21:3a:d4:b6:36:9d:11:
         2f:02:06:b3:1b:85:7e:5a:10:40:28:cc:9b:96:90:4a:1b:f6:
         cf:4b:6b:ff:c0:9f:95:99:75:36:92:89:c5:87:50:f1:59:94:
         4b:c2:f9:06:cf:59:5b:a1:da:b4:c9:62:f5:77:30:80:5c:18:
         c8:a9:2b:43:a8:78:1e:2b:5c:ac:aa:1e:20:ae:ce:4f:18:79:
         7d:66:a2:2d:4f:11:98:f7:a1:e1:40:7c:68:1f:95:1e:1c:67:
         86:63:b3:2f:d2:06:d5:13:93:eb:d1:4f:fa:2c:0f:f3:13:97:
         dc:e7:5e:fd:57:d9:07:0e:67:ff:a9:97:73:40:b8:61:84:95:
         5b:3d:7f:a2:85:e5:5d:01:2d:5d:c5:a6:25:45:e0:50:80:38:
         89:d9:76:57:e9:51:2c:cc:46:e2:b0:b9:79:e6:ef:f2:96:fc:
         ff:0a:78:c2:2d:db:3e:a6:db:05:85:94:da:df:0f:38:0e:9f:
         18:80:52:05:17:2a:f2:7d:8b:90:64:17:82:2c:79:c4:bf:f2:
         f3:e5:7d:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABgwyW9ALvyCn8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
MWE4YjIxNDgtZTdkYy00ZDZmLTgwM2EtOWQwNTk5OTU5MjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggdj9uIM7lyWO6IlRDS/+IXwkn5FngCmofPP
dKLFNbAz52egLbYLkYzczeltHIkrHAJKUX8zlnHA/Et2g4Lgc7M/h5ZJcCsJx1hR
hCS17DBOEyZOEZAgDKbG8RaWETkfCo+XCaBR5T/gr4H8tNESkCvD8ZnLdlPexpkF
1lsE33B7ulJg6pu4UxVKF8rAksvbYGq2Wa5eqlkKMeTKkBAiXJgrjiyG0WAoMWRn
cLNMq+7n1Q9U7X3B6onjSSexqivR3jP3FohTWC2wyXHR2KvdYpwvf9zYNdubaR9W
ySinb3GtGhNtFUaGDUT8tFol0VZbQVQrd615pjIt8SgC0eV6WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHkArl5HslV+kJtzVdP3EbjVmQ6FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjdmYzZlY2ItNmE4OS0z
NWI3LWE5MzktMThjZjQxMTg5Mjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQViMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPY2h9EL0vTRmBVlor6bSf+UommQjluGRwoiUAhq/TXb6cb0vIoiREI
s9Dztua6ITrUtjadES8CBrMbhX5aEEAozJuWkEob9s9La//An5WZdTaSicWHUPFZ
lEvC+QbPWVuh2rTJYvV3MIBcGMipK0OoeB4rXKyqHiCuzk8YeX1moi1PEZj3oeFA
fGgflR4cZ4Zjsy/SBtUTk+vRT/osD/MTl9znXv1X2QcOZ/+pl3NAuGGElVs9f6KF
5V0BLV3FpiVF4FCAOInZdlfpUSzMRuKwuXnm7/KW/P8KeMIt2z6m2wWFlNrfDzgO
nxiAUgUXKvJ9i5BkF4IsecS/8vPlfbM=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:58:55 2026 by rpki-client