Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c754d84d-1b10-34ac-8ba3-2088f89c3706.roa
File:                     c754d84d-1b10-34ac-8ba3-2088f89c3706.roa (raw, json)
Hash identifier:          8KJOvgny/a3sOXbWaIUGRYQauzSsdsifxUEl22821nY=
Subject key identifier:   65:92:5A:21:61:5B:E2:C4:3D:0A:9F:5B:5D:7D:35:F7:6C:E6:31:FB
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E4129DFEB296E72F3C6EAE200
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c754d84d-1b10-34ac-8ba3-2088f89c3706.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     13335
IP address blocks:        2607:8940:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:df:eb:29:6e:72:f3:c6:ea:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=ff4d9844-be97-4e72-9180-13ffa786ef10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:02:bf:16:27:0c:48:6e:8d:af:d8:fb:d2:
                    69:45:8e:d8:50:64:66:ca:a0:c4:a2:9d:9d:06:86:
                    d4:f9:1b:6c:e8:f2:08:07:88:99:3d:92:9e:4d:e3:
                    7a:12:3c:34:d6:c5:20:98:df:41:4b:64:65:d4:e9:
                    27:64:52:6a:20:4b:6a:c6:9d:53:a0:f6:b6:10:9b:
                    f0:db:57:3e:17:f4:c0:dd:22:7d:d0:9a:69:92:37:
                    5b:a7:44:43:be:ce:0a:25:70:1d:43:44:2f:53:ac:
                    f1:ec:be:cd:7d:7a:8c:ca:40:45:3f:b2:dc:9f:35:
                    63:cb:50:c5:be:15:92:1f:d6:3f:e9:7b:93:96:95:
                    c0:c7:9b:7a:68:27:78:84:1c:a4:bf:0e:be:18:3c:
                    ae:6d:28:8f:cf:38:00:1d:f7:21:f7:51:de:d2:f3:
                    cb:a8:4e:e8:0a:13:36:76:12:a5:f1:36:62:cb:d0:
                    d0:1b:28:f8:3a:2c:f6:69:f7:2d:08:d2:f8:24:df:
                    b0:bd:cd:ad:f9:a8:34:af:ba:bf:b6:21:44:ac:00:
                    71:6b:9b:c2:0c:dd:a4:2c:c9:9d:ed:8e:96:f1:23:
                    fe:64:d6:aa:7b:6d:c4:80:67:0d:fc:dd:37:d3:22:
                    c5:ab:94:b5:1a:87:7b:04:a2:75:a2:5f:81:54:ff:
                    27:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:92:5A:21:61:5B:E2:C4:3D:0A:9F:5B:5D:7D:35:F7:6C:E6:31:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c754d84d-1b10-34ac-8ba3-2088f89c3706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:96:ba:d8:7b:0e:09:7d:2c:fc:54:7c:3e:32:43:1c:e7:b4:
         1d:bd:80:7e:84:d0:e9:3e:13:02:7c:ff:8b:60:a1:84:d1:7b:
         2f:e6:48:c2:c4:93:48:92:54:76:61:f8:93:42:14:1e:97:71:
         e4:43:ea:f0:70:15:b1:4d:1e:99:a0:91:71:3f:3b:65:4f:71:
         4b:5b:cb:d9:86:ad:ba:57:8a:f5:d0:ef:e1:28:8d:fa:16:c5:
         df:e4:68:a3:00:74:de:87:a7:82:a6:88:d0:19:6c:01:29:a1:
         6a:b5:58:c7:5c:69:79:8e:4d:ab:c0:c8:22:c5:4a:c1:e4:64:
         70:af:29:ef:84:08:21:24:2a:91:bf:f7:3e:c7:de:06:3b:66:
         2e:26:6c:79:4b:22:af:ff:dc:a4:96:f4:ab:08:1a:25:ae:a6:
         dc:5c:81:db:dc:76:33:b3:99:57:00:76:8a:d4:cc:2c:a5:56:
         a2:59:9f:2f:d6:70:21:90:08:4c:3f:4a:3a:17:b7:d2:49:3f:
         5f:0c:cc:aa:ae:28:6a:8b:af:4e:23:e9:a2:84:58:65:f8:3f:
         9f:87:95:fe:4f:65:ff:51:2f:cf:91:a0:11:a9:ec:f9:06:f4:
         37:04:c9:bd:a2:d8:12:95:d6:c8:16:f9:c5:68:49:42:54:a5:
         d8:86:e5:79
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5BKd/rKW5y88bq4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk
ZmY0ZDk4NDQtYmU5Ny00ZTcyLTkxODAtMTNmZmE3ODZlZjEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+ACvxYnDEhuja/Y+9JpRY7YUGRmyqDEop2d
BobU+Rts6PIIB4iZPZKeTeN6Ejw01sUgmN9BS2Rl1OknZFJqIEtqxp1ToPa2EJvw
21c+F/TA3SJ90Jppkjdbp0RDvs4KJXAdQ0QvU6zx7L7NfXqMykBFP7LcnzVjy1DF
vhWSH9Y/6XuTlpXAx5t6aCd4hBykvw6+GDyubSiPzzgAHfch91He0vPLqE7oChM2
dhKl8TZiy9DQGyj4Oiz2afctCNL4JN+wvc2t+ag0r7q/tiFErABxa5vCDN2kLMmd
7Y6W8SP+ZNaqe23EgGcN/N030yLFq5S1God7BKJ1ol+BVP8nAwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGWSWiFhW+LEPQqfW119Nfds5jH7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYzc1NGQ4NGQtMWIxMC0z
NGFjLThiYTMtMjA4OGY4OWMzNzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgeJQCAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAfZa62HsOCX0s/FR8PjJDHOe0Hb2AfoTQ6T4TAnz/i2ChhNF7L+ZI
wsSTSJJUdmH4k0IUHpdx5EPq8HAVsU0emaCRcT87ZU9xS1vL2YatuleK9dDv4SiN
+hbF3+RoowB03oengqaI0BlsASmharVYx1xpeY5Nq8DIIsVKweRkcK8p74QIISQq
kb/3PsfeBjtmLiZseUsir//cpJb0qwgaJa6m3FyB29x2M7OZVwB2itTMLKVWolmf
L9ZwIZAITD9KOhe30kk/XwzMqq4oaouvTiPpooRYZfg/n4eV/k9l/1Evz5GgEans
+Qb0NwTJvaLYEpXWyBb5xWhJQlSl2IbleQ==
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:46:20 2026 by rpki-client