Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d3d54557-fea8-3439-ad89-bcce4420f203.roa
File:                     d3d54557-fea8-3439-ad89-bcce4420f203.roa (raw, json)
Hash identifier:          5Es50iY0Z2krsIVjZgag9QY5X4JZ7F42ex1vb3cf30I=
Subject key identifier:   FC:56:64:A5:1A:2E:78:6F:C5:61:0D:D5:38:23:60:94:06:95:22:EB
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584FC5CBED49D073819DFD590B80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d3d54557-fea8-3439-ad89-bcce4420f203.roa
Signing time:             Sun 08 Nov 2026 14:00:12 +0000
ROA not before:           Sun 08 Nov 2026 14:00:12 +0000
ROA not after:            Sat 06 Feb 2027 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:8940:4e50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c5:cb:ed:49:d0:73:81:9d:fd:59:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov  8 14:00:12 2026 GMT
            Not After : Feb  6 14:00:12 2027 GMT
        Subject: CN=8639ef2d-7b9f-43e9-b7f7-a2f15dd06b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:de:b6:df:6f:66:e2:5f:9f:a8:4c:0f:55:
                    20:c9:b9:c9:31:c5:f6:50:09:66:8a:54:d2:99:f3:
                    90:63:8d:85:95:ce:99:ea:bc:c7:a2:4e:8d:22:ab:
                    c8:1b:5f:72:59:42:8c:91:62:39:cc:d2:7b:5b:83:
                    c8:5e:b7:ce:ad:15:5c:5a:2e:b2:fb:e4:f3:ee:98:
                    08:60:d7:f3:97:24:54:8a:91:09:44:75:09:4f:62:
                    8a:e6:75:48:da:fd:59:6c:77:1b:c0:84:7d:1c:6c:
                    df:65:8c:fa:c0:09:a6:ac:93:a9:9e:4b:87:20:15:
                    6a:9c:84:aa:43:2e:24:9c:57:30:83:6d:d0:46:74:
                    0a:fc:6d:5c:03:8e:4e:e9:c4:e9:51:39:bf:e4:f6:
                    1b:63:6d:d0:88:52:72:0d:8b:8d:1f:77:d6:17:8f:
                    52:73:a4:29:22:a3:f5:6d:79:f7:9f:5c:85:6a:b4:
                    fa:48:64:b7:5f:45:38:0d:64:a3:88:1c:a8:c0:6b:
                    39:46:bc:e3:19:0f:a3:ad:85:81:8e:8b:52:16:1e:
                    63:07:ec:b8:50:03:6b:d2:2b:29:4d:6c:70:1d:a9:
                    33:aa:a7:72:48:c1:34:54:d7:e8:15:41:17:97:07:
                    02:3c:ec:e7:f5:c2:df:a4:cf:b8:c6:66:6e:d9:0c:
                    1b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:56:64:A5:1A:2E:78:6F:C5:61:0D:D5:38:23:60:94:06:95:22:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d3d54557-fea8-3439-ad89-bcce4420f203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:4e50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:0a:a2:41:71:6e:77:aa:f1:d0:29:63:9b:b5:06:0d:84:8d:
         b2:13:a1:e0:44:37:a1:49:5c:d9:9a:cd:46:3f:68:69:e8:6d:
         55:d0:f5:66:d6:c0:47:77:2d:55:16:3f:a0:89:a6:57:61:9c:
         8d:91:07:95:53:97:14:e9:6c:80:0f:26:2f:a0:f9:0c:51:04:
         5f:ab:47:8f:c2:2d:58:5e:57:86:e7:8a:47:7c:37:f6:44:25:
         7e:7a:20:1b:58:b2:e3:07:1f:e0:1d:d0:82:69:5e:4d:3c:ff:
         c6:60:a1:53:a4:18:10:12:e2:63:a3:3c:f0:cf:e1:d0:a0:cb:
         de:05:d1:33:b2:2e:13:67:10:0a:f3:c0:6a:54:37:10:ab:0e:
         60:46:5f:33:8d:48:a5:96:68:d3:7c:57:b3:af:95:d3:ee:b7:
         e6:c0:df:3b:97:25:d3:e0:d1:88:2a:39:6b:b7:7b:b7:ee:a4:
         93:a6:4a:8d:c0:31:0f:e4:98:e6:10:2b:44:8b:0b:97:56:41:
         25:96:4d:41:a0:b1:6b:a2:5e:b2:48:f1:89:78:26:a7:e2:90:
         d1:a1:0b:21:91:8f:fa:a9:8d:4d:82:57:6b:63:dc:d6:49:87:
         aa:22:2b:7b:30:a6:59:b1:2b:57:fb:d2:f5:f7:47:80:36:03:
         89:2b:28:f7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy+1J0HOBnf1ZC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk
ODYzOWVmMmQtN2I5Zi00M2U5LWI3ZjctYTJmMTVkZDA2YjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKvett9vZuJfn6hMD1UgybnJMcX2UAlmilTS
mfOQY42Flc6Z6rzHok6NIqvIG19yWUKMkWI5zNJ7W4PIXrfOrRVcWi6y++Tz7pgI
YNfzlyRUipEJRHUJT2KK5nVI2v1ZbHcbwIR9HGzfZYz6wAmmrJOpnkuHIBVqnISq
Qy4knFcwg23QRnQK/G1cA45O6cTpUTm/5PYbY23QiFJyDYuNH3fWF49Sc6QpIqP1
bXn3n1yFarT6SGS3X0U4DWSjiByowGs5RrzjGQ+jrYWBjotSFh5jB+y4UANr0isp
TWxwHakzqqdySME0VNfoFUEXlwcCPOzn9cLfpM+4xmZu2Qwb3wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPxWZKUaLnhvxWEN1TgjYJQGlSLrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDNkNTQ1NTctZmVhOC0z
NDM5LWFkODktYmNjZTQ0MjBmMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQE5Q
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFYKokFxbneq8dApY5u1Bg2EjbIToeBEN6FJXNmazUY/aGnobVXQ
9WbWwEd3LVUWP6CJpldhnI2RB5VTlxTpbIAPJi+g+QxRBF+rR4/CLVheV4bnikd8
N/ZEJX56IBtYsuMHH+Ad0IJpXk08/8ZgoVOkGBAS4mOjPPDP4dCgy94F0TOyLhNn
EArzwGpUNxCrDmBGXzONSKWWaNN8V7OvldPut+bA3zuXJdPg0YgqOWu3e7fupJOm
So3AMQ/kmOYQK0SLC5dWQSWWTUGgsWuiXrJI8Yl4JqfikNGhCyGRj/qpjU2CV2tj
3NZJh6oiK3swplmxK1f70vX3R4A2A4krKPc=
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:33:48 2026 by rpki-client