Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f1adbdb1-0e03-3adf-97dd-b1103f2a4271.roa
File:                     f1adbdb1-0e03-3adf-97dd-b1103f2a4271.roa (raw, json)
Hash identifier:          FrcAnPCUaB2O003M3zayfl78wYjEmBoRo+1VcRK1RVQ=
Subject key identifier:   B6:C4:00:E0:0B:B9:61:31:09:60:27:4C:E4:6B:5B:AF:01:B4:8D:AC
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584E5084A607565EF1F2E6359CD0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f1adbdb1-0e03-3adf-97dd-b1103f2a4271.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     54113
IP address blocks:        131.125.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:a6:07:56:5e:f1:f2:e6:35:9c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=4dcfd668-099c-4164-9492-7e1821282e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:2d:d1:54:15:69:d2:be:94:93:c8:c1:63:
                    68:90:de:56:1a:5b:83:0b:b3:b6:d2:c2:47:e8:ea:
                    79:b7:4f:43:b2:56:01:7b:75:9c:51:0e:3b:7c:71:
                    0c:a0:a1:ba:b2:b6:79:67:c8:c7:f6:04:9d:bc:50:
                    2f:40:8e:0e:ec:0d:cf:e8:c4:77:62:ec:2a:29:df:
                    90:c1:ae:39:62:ec:64:ae:e4:01:7e:0d:3d:fe:8b:
                    fa:d8:63:64:2e:ba:af:2b:5b:31:d2:15:35:40:b8:
                    31:de:3a:41:eb:7b:e5:ba:57:38:13:f4:02:21:99:
                    c6:c6:20:67:0f:8f:ac:0d:80:ef:2a:b3:5b:09:23:
                    25:1d:ff:cd:ee:0c:d3:80:e8:41:22:bb:74:97:38:
                    8c:9c:c9:41:fb:cf:a5:2f:90:bb:4d:6f:57:6f:70:
                    05:45:49:e3:7f:ab:5e:9d:ab:41:fa:0f:6f:9e:88:
                    0b:59:4b:fd:bc:3b:d4:78:4e:02:ba:03:95:59:3c:
                    90:df:d9:3e:41:26:97:73:d7:e9:40:e8:f2:fe:09:
                    16:42:eb:0c:2e:25:85:9a:f2:c5:9c:b9:d3:f6:d7:
                    c2:4d:0b:ba:50:19:fc:88:95:3f:f8:a8:dc:98:88:
                    fd:97:46:fb:f4:2e:aa:97:c7:39:09:6d:c2:2e:d3:
                    48:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C4:00:E0:0B:B9:61:31:09:60:27:4C:E4:6B:5B:AF:01:B4:8D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f1adbdb1-0e03-3adf-97dd-b1103f2a4271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:c9:23:92:08:dd:da:c5:90:03:e5:92:7c:e6:9e:46:78:3a:
         15:de:a4:95:fb:32:9e:72:df:24:68:c8:43:ce:e8:4d:ea:9a:
         3b:e0:17:bc:70:3f:f2:23:06:a9:69:30:34:91:5a:91:f8:7c:
         c9:ab:65:8b:e4:bb:11:bc:0e:1f:47:1e:d0:da:4b:ab:b2:9c:
         d5:6d:47:e1:31:6d:cc:83:a1:ae:8b:02:2c:15:46:87:c6:c0:
         52:63:bb:94:d9:ba:9a:5d:2b:eb:c6:f7:9d:11:c1:c7:1d:23:
         d5:5b:6b:bf:94:7e:4e:f4:ac:10:4d:82:ae:06:e6:0c:72:da:
         66:c3:b6:99:9a:74:ee:83:b7:a6:2a:dc:97:12:06:be:3f:30:
         de:6b:41:fb:c5:32:13:bb:35:d8:fa:1c:44:2d:00:f5:44:37:
         45:9d:7c:e5:02:dc:f9:61:42:51:e5:ad:75:ae:4a:e0:cd:11:
         2a:ea:2a:17:e0:c2:5f:03:7f:e5:20:73:0c:6c:d1:41:77:e3:
         6d:8c:7c:95:82:19:33:75:2d:78:bf:8a:de:3d:26:24:bf:5e:
         ca:c2:01:78:6e:01:52:1a:b8:e9:81:eb:f5:c0:5c:a7:99:99:
         bc:23:fc:02:22:45:a3:6a:aa:90:7b:6f:a6:90:58:23:48:0d:
         ea:28:21:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhKYHVl7x8uY1nNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
NGRjZmQ2NjgtMDk5Yy00MTY0LTk0OTItN2UxODIxMjgyZTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4At0VQVadK+lJPIwWNokN5WGluDC7O20sJH
6Op5t09DslYBe3WcUQ47fHEMoKG6srZ5Z8jH9gSdvFAvQI4O7A3P6MR3YuwqKd+Q
wa45YuxkruQBfg09/ov62GNkLrqvK1sx0hU1QLgx3jpB63vlulc4E/QCIZnGxiBn
D4+sDYDvKrNbCSMlHf/N7gzTgOhBIrt0lziMnMlB+8+lL5C7TW9Xb3AFRUnjf6te
natB+g9vnogLWUv9vDvUeE4CugOVWTyQ39k+QSaXc9fpQOjy/gkWQusMLiWFmvLF
nLnT9tfCTQu6UBn8iJU/+KjcmIj9l0b79C6ql8c5CW3CLtNILwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLbEAOALuWExCWAnTORrW68BtI2sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjFhZGJkYjEtMGUwMy0z
YWRmLTk3ZGQtYjExMDNmMmE0MjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg31yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfJI5II3drFkAPlknzmnkZ4OhXepJX7Mp5y3yRoyEPO6E3qmjvgF7xw
P/IjBqlpMDSRWpH4fMmrZYvkuxG8Dh9HHtDaS6uynNVtR+ExbcyDoa6LAiwVRofG
wFJju5TZuppdK+vG950RwccdI9Vba7+Ufk70rBBNgq4G5gxy2mbDtpmadO6Dt6Yq
3JcSBr4/MN5rQfvFMhO7Ndj6HEQtAPVEN0WdfOUC3PlhQlHlrXWuSuDNESrqKhfg
wl8Df+Ugcwxs0UF3422MfJWCGTN1LXi/it49JiS/XsrCAXhuAVIauOmB6/XAXKeZ
mbwj/AIiRaNqqpB7b6aQWCNIDeooIUI=
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:57:16 2026 by rpki-client