Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01d5390a-94a4-3c37-8556-041250f940b6.roa
File:                     01d5390a-94a4-3c37-8556-041250f940b6.roa (raw, json)
Hash identifier:          gP/PS1LvhE4wPSdZgVD3eQ+y01xLi5aXUM2PYgxTn8o=
Subject key identifier:   FF:1B:86:65:56:60:B0:8B:34:96:61:48:54:80:92:B8:48:D5:8D:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D422F8F1126FF0B8F3BD41340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01d5390a-94a4-3c37-8556-041250f940b6.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     396589
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:8f:11:26:ff:0b:8f:3b:d4:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=9cea254b-53f2-4d96-8343-dc519c2a4159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:05:e5:0c:70:f3:ea:da:00:9d:33:fc:f6:e3:
                    6e:93:7c:8a:46:45:86:ce:77:b8:1f:03:cb:de:f9:
                    e4:38:15:a0:80:44:39:59:e3:17:b1:97:d8:53:10:
                    42:35:31:83:95:93:e8:be:7d:97:0b:65:0d:cb:d0:
                    d2:02:98:63:0d:a0:31:61:49:d4:ea:cc:11:3f:ba:
                    93:fa:9b:24:39:5b:60:e1:70:78:1d:cc:44:00:df:
                    6a:62:cf:b7:b2:08:93:60:85:b7:fe:b3:f7:c5:e0:
                    75:68:f8:66:a4:a2:f6:f4:a8:ea:4b:48:cd:2f:d5:
                    55:ea:8b:8e:46:bf:1f:e6:d5:33:31:16:c9:05:53:
                    d5:02:15:32:8f:05:2f:3e:42:1e:fe:75:1e:6e:15:
                    2d:a9:0a:60:c3:2a:ad:69:36:c3:fb:76:12:38:97:
                    b6:38:40:10:07:00:ef:4b:96:5a:dd:ba:29:b6:45:
                    78:40:40:0d:df:cd:c8:51:0d:3e:41:c4:be:55:1e:
                    27:96:bd:77:1b:2d:48:30:62:0e:87:fe:d7:60:2d:
                    53:b8:dd:1f:d1:1c:cf:73:f3:b5:11:e1:17:1c:a9:
                    dc:0b:a6:71:a5:c7:3b:ca:a6:55:d5:dc:cc:15:7e:
                    fb:c8:d3:9c:87:b2:9a:7f:82:fc:b7:44:ff:c9:7f:
                    b9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1B:86:65:56:60:B0:8B:34:96:61:48:54:80:92:B8:48:D5:8D:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01d5390a-94a4-3c37-8556-041250f940b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:3a:7e:82:9f:04:75:2f:ee:fc:b3:72:23:b9:3c:75:68:94:
         30:cf:e7:72:d3:a9:07:22:11:f8:a9:4f:ca:9b:55:2c:93:a7:
         9a:7a:58:14:cc:f5:5b:bd:6b:29:27:79:c4:ca:dc:11:53:ec:
         83:a1:d5:29:5c:85:a2:8b:f8:96:73:06:1e:d0:f1:75:23:24:
         89:dc:2b:8d:bc:e6:22:b1:52:6c:b5:8e:c3:9e:95:b8:f8:f2:
         f5:fe:ef:65:9a:1b:6f:01:42:20:20:54:59:eb:2c:67:33:a9:
         39:68:f4:6e:bb:92:3b:ec:f9:eb:a2:e9:be:07:fa:9e:1d:67:
         4b:29:54:e4:09:5b:0d:7b:f0:39:85:dd:a1:99:77:a4:60:2a:
         a6:35:57:c3:51:17:e2:da:50:a4:35:d3:37:63:ed:b5:f8:1f:
         73:08:33:a4:f3:a8:5b:81:e9:10:74:5b:d1:18:2f:ff:2c:70:
         d5:0e:ed:12:71:72:68:0e:08:bd:90:f0:4d:c7:01:d9:45:0a:
         99:6f:89:67:dd:18:93:cb:e3:43:32:20:51:dd:c9:6b:af:73:
         3b:b3:0c:de:b5:06:91:08:e4:f3:c8:6f:8e:cb:fb:cc:53:e5:
         bf:64:70:7d:25:3f:aa:9e:d1:5b:c6:a9:76:ab:ba:40:c6:8b:
         9a:76:24:48
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1CL48RJv8LjzvUE0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk
OWNlYTI1NGItNTNmMi00ZDk2LTgzNDMtZGM1MTljMmE0MTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QXlDHDz6toAnTP89uNuk3yKRkWGzne4HwPL
3vnkOBWggEQ5WeMXsZfYUxBCNTGDlZPovn2XC2UNy9DSAphjDaAxYUnU6swRP7qT
+pskOVtg4XB4HcxEAN9qYs+3sgiTYIW3/rP3xeB1aPhmpKL29KjqS0jNL9VV6ouO
Rr8f5tUzMRbJBVPVAhUyjwUvPkIe/nUebhUtqQpgwyqtaTbD+3YSOJe2OEAQBwDv
S5Za3boptkV4QEAN383IUQ0+QcS+VR4nlr13Gy1IMGIOh/7XYC1TuN0f0RzPc/O1
EeEXHKncC6Zxpcc7yqZV1dzMFX77yNOch7Kaf4L8t0T/yX+5uwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP8bhmVWYLCLNJZhSFSAkrhI1Y3tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDFkNTM5MGEtOTRhNC0z
YzM3LTg1NTYtMDQxMjUwZjk0MGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABI6foKfBHUv7vyzciO5PHVolDDP53LTqQciEfipT8qbVSyTp5p6
WBTM9Vu9ayknecTK3BFT7IOh1SlchaKL+JZzBh7Q8XUjJIncK4285iKxUmy1jsOe
lbj48vX+72WaG28BQiAgVFnrLGczqTlo9G67kjvs+eui6b4H+p4dZ0spVOQJWw17
8DmF3aGZd6RgKqY1V8NRF+LaUKQ10zdj7bX4H3MIM6TzqFuB6RB0W9EYL/8scNUO
7RJxcmgOCL2Q8E3HAdlFCplviWfdGJPL40MyIFHdyWuvczuzDN61BpEI5PPIb47L
+8xT5b9kcH0lP6qe0VvGqXarukDGi5p2JEg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:43:31 2026 by rpki-client