Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08bed9e7-2c94-37c6-8cc3-6703da2e1f0d.roa
File:                     08bed9e7-2c94-37c6-8cc3-6703da2e1f0d.roa (raw, json)
Hash identifier:          xG5yeIHh/2CVz021DWoSiG9qXpKfpGNArKft0wSu0/w=
Subject key identifier:   35:9D:1E:16:D2:86:51:E1:DC:FC:30:E1:5E:46:61:8A:D5:15:3A:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D422F8E396781B59537A5D580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08bed9e7-2c94-37c6-8cc3-6703da2e1f0d.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     396617
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:8e:39:67:81:b5:95:37:a5:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=cb239d2a-10d3-4f23-94f2-d000714c4138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:45:42:4c:9c:df:00:fd:fd:ac:68:c7:46:57:
                    39:bb:64:90:85:ad:49:22:94:b8:16:6b:b4:07:26:
                    28:33:a1:5b:a0:51:0e:79:76:b2:8d:1b:a8:ab:d7:
                    87:26:e7:26:69:6c:af:9e:0f:8b:4e:75:0f:d5:3a:
                    e9:4a:5f:df:62:56:b3:6e:11:a3:76:45:b1:40:3b:
                    4d:7e:f9:a7:13:8c:b1:cc:ab:9d:3b:85:7a:19:0c:
                    4b:3a:7f:0e:84:7d:80:21:27:7f:b7:0f:12:b5:37:
                    cd:32:16:35:38:b6:dc:44:88:9c:c6:36:8e:ec:89:
                    19:22:05:7f:bd:33:fc:eb:1c:12:d4:a4:fe:5a:fd:
                    fa:ac:c4:44:c8:be:8c:55:dc:7e:3e:06:1c:4b:b8:
                    a0:27:95:bc:63:37:ce:c9:bb:9c:6b:9e:33:a2:fc:
                    50:3e:62:9a:03:4b:c2:59:6a:76:fe:e6:71:62:49:
                    2e:61:28:51:ef:9a:ea:1e:c4:8d:ea:90:81:28:5b:
                    ee:e8:ed:4d:2d:d3:25:b8:0a:70:e9:ea:1a:cf:e7:
                    5a:27:b1:9d:53:f2:85:3c:88:fa:a7:12:c7:24:ea:
                    07:4b:93:2d:6b:12:ef:50:68:54:a4:45:3f:dc:5d:
                    8a:dd:95:be:24:bc:e9:99:73:6d:ff:1f:38:48:13:
                    73:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9D:1E:16:D2:86:51:E1:DC:FC:30:E1:5E:46:61:8A:D5:15:3A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08bed9e7-2c94-37c6-8cc3-6703da2e1f0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a2:78:e2:47:f3:b9:84:1c:3c:73:6c:ee:39:f7:ad:79:fe:
         56:f8:dd:06:19:27:22:fd:58:c9:aa:71:dd:b9:f5:34:71:cd:
         11:8b:72:84:0e:98:de:31:24:94:b9:f0:59:ff:ce:36:85:6e:
         d8:26:dc:c7:ca:c7:07:5d:97:51:5b:d7:7d:6a:57:a3:65:e8:
         20:ef:72:9b:06:e2:b1:19:b6:e6:b5:d5:a1:88:98:cf:ce:b6:
         dc:c0:5c:d7:7d:46:59:73:b7:69:75:af:3d:39:33:15:04:83:
         bc:9d:df:8d:f5:3c:17:19:34:09:50:e2:63:aa:4e:97:f1:d7:
         54:3f:8e:d7:48:ce:46:2a:3e:d4:27:bf:51:c5:01:70:3c:2c:
         c9:f9:2f:96:c3:6b:91:a0:e3:8a:76:f0:35:bf:e2:a5:6e:09:
         ec:e8:5d:e3:e2:fb:0c:dc:37:1d:47:84:df:56:a3:eb:7d:d6:
         9a:6f:18:d3:80:80:91:8f:de:ad:05:5a:cc:a4:36:d2:3b:4a:
         20:4f:36:c5:05:47:8f:75:ed:31:04:20:1b:24:f5:cd:23:a5:
         0e:20:43:9c:d3:c5:50:2d:40:c8:bf:73:ca:2e:37:8f:81:31:
         ec:12:dd:8e:d6:7f:4f:bc:33:ed:7d:80:74:e9:60:1e:e3:f8:
         63:27:7b:29
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1CL445Z4G1lTel1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk
Y2IyMzlkMmEtMTBkMy00ZjIzLTk0ZjItZDAwMDcxNGM0MTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0VCTJzfAP39rGjHRlc5u2SQha1JIpS4Fmu0
ByYoM6FboFEOeXayjRuoq9eHJucmaWyvng+LTnUP1TrpSl/fYlazbhGjdkWxQDtN
fvmnE4yxzKudO4V6GQxLOn8OhH2AISd/tw8StTfNMhY1OLbcRIicxjaO7IkZIgV/
vTP86xwS1KT+Wv36rMREyL6MVdx+PgYcS7igJ5W8YzfOybuca54zovxQPmKaA0vC
WWp2/uZxYkkuYShR75rqHsSN6pCBKFvu6O1NLdMluApw6eoaz+daJ7GdU/KFPIj6
pxLHJOoHS5MtaxLvUGhUpEU/3F2K3ZW+JLzpmXNt/x84SBNzoQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDWdHhbShlHh3Pww4V5GYYrVFTpyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDhiZWQ5ZTctMmM5NC0z
N2M2LThjYzMtNjcwM2RhMmUxZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEmieOJH87mEHDxzbO459615/lb43QYZJyL9WMmqcd259TRxzRGL
coQOmN4xJJS58Fn/zjaFbtgm3MfKxwddl1Fb131qV6Nl6CDvcpsG4rEZtua11aGI
mM/OttzAXNd9Rllzt2l1rz05MxUEg7yd3431PBcZNAlQ4mOqTpfx11Q/jtdIzkYq
PtQnv1HFAXA8LMn5L5bDa5Gg44p28DW/4qVuCezoXePi+wzcNx1HhN9Wo+t91ppv
GNOAgJGP3q0FWsykNtI7SiBPNsUFR4917TEEIBsk9c0jpQ4gQ5zTxVAtQMi/c8ou
N4+BMewS3Y7Wf0+8M+19gHTpYB7j+GMneyk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:24 2026 by rpki-client