Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b83640e-485d-365a-8386-4a5d2cffe1d7.roa
File:                     1b83640e-485d-365a-8386-4a5d2cffe1d7.roa (raw, json)
Hash identifier:          TUW1hNTfPbHQy/hMkk6QsmmY7yIOpM+Ojb/hvFhfOg4=
Subject key identifier:   84:4C:C3:CA:ED:EB:C5:9F:37:83:0E:C1:69:D3:E7:A6:9B:F1:BE:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F75A61CA42155939965F840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b83640e-485d-365a-8386-4a5d2cffe1d7.roa
Signing time:             Tue 10 Mar 2026 14:28:41 +0000
ROA not before:           Tue 10 Mar 2026 14:28:41 +0000
ROA not after:            Mon 08 Jun 2026 14:28:41 +0000
asID:                     396591
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:75:a6:1c:a4:21:55:93:99:65:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 14:28:41 2026 GMT
            Not After : Jun  8 14:28:41 2026 GMT
        Subject: CN=c6a54446-44d7-4455-a607-8156f30dc11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:63:c2:41:ef:c7:45:fe:7b:3f:63:ee:68:
                    07:9f:9c:3d:50:4a:dc:b4:e3:31:e6:17:d2:dd:11:
                    d1:a0:2b:3d:4f:b6:ae:47:60:61:03:76:28:27:9b:
                    f4:a6:47:52:6c:d6:bd:a6:bf:93:e4:67:43:f1:73:
                    ee:a7:ad:f3:9c:b1:dd:11:b8:77:18:31:ec:0e:e5:
                    b9:53:cd:0a:2d:d0:1d:38:c7:4b:f6:ef:2a:5a:d3:
                    a9:a9:59:97:d9:97:61:8f:ef:b1:52:e1:8b:7c:8e:
                    c6:fa:80:f1:de:d5:c1:13:78:8c:d8:fc:ad:a7:75:
                    8d:28:2b:1e:5e:c5:fa:2a:d8:b0:36:cc:31:7d:ae:
                    46:a9:52:82:4a:5b:be:f6:23:7f:ef:49:0a:13:74:
                    22:0e:d2:be:d6:69:e6:dc:7a:b2:ce:aa:9e:d0:c9:
                    02:68:50:49:a3:b5:3b:4d:ee:ef:03:fc:45:b1:38:
                    28:d0:71:f2:75:4c:93:60:6d:e6:c2:dc:ca:0a:df:
                    25:7d:45:b1:56:55:4e:5a:8a:bb:44:50:d2:ef:9a:
                    4b:c7:32:45:bb:92:e5:8b:cf:27:31:15:4c:f6:24:
                    b2:2c:37:98:9b:cc:fa:fa:0a:4e:3f:7d:d3:32:32:
                    e5:11:c8:2d:33:8a:80:62:d5:17:b8:d7:d1:ab:1f:
                    26:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4C:C3:CA:ED:EB:C5:9F:37:83:0E:C1:69:D3:E7:A6:9B:F1:BE:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b83640e-485d-365a-8386-4a5d2cffe1d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:b1:95:21:08:5b:28:eb:2a:76:98:b2:26:2e:57:49:af:d4:
         76:f7:7d:24:ab:0f:7c:c7:7b:36:17:e6:0d:24:16:57:48:c8:
         5d:5d:fd:d8:bf:cc:2e:5d:86:ef:a7:f0:ef:b9:23:d1:d7:a3:
         67:d1:59:a2:11:60:4a:d4:8c:b8:3b:54:57:3d:51:ce:5b:45:
         df:f2:1b:d6:af:93:69:8c:12:94:42:bd:52:67:e5:15:84:fb:
         5b:af:58:42:ef:4f:0f:d4:93:99:04:4e:4b:5e:fc:91:f5:91:
         a2:d5:de:cf:5d:52:35:91:78:bd:b6:9f:44:94:61:05:07:06:
         58:47:89:01:72:e7:a1:ba:08:ee:08:ca:17:88:47:89:a6:d3:
         b4:89:eb:31:cb:f5:27:e1:ef:66:72:a8:a0:aa:4a:30:3f:71:
         db:d8:c1:89:60:c8:6a:8f:16:59:f8:c2:f7:ca:d3:28:9d:a8:
         8d:73:9c:3f:74:f6:ad:57:5d:d9:d4:60:4d:82:8f:a7:57:23:
         f9:44:cb:0f:0e:8a:05:21:12:8a:00:03:27:a7:28:eb:ed:1a:
         c7:fc:35:96:6f:7b:6f:e6:5b:74:21:4b:cc:14:f3:fe:b4:92:
         32:03:6a:60:1c:fe:f5:cd:d7:87:3c:a9:a5:6a:b3:0f:59:7e:
         98:10:7c:c1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdaYcpCFVk5ll+EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxMDE0Mjg0MVoXDTI2MDYwODE0Mjg0MVowLzEtMCsGA1UEAxMk
YzZhNTQ0NDYtNDRkNy00NDU1LWE2MDctODE1NmYzMGRjMTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKBjwkHvx0X+ez9j7mgHn5w9UErctOMx5hfS
3RHRoCs9T7auR2BhA3YoJ5v0pkdSbNa9pr+T5GdD8XPup63znLHdEbh3GDHsDuW5
U80KLdAdOMdL9u8qWtOpqVmX2Zdhj++xUuGLfI7G+oDx3tXBE3iM2Pytp3WNKCse
XsX6KtiwNswxfa5GqVKCSlu+9iN/70kKE3QiDtK+1mnm3Hqyzqqe0MkCaFBJo7U7
Te7vA/xFsTgo0HHydUyTYG3mwtzKCt8lfUWxVlVOWoq7RFDS75pLxzJFu5Lli88n
MRVM9iSyLDeYm8z6+gpOP33TMjLlEcgtM4qAYtUXuNfRqx8mdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIRMw8rt68WfN4MOwWnT56ab8b6UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWI4MzY0MGUtNDg1ZC0z
NjVhLTgzODYtNGE1ZDJjZmZlMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIqxlSEIWyjrKnaYsiYuV0mv1Hb3fSSrD3zHezYX5g0kFldIyF1d
/di/zC5dhu+n8O+5I9HXo2fRWaIRYErUjLg7VFc9Uc5bRd/yG9avk2mMEpRCvVJn
5RWE+1uvWELvTw/Uk5kETkte/JH1kaLV3s9dUjWReL22n0SUYQUHBlhHiQFy56G6
CO4IyheIR4mm07SJ6zHL9Sfh72ZyqKCqSjA/cdvYwYlgyGqPFln4wvfK0yidqI1z
nD909q1XXdnUYE2Cj6dXI/lEyw8OigUhEooAAyenKOvtGsf8NZZve2/mW3QhS8wU
8/60kjIDamAc/vXN14c8qaVqsw9ZfpgQfME=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:01:45 2026 by rpki-client