Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ff4387-598e-3cb2-a79d-dc17ba38bfad.roa
File:                     21ff4387-598e-3cb2-a79d-dc17ba38bfad.roa (raw, json)
Hash identifier:          BsxvQxKniIXST1cSv8cC7OnGRqS93IlDb81HuHiV+Q4=
Subject key identifier:   AF:08:D2:09:A3:51:3F:9B:C0:D5:FD:02:2D:18:F7:42:E6:16:54:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBA3B1281432E19936925E680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ff4387-598e-3cb2-a79d-dc17ba38bfad.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     40717
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:12:81:43:2e:19:93:69:25:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=0f71177a-2a5d-484d-b712-411b53713ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:11:2b:c4:ea:fb:b4:8e:4c:42:86:f6:90:
                    91:b4:cb:34:dd:1c:7c:03:c0:a1:ef:8f:4a:fe:bb:
                    19:04:0a:00:07:b3:fd:fd:ce:8e:4b:cd:15:0b:d3:
                    d1:e5:24:f1:f7:4a:05:61:f3:8b:b3:6e:c5:00:b3:
                    db:93:c6:98:5c:7d:c9:2e:42:43:da:7d:fc:5a:59:
                    e9:e9:fb:9f:1b:76:d0:76:54:26:f1:82:93:27:1b:
                    68:38:4a:4f:5b:6c:dd:96:3d:cf:72:8d:9e:d0:49:
                    8a:b8:1f:b3:c5:e0:6f:e1:30:7b:08:73:b3:d5:15:
                    34:1a:8f:41:05:06:94:f2:e3:ae:a2:e5:b2:16:aa:
                    b0:a0:d2:7f:80:37:6e:ff:54:cf:3a:f6:27:a7:28:
                    c3:3d:1c:e8:ec:1a:be:bb:c6:72:6a:25:0c:ff:c6:
                    2e:81:84:b9:4e:be:a0:a8:29:10:7a:6e:cf:b6:2c:
                    1d:64:5c:23:da:49:a0:de:28:76:94:53:3c:b2:8a:
                    fe:8c:72:ad:08:72:62:9e:60:f2:07:6b:42:42:5f:
                    8f:e0:87:4c:7e:d1:f7:20:bf:99:b9:45:b4:e5:01:
                    dd:56:43:1d:de:85:f3:cf:ff:2c:a3:fe:e3:59:9f:
                    de:72:4c:34:64:1d:f5:b3:a9:44:c8:35:4e:5a:1e:
                    1e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:08:D2:09:A3:51:3F:9B:C0:D5:FD:02:2D:18:F7:42:E6:16:54:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ff4387-598e-3cb2-a79d-dc17ba38bfad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:2b:50:f0:62:e3:be:59:de:ef:0d:22:52:b0:d0:51:16:9e:
         df:a3:76:e9:9b:10:b3:2a:2b:4c:52:af:d7:e2:a3:ab:b2:9b:
         14:52:b1:33:67:72:fa:4f:3a:f6:c0:81:ab:67:c1:da:7e:6c:
         72:22:6e:bb:68:a3:76:db:dc:c9:7d:f6:c0:42:bf:12:b9:0d:
         7c:e4:43:96:6d:ec:51:fd:00:bc:b8:d0:9b:2e:a0:7e:61:39:
         ad:19:26:3a:d4:08:3b:f1:62:fb:ab:6e:67:25:66:c9:cc:50:
         3c:6f:bf:d0:46:75:f2:9a:f7:d7:34:23:2b:00:41:8d:08:a7:
         af:e6:55:23:37:da:22:26:4b:b8:bb:85:e6:26:2d:b4:19:f5:
         65:cb:19:22:87:a8:81:35:22:e4:1d:c1:6a:b7:dd:a6:2c:18:
         ea:d1:dc:a7:58:9a:b4:df:c3:b3:c5:3c:4c:af:8b:d9:21:a1:
         85:74:d4:8e:87:dd:42:a3:66:c9:94:7a:ef:1b:8b:ad:7f:a4:
         a7:e5:4d:33:2a:c3:a1:48:97:84:cc:26:65:47:bd:79:6c:7a:
         3c:f1:6c:eb:67:98:e8:20:20:9e:13:72:45:08:0f:e3:a2:50:
         61:11:62:ff:ac:31:fa:3b:b9:2e:8c:60:0b:29:65:b6:ba:3c:
         e7:76:80:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE26OxKBQy4Zk2kl5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
MGY3MTE3N2EtMmE1ZC00ODRkLWI3MTItNDExYjUzNzEzY2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurMRK8Tq+7SOTEKG9pCRtMs03Rx8A8Ch749K
/rsZBAoAB7P9/c6OS80VC9PR5STx90oFYfOLs27FALPbk8aYXH3JLkJD2n38Wlnp
6fufG3bQdlQm8YKTJxtoOEpPW2zdlj3Pco2e0EmKuB+zxeBv4TB7CHOz1RU0Go9B
BQaU8uOuouWyFqqwoNJ/gDdu/1TPOvYnpyjDPRzo7Bq+u8ZyaiUM/8YugYS5Tr6g
qCkQem7PtiwdZFwj2kmg3ih2lFM8sor+jHKtCHJinmDyB2tCQl+P4IdMftH3IL+Z
uUW05QHdVkMd3oXzz/8so/7jWZ/eckw0ZB31s6lEyDVOWh4eiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK8I0gmjUT+bwNX9Ai0Y90LmFlSwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFmZjQzODctNTk4ZS0z
Y2IyLWE3OWQtZGMxN2JhMzhiZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJArUPBi475Z3u8NIlKw0FEWnt+jdumbELMqK0xSr9fio6uymxRS
sTNncvpPOvbAgatnwdp+bHIibrtoo3bb3Ml99sBCvxK5DXzkQ5Zt7FH9ALy40Jsu
oH5hOa0ZJjrUCDvxYvurbmclZsnMUDxvv9BGdfKa99c0IysAQY0Ip6/mVSM32iIm
S7i7heYmLbQZ9WXLGSKHqIE1IuQdwWq33aYsGOrR3KdYmrTfw7PFPEyvi9khoYV0
1I6H3UKjZsmUeu8bi61/pKflTTMqw6FIl4TMJmVHvXlsejzxbOtnmOggIJ4TckUI
D+OiUGERYv+sMfo7uS6MYAspZba6POd2gO0=
-----END CERTIFICATE-----
Generated at Wed May 13 07:51:13 2026 by rpki-client