Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26cac1c1-1aa0-30c5-9ee2-2986df58e6c3.roa
File:                     26cac1c1-1aa0-30c5-9ee2-2986df58e6c3.roa (raw, json)
Hash identifier:          EvlZQw7AiG/S+gWHTFVuflV7TF1eQ6rAsUoybezR6BA=
Subject key identifier:   B5:AA:14:AA:7F:09:98:B8:FD:6F:29:AA:73:A3:EF:11:E8:7D:FE:B4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0BDD1716B0F412B7038E2A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26cac1c1-1aa0-30c5-9ee2-2986df58e6c3.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     396565
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:17:16:b0:f4:12:b7:03:8e:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=1a2edc3f-60a9-4580-bb06-2348395d1b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:70:cd:af:64:7a:0e:1e:4f:13:cd:a3:95:
                    b2:23:59:32:0a:19:0d:78:f0:e0:8d:59:c3:a3:ef:
                    fd:fd:94:21:8f:7e:6a:51:1c:34:82:b5:eb:98:49:
                    02:3d:99:4e:ab:8e:42:9c:67:5f:29:01:fe:97:ee:
                    9b:69:ad:d6:58:26:9c:7b:f4:4d:b2:03:63:69:33:
                    fc:69:6e:9d:0b:ca:3a:3c:f5:1a:49:65:68:c8:a0:
                    88:9e:be:7d:e9:37:7a:c1:de:cf:34:f7:64:29:a4:
                    91:21:d5:f2:9c:bc:80:4c:17:e7:ae:1e:ff:0d:56:
                    df:80:d9:4b:3e:c5:75:b9:f6:7c:fe:ba:88:7b:51:
                    13:ee:b5:73:71:f1:48:a5:7e:58:bb:f4:dc:5c:73:
                    2f:ec:79:fc:c6:c4:33:fc:1a:63:a0:45:c1:c5:36:
                    b3:69:da:52:1b:52:13:e0:82:a5:ed:5f:e4:12:32:
                    21:b8:65:1a:ff:5c:74:7c:ba:6e:60:27:32:38:bf:
                    f5:60:cc:1e:d6:74:f1:70:db:fc:63:0d:d0:7d:bd:
                    7c:a1:4d:e9:0c:77:5b:86:ee:01:cf:20:6f:b7:51:
                    13:92:b6:a5:16:2d:d1:36:8a:38:9d:d0:7a:7d:6a:
                    c3:35:56:45:ff:39:eb:87:d9:9c:ec:df:c5:17:5e:
                    42:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AA:14:AA:7F:09:98:B8:FD:6F:29:AA:73:A3:EF:11:E8:7D:FE:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26cac1c1-1aa0-30c5-9ee2-2986df58e6c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:20:a8:de:d0:67:28:39:4f:e4:8b:30:1f:0f:b2:0c:70:f9:
         d8:8f:3e:d5:58:5d:e4:c8:7f:43:5e:60:42:06:c2:c0:18:2e:
         74:1e:85:e3:e1:e5:06:90:da:ab:c2:aa:70:24:7a:25:b0:63:
         af:f7:ed:dc:9b:b7:ac:ed:6d:4e:15:a0:c8:43:65:78:9a:39:
         40:50:6f:b1:d6:88:ad:00:53:9e:56:88:84:ab:30:35:3c:a8:
         91:e8:bd:6a:ac:62:27:4d:2d:fe:94:4c:ca:47:60:8e:f0:5a:
         d0:47:cf:8b:00:6a:2c:3d:09:e2:43:7d:ba:fe:07:09:41:77:
         ed:72:c2:5f:31:29:c2:3d:99:54:55:70:48:5e:66:f9:bd:33:
         8c:d4:2a:c0:61:e6:d5:50:0e:30:1f:e1:47:99:44:cf:b3:d2:
         47:d6:40:b3:14:be:b7:78:16:f7:60:18:cb:55:6f:a7:ec:1b:
         90:62:a7:de:19:94:f0:5d:4e:54:4a:04:ca:7c:7c:a9:e3:28:
         8b:54:6a:38:c9:36:e8:7f:58:ca:82:75:1b:3a:d7:d5:71:45:
         f0:11:43:68:4d:c5:eb:b2:89:e2:3b:63:96:02:c3:2f:42:b9:
         16:f3:18:be:78:f8:6a:a5:23:70:b8:2c:01:0b:31:21:5c:6a:
         08:32:83:03
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0L3RcWsPQStwOOKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk
MWEyZWRjM2YtNjBhOS00NTgwLWJiMDYtMjM0ODM5NWQxYjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIpwza9keg4eTxPNo5WyI1kyChkNePDgjVnD
o+/9/ZQhj35qURw0grXrmEkCPZlOq45CnGdfKQH+l+6baa3WWCace/RNsgNjaTP8
aW6dC8o6PPUaSWVoyKCInr596Td6wd7PNPdkKaSRIdXynLyATBfnrh7/DVbfgNlL
PsV1ufZ8/rqIe1ET7rVzcfFIpX5Yu/TcXHMv7Hn8xsQz/BpjoEXBxTazadpSG1IT
4IKl7V/kEjIhuGUa/1x0fLpuYCcyOL/1YMwe1nTxcNv8Yw3Qfb18oU3pDHdbhu4B
zyBvt1ETkralFi3RNoo4ndB6fWrDNVZF/znrh9mc7N/FF15CqwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLWqFKp/CZi4/W8pqnOj7xHoff60MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjZjYWMxYzEtMWFhMC0z
MGM1LTllZTItMjk4NmRmNThlNmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCBIKje0GcoOU/kizAfD7IMcPnYjz7VWF3kyH9D
XmBCBsLAGC50HoXj4eUGkNqrwqpwJHolsGOv9+3cm7es7W1OFaDIQ2V4mjlAUG+x
1oitAFOeVoiEqzA1PKiR6L1qrGInTS3+lEzKR2CO8FrQR8+LAGosPQniQ326/gcJ
QXftcsJfMSnCPZlUVXBIXmb5vTOM1CrAYebVUA4wH+FHmUTPs9JH1kCzFL63eBb3
YBjLVW+n7BuQYqfeGZTwXU5USgTKfHyp4yiLVGo4yTbof1jKgnUbOtfVcUXwEUNo
TcXrsoniO2OWAsMvQrkW8xi+ePhqpSNwuCwBCzEhXGoIMoMD
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:53 2026 by rpki-client