Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c1e3636-1518-3a51-8209-9b8ef00e48e4.roa
File:                     3c1e3636-1518-3a51-8209-9b8ef00e48e4.roa (raw, json)
Hash identifier:          WjGeBZxx3aXB3xbt/vDwcjUaZaalia78lOfifOOOaSw=
Subject key identifier:   F3:10:21:39:74:63:48:07:F5:C1:63:63:B1:A3:4F:17:FE:1B:37:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D250C37717B0CE70E75B08080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c1e3636-1518-3a51-8209-9b8ef00e48e4.roa
Signing time:             Thu 12 Mar 2026 14:31:06 +0000
ROA not before:           Thu 12 Mar 2026 14:31:06 +0000
ROA not after:            Wed 10 Jun 2026 14:31:06 +0000
asID:                     396580
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:0c:37:71:7b:0c:e7:0e:75:b0:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 14:31:06 2026 GMT
            Not After : Jun 10 14:31:06 2026 GMT
        Subject: CN=8332ab40-1f4c-4357-bc3c-ec3e9ca59147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:73:75:f4:23:03:56:69:db:1b:b2:8f:8c:5b:
                    fc:2e:eb:88:8a:d0:df:46:df:16:25:22:7c:8f:92:
                    5b:33:f9:a5:1e:a3:39:c3:50:f8:8c:bb:48:0b:86:
                    ca:40:96:7b:8b:c2:e7:0a:b0:22:ba:7d:ec:98:3d:
                    40:5c:bd:4a:c5:7a:ea:d7:ab:48:ab:d0:0c:b4:e8:
                    0e:de:74:3a:c7:38:66:62:28:24:b1:19:af:b2:62:
                    33:dc:bd:d0:61:d0:73:ab:04:65:a7:19:92:db:e1:
                    18:49:3f:04:bd:7c:b5:c4:46:aa:34:67:07:ba:56:
                    65:44:0c:78:80:1c:f2:6c:33:0a:dd:f1:3a:77:71:
                    4f:1a:47:25:46:81:ee:16:32:d4:20:5d:14:35:3a:
                    f5:91:c0:fb:ca:50:32:16:4d:a8:81:85:cf:c5:a6:
                    a3:12:36:a9:7a:a5:83:4c:cf:0b:cb:3b:c7:dd:a1:
                    d9:07:0e:ed:dc:97:d1:47:42:5f:5b:e2:6e:e8:16:
                    64:78:b8:c7:67:99:bb:27:7d:d8:2b:f2:6b:11:33:
                    ba:a7:f5:d8:09:f3:83:82:96:58:ef:41:80:91:d9:
                    65:53:80:1c:ec:26:70:e0:6e:e8:42:23:75:6f:a1:
                    a5:59:fd:44:7a:44:ea:2d:a3:ee:fb:10:e6:02:fd:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:10:21:39:74:63:48:07:F5:C1:63:63:B1:A3:4F:17:FE:1B:37:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c1e3636-1518-3a51-8209-9b8ef00e48e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f2:1c:72:91:41:c3:20:4c:06:10:4e:85:cd:ad:4b:61:9c:
         52:9d:78:5d:8a:58:8f:fa:50:97:fd:d5:90:ee:8a:ea:c6:7e:
         54:29:fb:aa:22:f9:d8:dd:72:57:ec:c9:b9:47:76:91:e9:6e:
         cf:3b:0a:76:a8:72:d5:c8:70:53:c6:07:59:4d:3c:6b:e6:2e:
         99:28:6b:c2:a8:d9:ba:4c:6e:70:d6:ef:24:bb:3c:2f:a1:5a:
         7d:6a:41:45:c6:92:46:4b:47:2b:75:a9:d5:2d:98:ea:5a:f7:
         e7:5d:8e:5d:58:bb:fb:bc:02:71:8e:fc:d6:be:91:3c:67:4e:
         d7:96:6e:50:33:c0:c2:47:a9:17:75:6b:e9:22:3f:c7:61:c9:
         4c:44:a5:7c:73:ef:b2:c1:7d:84:69:ae:4f:f0:3c:ae:a2:6a:
         b0:8c:19:50:1b:a6:4e:14:45:3c:cd:f9:5f:74:1d:9d:42:9c:
         5e:9b:45:03:34:dc:46:53:fd:9b:7a:4b:c1:f8:a6:d9:4f:b5:
         34:03:92:f0:db:da:e7:4f:2e:30:c3:0c:19:7f:e7:68:af:ad:
         e1:bc:7a:b4:94:e1:c1:da:95:ae:d4:ee:ac:26:55:70:04:40:
         0d:9c:b6:73:ae:24:9e:eb:ba:6c:a1:3e:e8:e2:4b:e4:75:00:
         77:d9:32:62
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0lDDdxewznDnWwgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxMjE0MzEwNloXDTI2MDYxMDE0MzEwNlowLzEtMCsGA1UEAxMk
ODMzMmFiNDAtMWY0Yy00MzU3LWJjM2MtZWMzZTljYTU5MTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3N19CMDVmnbG7KPjFv8LuuIitDfRt8WJSJ8
j5JbM/mlHqM5w1D4jLtIC4bKQJZ7i8LnCrAiun3smD1AXL1KxXrq16tIq9AMtOgO
3nQ6xzhmYigksRmvsmIz3L3QYdBzqwRlpxmS2+EYST8EvXy1xEaqNGcHulZlRAx4
gBzybDMK3fE6d3FPGkclRoHuFjLUIF0UNTr1kcD7ylAyFk2ogYXPxaajEjapeqWD
TM8LyzvH3aHZBw7t3JfRR0JfW+Ju6BZkeLjHZ5m7J33YK/JrETO6p/XYCfODgpZY
70GAkdllU4Ac7CZw4G7oQiN1b6GlWf1EekTqLaPu+xDmAv1+BwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPMQITl0Y0gH9cFjY7GjTxf+GzdAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2MxZTM2MzYtMTUxOC0z
YTUxLTgyMDktOWI4ZWYwMGU0OGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHvyHHKRQcMgTAYQToXNrUthnFKdeF2KWI/6UJf91ZDuiurGflQp
+6oi+djdclfsyblHdpHpbs87CnaoctXIcFPGB1lNPGvmLpkoa8Ko2bpMbnDW7yS7
PC+hWn1qQUXGkkZLRyt1qdUtmOpa9+ddjl1Yu/u8AnGO/Na+kTxnTteWblAzwMJH
qRd1a+kiP8dhyUxEpXxz77LBfYRprk/wPK6iarCMGVAbpk4URTzN+V90HZ1CnF6b
RQM03EZT/Zt6S8H4ptlPtTQDkvDb2udPLjDDDBl/52ivreG8erSU4cHala7U7qwm
VXAEQA2ctnOuJJ7rumyhPujiS+R1AHfZMmI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:26 2026 by rpki-client