Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4eb936eb-28ae-3322-bb41-9c952bd0aa38.roa
File:                     4eb936eb-28ae-3322-bb41-9c952bd0aa38.roa (raw, json)
Hash identifier:          /7ADIf5EREjlacHyupVaYcfW85d/JFz/qYoWiqLrD2Y=
Subject key identifier:   AF:14:C9:F9:1F:6D:B5:F6:89:8B:F0:5B:B9:9D:BC:BF:56:47:58:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D422F8E4781C0A1B0693A4C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4eb936eb-28ae-3322-bb41-9c952bd0aa38.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     396552
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:8e:47:81:c0:a1:b0:69:3a:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=2d2ecf0b-82b7-4759-b0e0-6df55ea48886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:26:cd:bc:f8:98:aa:3d:15:77:74:49:b2:
                    8d:7f:f6:1d:3d:c9:4a:9c:e8:0d:ed:2a:95:be:e7:
                    df:a6:0e:d5:8c:4d:9e:8d:9f:81:f6:06:e0:ed:df:
                    7e:f4:3a:3d:b3:34:41:b2:a2:04:c1:5e:2e:1a:02:
                    84:a6:9d:08:e6:14:bf:31:3e:1c:1c:31:15:38:ea:
                    52:65:f4:6e:ea:83:28:bb:7d:f2:17:7e:cd:8c:9a:
                    b1:14:a2:8a:29:66:37:b0:73:9d:53:d9:b3:fa:de:
                    2e:e0:94:1c:52:a3:db:a5:95:32:48:1b:dc:1f:da:
                    eb:a8:f3:90:0a:66:6c:67:45:8c:09:b7:bd:13:35:
                    5e:4c:f4:f2:58:33:f1:60:93:d8:bd:f6:74:0d:cd:
                    41:ab:b0:c2:c1:84:c2:fd:0a:99:23:d0:27:8c:84:
                    19:76:e6:4f:e5:1e:f8:6a:b4:8e:b6:22:a5:2e:0b:
                    6e:12:27:13:d9:f2:14:5c:2a:0e:82:1a:2b:e8:4c:
                    f1:7f:df:c5:1a:49:7a:6c:58:74:f2:7d:06:46:36:
                    f6:40:a8:74:37:96:47:66:72:b0:a9:ca:c6:61:82:
                    39:37:b4:1d:0a:3d:13:0a:6f:28:8e:4e:9e:45:18:
                    19:05:28:68:80:32:00:db:03:3c:a7:53:03:20:22:
                    5d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:14:C9:F9:1F:6D:B5:F6:89:8B:F0:5B:B9:9D:BC:BF:56:47:58:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4eb936eb-28ae-3322-bb41-9c952bd0aa38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:77:d8:89:b6:15:94:43:90:d7:4d:06:14:e5:70:81:81:8b:
         cd:56:e1:74:a1:09:8d:06:46:5b:31:a9:63:f7:8e:96:f3:aa:
         5f:00:65:eb:7f:d8:56:1b:63:08:e4:ca:cf:c8:5f:a8:4b:77:
         9a:a6:11:4c:dd:34:84:04:0d:f2:19:c8:f1:fa:7f:1e:cb:01:
         0c:d1:6c:5d:a3:5c:f5:8b:80:9c:57:3a:ea:dd:ee:bb:cf:70:
         05:88:c6:bf:fa:35:9d:8e:a3:66:8d:af:ea:67:cc:15:d0:90:
         fd:eb:32:89:3f:33:57:6c:15:f9:6a:04:9b:74:0c:24:9f:2e:
         3f:b4:25:c3:b7:0a:27:7b:7f:c3:9b:04:28:04:5b:c3:89:da:
         b2:77:66:7e:99:a2:b4:ee:50:1e:ef:13:d8:0c:8b:27:ad:1f:
         ec:51:27:22:90:9e:ca:ff:47:8f:5b:12:2f:27:68:10:52:b7:
         c9:22:34:69:df:d3:9a:86:6d:88:d1:6f:e7:54:e0:df:28:1c:
         e2:81:ec:0a:5f:a1:b6:75:d6:3e:e9:1b:5c:eb:53:7b:ac:66:
         3c:8e:1f:f3:9c:f8:51:3e:68:48:57:5e:01:7d:71:c1:f8:2c:
         41:8e:44:c5:5c:b6:e2:80:d7:1d:91:6b:17:26:13:47:1c:bb:
         1a:08:c5:9b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1CL45HgcChsGk6TAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk
MmQyZWNmMGItODJiNy00NzU5LWIwZTAtNmRmNTVlYTQ4ODg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHYmzbz4mKo9FXd0SbKNf/YdPclKnOgN7SqV
vuffpg7VjE2ejZ+B9gbg7d9+9Do9szRBsqIEwV4uGgKEpp0I5hS/MT4cHDEVOOpS
ZfRu6oMou33yF37NjJqxFKKKKWY3sHOdU9mz+t4u4JQcUqPbpZUySBvcH9rrqPOQ
CmZsZ0WMCbe9EzVeTPTyWDPxYJPYvfZ0Dc1Bq7DCwYTC/QqZI9AnjIQZduZP5R74
arSOtiKlLgtuEicT2fIUXCoOghor6Ezxf9/FGkl6bFh08n0GRjb2QKh0N5ZHZnKw
qcrGYYI5N7QdCj0TCm8ojk6eRRgZBShogDIA2wM8p1MDICJdIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK8UyfkfbbX2iYvwW7mdvL9WR1gzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGViOTM2ZWItMjhhZS0z
MzIyLWJiNDEtOWM5NTJiZDBhYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAK932Im2FZRDkNdNBhTlcIGBi81W4XShCY0GRlsxqWP3jpbzql8A
Zet/2FYbYwjkys/IX6hLd5qmEUzdNIQEDfIZyPH6fx7LAQzRbF2jXPWLgJxXOurd
7rvPcAWIxr/6NZ2Oo2aNr+pnzBXQkP3rMok/M1dsFflqBJt0DCSfLj+0JcO3Cid7
f8ObBCgEW8OJ2rJ3Zn6ZorTuUB7vE9gMiyetH+xRJyKQnsr/R49bEi8naBBSt8ki
NGnf05qGbYjRb+dU4N8oHOKB7ApfobZ11j7pG1zrU3usZjyOH/Oc+FE+aEhXXgF9
ccH4LEGORMVctuKA1x2RaxcmE0ccuxoIxZs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:55 2026 by rpki-client