Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51b58c25-ccfd-3e3d-82b2-5ac10d9ed7a9.roa
File:                     51b58c25-ccfd-3e3d-82b2-5ac10d9ed7a9.roa (raw, json)
Hash identifier:          HhzckKqH7LjZR7gelnI7f8WFr7/v0b0xQyXmuiDwUwE=
Subject key identifier:   33:DB:DF:90:94:06:65:14:31:95:44:56:94:5A:E5:9C:FD:1E:44:E5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E779A1DC91033C6B6485F6E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51b58c25-ccfd-3e3d-82b2-5ac10d9ed7a9.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     396553
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:1d:c9:10:33:c6:b6:48:5f:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=871009d3-e528-4b0d-86a8-4426372edcfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:5d:be:c0:cf:f7:23:08:ff:1d:a0:56:62:
                    6c:70:4e:2a:e1:0a:f9:d1:0f:42:f0:9c:3a:5a:19:
                    22:10:8b:39:d5:6a:02:c1:40:a5:2e:8c:87:71:45:
                    02:03:0d:ce:7d:69:c9:b3:12:d3:5a:fd:ca:dd:53:
                    df:83:e8:b2:27:95:cf:cd:9c:ab:a9:73:c1:d1:31:
                    14:d8:15:43:9b:cf:40:5a:8e:b7:73:36:09:ba:d7:
                    e7:31:4e:9a:a5:8a:4f:20:73:6b:a4:00:5f:6b:7d:
                    62:fb:3b:23:23:61:31:83:75:ba:4e:a0:62:20:40:
                    6a:da:6f:eb:6c:d2:b3:d8:63:84:1a:38:03:16:2d:
                    57:ee:0d:86:0e:23:f8:5e:17:4b:fa:92:4f:24:8e:
                    25:05:84:65:c6:89:43:34:cb:6c:88:1c:86:15:38:
                    e0:79:31:3d:3d:34:bb:72:53:b8:0e:a4:d0:9f:56:
                    15:3e:19:4a:3d:08:61:e6:ab:ab:01:6b:be:e2:32:
                    69:14:96:97:61:41:8d:a2:7c:94:6a:a1:03:6a:af:
                    6d:ec:f5:a6:8b:47:80:15:e8:2a:e6:1e:3b:d9:3b:
                    e2:e4:c5:fb:0d:b4:39:d9:4a:6d:6c:fc:37:8a:fe:
                    bd:1a:dd:4f:6a:af:08:dd:66:4b:73:90:8c:93:ac:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DB:DF:90:94:06:65:14:31:95:44:56:94:5A:E5:9C:FD:1E:44:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51b58c25-ccfd-3e3d-82b2-5ac10d9ed7a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d2:7e:56:74:b2:b7:97:ca:3b:81:bd:1f:80:71:d4:74:24:
         a3:4a:6f:4d:56:62:7f:d9:76:c3:1e:b3:1e:af:e4:ec:8f:ec:
         a5:b7:56:6b:ce:75:28:e6:4e:35:19:32:db:19:9e:3c:b4:9d:
         c6:40:3e:3a:53:bb:e3:f8:9e:0d:e6:ce:97:f2:28:22:68:6f:
         28:6e:fc:29:57:77:ea:ee:e8:2f:b3:7f:6b:1b:43:af:b8:2a:
         e5:37:0a:91:3b:ab:30:d9:17:13:92:d8:ae:9b:93:d6:7f:96:
         9c:dc:08:85:28:8f:26:d7:92:f2:28:66:93:37:d6:1b:02:50:
         e0:c7:c3:a2:25:77:ca:56:0a:c6:5b:95:4f:d0:98:8c:07:f0:
         4e:fc:92:b4:c1:6d:33:43:e9:f6:5e:bd:91:0b:f6:a2:d9:fa:
         95:0a:aa:f5:c0:84:a3:bb:e2:12:c6:b4:d1:9e:42:bc:53:86:
         8d:f1:82:db:ef:a5:2f:78:13:2e:29:88:e0:10:c6:a1:f9:d3:
         6f:e8:80:ad:fe:2b:e0:7d:2c:aa:a4:7c:2d:cb:aa:cf:41:2e:
         53:b4:22:be:08:84:3f:23:24:8a:b8:50:6d:d3:8c:32:1d:33:
         b3:fa:13:a2:2b:ec:15:dc:6b:6d:64:6a:44:8e:53:d4:b6:51:
         ab:61:7e:6e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE53mh3JEDPGtkhfbkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk
ODcxMDA5ZDMtZTUyOC00YjBkLTg2YTgtNDQyNjM3MmVkY2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDNdvsDP9yMI/x2gVmJscE4q4Qr50Q9C8Jw6
WhkiEIs51WoCwUClLoyHcUUCAw3OfWnJsxLTWv3K3VPfg+iyJ5XPzZyrqXPB0TEU
2BVDm89AWo63czYJutfnMU6apYpPIHNrpABfa31i+zsjI2Exg3W6TqBiIEBq2m/r
bNKz2GOEGjgDFi1X7g2GDiP4XhdL+pJPJI4lBYRlxolDNMtsiByGFTjgeTE9PTS7
clO4DqTQn1YVPhlKPQhh5qurAWu+4jJpFJaXYUGNonyUaqEDaq9t7PWmi0eAFegq
5h472Tvi5MX7DbQ52UptbPw3iv69Gt1Paq8I3WZLc5CMk6w6tQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDPb35CUBmUUMZVEVpRa5Zz9HkTlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTFiNThjMjUtY2NmZC0z
ZTNkLTgyYjItNWFjMTBkOWVkN2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC7SflZ0sreXyjuBvR+AcdR0JKNKb01WYn/ZdsMesx6v5OyP7KW3
VmvOdSjmTjUZMtsZnjy0ncZAPjpTu+P4ng3mzpfyKCJobyhu/ClXd+ru6C+zf2sb
Q6+4KuU3CpE7qzDZFxOS2K6bk9Z/lpzcCIUojybXkvIoZpM31hsCUODHw6Ild8pW
CsZblU/QmIwH8E78krTBbTND6fZevZEL9qLZ+pUKqvXAhKO74hLGtNGeQrxTho3x
gtvvpS94Ey4piOAQxqH502/ogK3+K+B9LKqkfC3Lqs9BLlO0Ir4IhD8jJIq4UG3T
jDIdM7P6E6Ir7BXca21kakSOU9S2Uathfm4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:57:23 2026 by rpki-client