Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63cfb616-4a8c-30a3-af18-f7b834a992d1.roa
File:                     63cfb616-4a8c-30a3-af18-f7b834a992d1.roa (raw, json)
Hash identifier:          vFBz5Fp5/V7jLqNcpDNwMoOJ4RbsKA9B9rYkjhPKKls=
Subject key identifier:   7E:6D:2B:2E:E0:32:C1:4A:E9:CE:3F:CF:A2:F1:72:4C:3B:03:E4:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D143D5BC3B481E2CF65CD9C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63cfb616-4a8c-30a3-af18-f7b834a992d1.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     397199
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:5b:c3:b4:81:e2:cf:65:cd:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=5084732d-5954-4d93-845a-2ce4c87b10eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1e:03:4a:d4:96:b9:7a:3a:bd:b4:11:5b:1f:
                    1b:aa:33:ee:66:89:78:55:e0:d1:fa:96:4f:4d:4e:
                    75:a7:eb:34:2e:d5:78:73:0a:70:fd:fd:d2:63:60:
                    3e:8e:81:c1:e4:6a:e3:ce:a0:7e:c2:2a:ba:5e:17:
                    b0:e2:e4:79:71:dd:09:bc:e4:d2:fb:4e:09:95:76:
                    82:08:53:04:c9:3e:eb:73:9a:68:fb:04:25:6e:d6:
                    71:e5:f1:88:3b:f6:0d:b2:52:25:0f:80:3a:89:63:
                    28:29:1c:d7:82:37:ac:be:6a:5b:12:ee:19:69:d9:
                    a5:4b:74:6f:33:03:90:d8:ee:2b:58:36:d8:92:89:
                    d7:48:02:6b:9c:9b:12:9f:7d:5e:e5:c0:c6:6d:b0:
                    64:29:b1:4b:29:65:41:7f:be:51:35:12:82:42:0c:
                    0a:1a:ed:79:c9:1c:3c:89:29:54:bd:cd:63:e1:27:
                    e7:23:44:0b:e6:22:fd:37:1e:0d:13:a6:e3:6f:1f:
                    98:51:4c:11:06:7a:f1:21:59:d7:af:d3:98:02:5b:
                    49:52:71:0e:2c:c9:00:cc:70:5a:7a:52:0c:09:41:
                    84:ad:f7:f5:a1:a7:5f:7c:a3:b6:a5:b4:25:cf:51:
                    05:4b:95:94:26:75:ab:aa:fc:33:2d:de:6e:d4:0c:
                    61:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6D:2B:2E:E0:32:C1:4A:E9:CE:3F:CF:A2:F1:72:4C:3B:03:E4:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63cfb616-4a8c-30a3-af18-f7b834a992d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:60:8c:85:7f:0d:37:65:b9:aa:81:42:ad:57:7d:95:49:3a:
         42:fd:6c:43:ee:e1:bb:2e:43:37:7d:cb:17:f9:90:a9:ee:54:
         9e:35:23:ce:a8:a7:b9:72:cc:ec:d5:ec:7f:ae:bc:e2:4c:92:
         92:36:c9:ae:3b:75:94:27:3c:53:61:95:af:c8:53:2d:52:8a:
         e1:35:7c:11:a3:a4:92:d4:aa:94:4a:a6:e0:1c:c9:e0:ca:dd:
         1c:c0:4c:3b:a7:2c:fe:7d:47:a7:7a:9e:e5:c4:85:74:85:ef:
         dc:f7:09:e3:7f:35:6e:c3:74:13:d3:86:90:73:79:74:2b:de:
         cd:08:ac:2b:9c:96:c2:96:e6:c2:53:b7:4b:a7:f4:76:29:94:
         21:a1:d5:f1:5e:16:94:76:ed:72:ba:22:ac:97:9f:af:bf:0e:
         15:51:e1:5d:fb:82:ba:c3:e8:2d:df:61:ef:15:b4:91:89:29:
         a7:17:7b:52:23:cc:47:9d:5a:57:6c:28:00:f3:2e:d4:72:fc:
         01:4d:41:70:a0:1b:2c:ea:75:1e:73:35:91:8d:97:af:04:15:
         2c:a9:5a:a3:a3:e5:3f:04:54:42:ad:9f:23:a0:34:0f:91:d3:
         23:c7:43:9b:42:8b:fe:29:81:24:43:bd:ea:5f:f3:2e:6b:bc:
         48:0c:a4:6a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UPVvDtIHiz2XNnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
NTA4NDczMmQtNTk1NC00ZDkzLTg0NWEtMmNlNGM4N2IxMGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB4DStSWuXo6vbQRWx8bqjPuZol4VeDR+pZP
TU51p+s0LtV4cwpw/f3SY2A+joHB5GrjzqB+wiq6Xhew4uR5cd0JvOTS+04JlXaC
CFMEyT7rc5po+wQlbtZx5fGIO/YNslIlD4A6iWMoKRzXgjesvmpbEu4ZadmlS3Rv
MwOQ2O4rWDbYkonXSAJrnJsSn31e5cDGbbBkKbFLKWVBf75RNRKCQgwKGu15yRw8
iSlUvc1j4SfnI0QL5iL9Nx4NE6bjbx+YUUwRBnrxIVnXr9OYAltJUnEOLMkAzHBa
elIMCUGErff1oadffKO2pbQlz1EFS5WUJnWrqvwzLd5u1AxhXQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH5tKy7gMsFK6c4/z6Lxckw7A+SqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjNjZmI2MTYtNGE4Yy0z
MGEzLWFmMTgtZjdiODM0YTk5MmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB1gjIV/DTdluaqBQq1XfZVJOkL9bEPu4bsuQzd9yxf5kKnuVJ41
I86op7lyzOzV7H+uvOJMkpI2ya47dZQnPFNhla/IUy1SiuE1fBGjpJLUqpRKpuAc
yeDK3RzATDunLP59R6d6nuXEhXSF79z3CeN/NW7DdBPThpBzeXQr3s0IrCuclsKW
5sJTt0un9HYplCGh1fFeFpR27XK6IqyXn6+/DhVR4V37grrD6C3fYe8VtJGJKacX
e1IjzEedWldsKADzLtRy/AFNQXCgGyzqdR5zNZGNl68EFSypWqOj5T8EVEKtnyOg
NA+R0yPHQ5tCi/4pgSRDvepf8y5rvEgMpGo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:58 2026 by rpki-client