Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6458b20a-3e43-3ab7-b16e-9b44b2bca8c1.roa
File:                     6458b20a-3e43-3ab7-b16e-9b44b2bca8c1.roa (raw, json)
Hash identifier:          iqtqrWyfefnBhSbJ8Ige/OsfsiJR3zrpD+NG9/Xvev0=
Subject key identifier:   59:10:87:C3:51:54:00:E3:77:9C:D6:FA:19:91:34:F2:E3:AD:FD:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA84F2D6BE520A6A0660C1C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6458b20a-3e43-3ab7-b16e-9b44b2bca8c1.roa
Signing time:             Tue 28 Apr 2026 14:56:55 +0000
ROA not before:           Tue 28 Apr 2026 14:56:55 +0000
ROA not after:            Mon 27 Jul 2026 14:56:55 +0000
asID:                     40717
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:4f:2d:6b:e5:20:a6:a0:66:0c:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 14:56:55 2026 GMT
            Not After : Jul 27 14:56:55 2026 GMT
        Subject: CN=b2938e74-ade7-4b26-811c-d744dc305d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ef:c7:89:dd:c4:4a:d9:3e:f6:ab:bf:05:14:
                    e3:dc:6d:e0:24:02:fe:20:43:a1:06:5e:ac:84:94:
                    36:62:df:9e:db:61:05:b7:9b:eb:b5:3f:ff:dc:05:
                    cf:0a:d9:9c:a0:82:df:ff:ae:86:a5:da:2c:72:20:
                    18:41:57:22:c5:96:8a:55:79:96:cf:18:db:68:64:
                    d8:ed:0a:6a:9b:1c:41:81:62:7e:d6:14:69:21:f5:
                    58:bd:d0:e1:2e:fd:35:db:dd:39:8b:35:9a:6a:de:
                    7b:1b:b3:b6:6b:3d:2d:c6:4b:db:1d:5b:dd:0c:b4:
                    24:09:d8:fe:c3:a5:58:2a:5f:d4:eb:03:e7:75:19:
                    a2:1c:ec:bc:0c:ec:52:ba:f5:b5:41:83:30:1f:22:
                    8b:d5:ab:58:fb:97:5b:8b:d1:af:49:44:49:19:a3:
                    ff:69:4e:39:69:00:b9:fc:90:23:78:da:cd:84:12:
                    93:8f:38:2b:fc:8f:b9:89:9c:10:e1:f1:e1:af:4e:
                    b6:cf:80:c7:f1:33:4d:15:2d:6f:23:0a:38:3c:25:
                    b5:02:fe:0c:53:7a:cc:5b:21:10:ba:9f:98:0e:46:
                    e7:31:7f:38:ae:c6:c0:04:50:5a:7d:8e:e5:ef:fa:
                    48:1d:ee:62:58:af:bf:5b:2c:9f:93:0f:90:91:13:
                    f1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:10:87:C3:51:54:00:E3:77:9C:D6:FA:19:91:34:F2:E3:AD:FD:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6458b20a-3e43-3ab7-b16e-9b44b2bca8c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:60:ed:2d:45:58:f3:3a:c1:50:be:a6:ff:b5:66:80:39:ed:
         51:26:64:26:c7:51:72:5e:48:b5:b4:90:86:5a:6d:4b:07:85:
         7b:fe:39:f9:cb:8b:93:aa:d1:10:5f:62:50:3a:09:91:d4:4b:
         11:67:3f:03:43:4e:71:b0:19:64:52:a6:39:33:77:9b:59:34:
         88:4f:eb:d4:aa:a1:9d:d0:63:ba:78:9a:ea:90:32:ef:d5:ae:
         5d:1a:7f:9d:43:17:0a:0f:9e:d0:69:ff:ab:f7:3c:2e:fe:9d:
         37:c2:bf:89:30:48:4b:b2:f1:c7:60:98:ec:7c:58:a3:c8:f3:
         7c:03:c4:8e:45:76:a1:72:ed:9d:2d:c3:f5:6f:28:6a:35:27:
         ac:aa:20:da:c0:fb:73:29:fe:fb:65:68:cd:97:a3:d2:41:34:
         14:d3:a5:7a:46:43:ef:db:7a:9d:d7:2a:fd:2a:ca:98:c9:db:
         e0:c6:d2:9a:19:19:7f:8a:d3:c0:9e:63:ee:31:d8:34:71:57:
         5d:0c:59:e2:b3:0f:69:38:91:67:24:46:db:92:1e:60:89:1f:
         be:7c:c2:3a:9a:bb:4b:9a:81:69:89:17:e1:bb:61:f3:f3:24:
         4e:f3:1a:c7:d8:bf:5f:34:e9:4e:27:65:9e:42:50:9c:0a:b5:
         6b:72:de:03
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2oTy1r5SCmoGYMHAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyODE0NTY1NVoXDTI2MDcyNzE0NTY1NVowLzEtMCsGA1UEAxMk
YjI5MzhlNzQtYWRlNy00YjI2LTgxMWMtZDc0NGRjMzA1ZDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu/Hid3EStk+9qu/BRTj3G3gJAL+IEOhBl6s
hJQ2Yt+e22EFt5vrtT//3AXPCtmcoILf/66GpdosciAYQVcixZaKVXmWzxjbaGTY
7QpqmxxBgWJ+1hRpIfVYvdDhLv012905izWaat57G7O2az0txkvbHVvdDLQkCdj+
w6VYKl/U6wPndRmiHOy8DOxSuvW1QYMwHyKL1atY+5dbi9GvSURJGaP/aU45aQC5
/JAjeNrNhBKTjzgr/I+5iZwQ4fHhr062z4DH8TNNFS1vIwo4PCW1Av4MU3rMWyEQ
up+YDkbnMX84rsbABFBafY7l7/pIHe5iWK+/Wyyfkw+QkRPxjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFkQh8NRVADjd5zW+hmRNPLjrf3QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjQ1OGIyMGEtM2U0My0z
YWI3LWIxNmUtOWI0NGIyYmNhOGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+6j
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL9g7S1FWPM6wVC+pv+1ZoA57VEmZCbHUXJeSLW0kIZabUsHhXv+
OfnLi5Oq0RBfYlA6CZHUSxFnPwNDTnGwGWRSpjkzd5tZNIhP69SqoZ3QY7p4muqQ
Mu/Vrl0af51DFwoPntBp/6v3PC7+nTfCv4kwSEuy8cdgmOx8WKPI83wDxI5FdqFy
7Z0tw/VvKGo1J6yqINrA+3Mp/vtlaM2Xo9JBNBTTpXpGQ+/bep3XKv0qypjJ2+DG
0poZGX+K08CeY+4x2DRxV10MWeKzD2k4kWckRtuSHmCJH758wjqau0uagWmJF+G7
YfPzJE7zGsfYv1806U4nZZ5CUJwKtWty3gM=
-----END CERTIFICATE-----
Generated at Wed May 13 05:47:58 2026 by rpki-client