Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/664aa377-6711-3b1f-ac8c-42a4365b5336.roa
File:                     664aa377-6711-3b1f-ac8c-42a4365b5336.roa (raw, json)
Hash identifier:          TEQksww1trjg5Nl8qKncQsyD0irZJZQc/Mo5mGuC0Bw=
Subject key identifier:   D0:E9:38:DA:97:63:2F:90:FD:ED:8D:09:83:53:0C:23:FA:D1:2C:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D97555A77953A72010FDF6EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/664aa377-6711-3b1f-ac8c-42a4365b5336.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     396616
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:5a:77:95:3a:72:01:0f:df:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=57e2b2b1-c02d-4252-81d4-d95c81efc616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fd:6d:0d:db:57:ee:61:b4:95:f5:5f:57:a7:
                    b3:9d:d9:7b:6a:75:87:ed:b2:72:62:d2:bf:05:fb:
                    b6:f9:7b:98:a1:45:88:2a:f8:92:7b:fb:a2:6e:a2:
                    2d:ec:09:35:89:a2:35:3b:10:0e:03:f7:7a:2a:04:
                    33:98:4d:87:08:d9:86:54:69:e3:97:c8:54:cd:b6:
                    7b:d2:7b:bf:5c:57:08:2b:10:50:8f:98:ce:9d:b7:
                    cb:8d:e7:c6:ff:b2:db:09:77:5f:c4:c4:d5:53:42:
                    33:3b:9c:f0:b3:fa:ef:6d:4b:47:5a:a3:7c:93:ee:
                    70:fa:1d:75:9e:60:6e:fb:f6:06:18:28:bf:f4:a9:
                    4e:dc:7a:db:9a:28:7d:00:23:5c:7c:2c:ce:ad:1a:
                    88:cc:39:de:b9:41:66:3b:33:c5:29:cd:d2:96:47:
                    c3:cb:89:24:0c:fe:36:ae:fd:eb:dd:ad:5c:6b:3f:
                    10:f4:c3:81:cc:ea:93:b7:67:76:ef:b3:3a:c5:99:
                    d0:f0:fa:e6:44:21:ab:8b:02:f9:d0:4f:02:24:9d:
                    50:4a:59:e2:c4:fd:9b:33:ff:d2:75:ad:cc:5b:38:
                    70:c3:ef:94:c8:86:13:bd:34:90:98:af:0d:e9:cc:
                    af:8b:7b:2a:3f:28:32:7d:53:3d:38:01:27:1c:36:
                    c2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E9:38:DA:97:63:2F:90:FD:ED:8D:09:83:53:0C:23:FA:D1:2C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/664aa377-6711-3b1f-ac8c-42a4365b5336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:ef:eb:49:65:20:03:4d:1f:7e:04:56:35:fb:6e:83:a2:36:
         c1:92:43:27:07:b4:27:3d:78:d9:d0:05:15:69:02:e6:dc:08:
         71:e9:d5:db:40:07:83:4d:bb:85:27:28:6f:b9:25:b2:ee:3c:
         92:2a:81:1a:0f:82:4a:8f:52:75:19:6f:69:87:5c:48:50:eb:
         00:41:69:cf:8c:f6:61:b2:ef:1d:90:ce:8b:e0:b4:48:13:84:
         b3:bb:6d:87:8e:93:c1:55:0e:b8:8f:bf:ed:ed:16:96:d4:4b:
         f5:d4:ad:40:18:86:1f:5d:2b:43:76:59:47:20:74:4c:7c:66:
         45:0d:96:b1:3b:14:63:85:56:4a:b2:f5:a8:8e:ca:2b:e2:87:
         95:a3:ba:95:fc:a2:b0:8a:3a:84:77:99:c6:e7:f8:1c:3f:73:
         ca:0b:22:57:02:24:f0:49:07:66:55:83:ac:bd:ef:e3:0a:e3:
         54:f5:7c:5c:66:bb:07:6a:b9:f8:57:56:e9:89:13:99:ee:a2:
         66:a2:ec:40:1a:dd:87:98:a7:7f:9f:18:ac:20:d8:72:31:26:
         78:a3:85:41:75:51:c5:e1:15:02:49:2f:5d:25:45:d2:a3:1d:
         28:df:72:20:95:45:e7:01:4f:8d:23:e2:09:20:2e:49:5a:fd:
         c3:1a:7e:0c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2XVVp3lTpyAQ/fbsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk
NTdlMmIyYjEtYzAyZC00MjUyLTgxZDQtZDk1YzgxZWZjNjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/1tDdtX7mG0lfVfV6ezndl7anWH7bJyYtK/
Bfu2+XuYoUWIKviSe/uibqIt7Ak1iaI1OxAOA/d6KgQzmE2HCNmGVGnjl8hUzbZ7
0nu/XFcIKxBQj5jOnbfLjefG/7LbCXdfxMTVU0IzO5zws/rvbUtHWqN8k+5w+h11
nmBu+/YGGCi/9KlO3Hrbmih9ACNcfCzOrRqIzDneuUFmOzPFKc3SlkfDy4kkDP42
rv3r3a1caz8Q9MOBzOqTt2d277M6xZnQ8PrmRCGriwL50E8CJJ1QSlnixP2bM//S
da3MWzhww++UyIYTvTSQmK8N6cyvi3sqPygyfVM9OAEnHDbC8QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNDpONqXYy+Q/e2NCYNTDCP60SxhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjY0YWEzNzctNjcxMS0z
YjFmLWFjOGMtNDJhNDM2NWI1MzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL7v60llIANNH34EVjX7boOiNsGSQycHtCc9eNnQBRVpAubcCHHp
1dtAB4NNu4UnKG+5JbLuPJIqgRoPgkqPUnUZb2mHXEhQ6wBBac+M9mGy7x2Qzovg
tEgThLO7bYeOk8FVDriPv+3tFpbUS/XUrUAYhh9dK0N2WUcgdEx8ZkUNlrE7FGOF
Vkqy9aiOyivih5WjupX8orCKOoR3mcbn+Bw/c8oLIlcCJPBJB2ZVg6y97+MK41T1
fFxmuwdqufhXVumJE5nuomai7EAa3YeYp3+fGKwg2HIxJnijhUF1UcXhFQJJL10l
RdKjHSjfciCVRecBT40j4gkgLkla/cMafgw=
-----END CERTIFICATE-----
Generated at Wed May 13 15:18:24 2026 by rpki-client