Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6705e583-d772-314f-b74e-1e0843c64852.roa
File:                     6705e583-d772-314f-b74e-1e0843c64852.roa (raw, json)
Hash identifier:          Uc5x4JeTbbpJw3V+KORKCFe9AHLhCMND9NpkyE4T1io=
Subject key identifier:   95:8B:A6:3D:6A:0B:58:DA:4F:90:E0:77:62:F4:73:48:B2:2B:51:B7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2644CBDBF22C2BA935ED7D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6705e583-d772-314f-b74e-1e0843c64852.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     396571
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:cb:db:f2:2c:2b:a9:35:ed:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=27faae7e-3890-4918-95fc-03f660242cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:92:0e:29:49:ee:ed:a7:1e:a7:e5:88:e3:
                    6f:4c:be:c5:e2:a1:3f:bc:6e:96:43:59:bc:64:69:
                    5c:60:1b:80:f0:93:99:77:8b:1b:23:57:57:0e:31:
                    82:26:86:26:b7:95:c9:65:90:6a:8f:68:23:e8:a8:
                    0b:ee:6f:77:e9:8a:30:d6:e6:9e:33:66:c6:f8:56:
                    23:49:6d:ed:08:9a:13:da:4e:7c:49:1d:db:12:3e:
                    1f:24:f2:62:e2:4c:b2:ac:73:99:1e:b9:33:49:6f:
                    a7:0a:73:29:95:8f:88:87:50:0b:fb:91:c5:52:52:
                    0c:ba:2b:7d:ef:49:50:d3:c2:02:d9:b4:0d:b0:8b:
                    8c:0e:8c:a4:0f:6c:3e:b6:b0:2d:28:52:1c:7a:ed:
                    37:f3:10:59:09:92:c3:93:fa:78:57:78:07:50:26:
                    f9:c5:8c:cf:32:0c:a0:a7:71:c4:23:4f:f0:58:83:
                    88:3e:cd:f1:f9:b4:39:fe:66:01:b8:92:10:25:0e:
                    10:11:b6:bc:19:f0:92:e5:94:df:98:e5:14:39:c7:
                    ea:fc:ab:04:a9:8c:30:88:b5:59:1f:4d:fc:33:93:
                    77:11:2e:c4:35:fe:96:62:c4:a2:5f:03:48:fa:54:
                    ca:a6:14:d7:8c:78:c2:ff:90:8a:ef:ed:a4:9a:0c:
                    f0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8B:A6:3D:6A:0B:58:DA:4F:90:E0:77:62:F4:73:48:B2:2B:51:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6705e583-d772-314f-b74e-1e0843c64852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c2:db:df:e7:ba:22:d8:f5:96:c6:81:2b:14:60:13:4d:c1:
         dc:12:8b:6b:0f:62:6e:6c:1e:fb:74:d8:f1:ce:56:d0:9b:7b:
         93:83:e0:e4:3b:fa:28:1d:70:84:f6:2d:19:7e:fa:a2:df:a8:
         fd:59:fc:65:57:f7:6c:47:35:57:05:6b:fa:11:14:c5:91:5a:
         1e:59:da:51:be:c9:3e:2e:72:b2:b2:54:8f:99:36:ac:17:3e:
         be:d9:cb:a9:fc:87:69:1d:30:b9:81:4a:ef:cc:44:ea:8c:22:
         2e:31:2e:7e:28:52:1c:a3:1d:57:76:59:2b:dc:77:b3:80:e5:
         08:b0:eb:33:28:a2:62:65:34:89:76:8d:23:4c:d6:a7:3f:78:
         1b:67:0c:3d:a0:bc:e2:8c:9c:ea:76:04:a8:b0:f8:fc:c5:f1:
         48:1f:80:48:0c:9a:ae:64:0e:c1:38:1c:a4:e1:91:a4:2e:5b:
         c0:3a:bf:29:90:fa:53:35:de:e1:d1:96:65:47:45:6b:75:bb:
         fa:62:04:26:6a:9a:64:09:15:e9:db:cb:f3:e7:e1:a0:f8:92:
         32:98:9d:f0:82:09:70:a6:1d:ec:ae:56:df:41:52:4b:c9:28:
         20:f6:81:5a:10:54:f1:60:67:92:96:11:5f:33:40:ab:a4:bc:
         79:36:f5:5a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0mRMvb8iwrqTXtfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
MjdmYWFlN2UtMzg5MC00OTE4LTk1ZmMtMDNmNjYwMjQyY2Y2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+ySDilJ7u2nHqfliONvTL7F4qE/vG6WQ1m8
ZGlcYBuA8JOZd4sbI1dXDjGCJoYmt5XJZZBqj2gj6KgL7m936Yow1uaeM2bG+FYj
SW3tCJoT2k58SR3bEj4fJPJi4kyyrHOZHrkzSW+nCnMplY+Ih1AL+5HFUlIMuit9
70lQ08IC2bQNsIuMDoykD2w+trAtKFIceu038xBZCZLDk/p4V3gHUCb5xYzPMgyg
p3HEI0/wWIOIPs3x+bQ5/mYBuJIQJQ4QEba8GfCS5ZTfmOUUOcfq/KsEqYwwiLVZ
H038M5N3ES7ENf6WYsSiXwNI+lTKphTXjHjC/5CK7+2kmgzwrwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJWLpj1qC1jaT5Dgd2L0c0iyK1G3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjcwNWU1ODMtZDc3Mi0z
MTRmLWI3NGUtMWUwODQzYzY0ODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACPC29/nuiLY9ZbGgSsUYBNNwdwSi2sPYm5sHvt02PHOVtCbe5OD
4OQ7+igdcIT2LRl++qLfqP1Z/GVX92xHNVcFa/oRFMWRWh5Z2lG+yT4ucrKyVI+Z
NqwXPr7Zy6n8h2kdMLmBSu/MROqMIi4xLn4oUhyjHVd2WSvcd7OA5Qiw6zMoomJl
NIl2jSNM1qc/eBtnDD2gvOKMnOp2BKiw+PzF8UgfgEgMmq5kDsE4HKThkaQuW8A6
vymQ+lM13uHRlmVHRWt1u/piBCZqmmQJFenby/Pn4aD4kjKYnfCCCXCmHeyuVt9B
UkvJKCD2gVoQVPFgZ5KWEV8zQKukvHk29Vo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:26 2026 by rpki-client