Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b0f426f-d847-33ef-b38c-8fb9ad3d4bc6.roa
File:                     6b0f426f-d847-33ef-b38c-8fb9ad3d4bc6.roa (raw, json)
Hash identifier:          HTEVBEFtRXuweqLBSMjWMxzpBwZgiYqIFqr6PabfpVA=
Subject key identifier:   64:14:60:69:B7:46:5B:53:27:1B:A4:31:61:6E:D7:3E:BF:C7:79:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E614567EF4E6EB161EC1F3480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b0f426f-d847-33ef-b38c-8fb9ad3d4bc6.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     396560
IP address blocks:        2001:500:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:67:ef:4e:6e:b1:61:ec:1f:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=0ebb82d4-4db9-42cd-83e1-fe5a5e04fda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2c:d5:85:09:19:85:c8:d8:92:ea:86:68:42:
                    8b:4a:86:28:3a:1e:27:b8:4d:fe:16:76:03:c9:a9:
                    f9:2b:00:32:f6:40:5f:0d:77:0c:2e:02:f0:2c:4c:
                    0c:6e:16:08:88:ce:79:d5:45:df:a1:c4:72:75:b8:
                    db:ab:ca:34:31:a5:87:f1:02:37:6d:0a:3f:b2:12:
                    8a:61:60:55:20:b6:f0:90:1d:07:db:72:4e:5a:e0:
                    78:78:1a:91:84:89:53:22:e7:d9:2b:a6:56:1c:fc:
                    20:06:be:a5:b0:b5:19:e1:3e:9d:81:a2:2d:4d:d8:
                    36:4b:db:03:7d:58:ec:17:e9:07:27:9d:67:c3:d0:
                    ae:e1:f3:b3:a4:1f:23:24:55:fb:22:79:3c:bb:fd:
                    43:a4:f2:75:d3:2d:dd:ff:a2:99:ff:ab:ae:67:e0:
                    ef:ff:e3:31:6c:1f:dd:06:d5:fe:37:b4:4d:11:5a:
                    9e:84:ab:4a:82:c0:af:12:ad:0b:24:eb:c2:31:83:
                    e2:f4:cd:fa:4f:79:fb:31:97:00:80:a7:b6:55:cc:
                    29:9e:1b:ec:b7:45:1c:d5:d1:86:2e:78:e2:64:97:
                    ad:e6:d7:22:ab:8f:26:16:1f:53:3d:6d:f4:41:6d:
                    45:e6:46:31:98:5d:0a:33:dc:e3:a1:9b:98:41:30:
                    42:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:14:60:69:B7:46:5B:53:27:1B:A4:31:61:6E:D7:3E:BF:C7:79:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6b0f426f-d847-33ef-b38c-8fb9ad3d4bc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:8a:b3:22:32:fc:87:2a:2f:6f:fe:42:77:92:c1:b4:78:a4:
         1f:c3:c9:7e:77:23:c3:f1:33:67:78:5b:28:8c:8f:1b:ac:be:
         66:fa:21:c5:76:52:37:36:e2:22:94:3e:82:b4:4f:b6:d9:42:
         66:d9:c8:81:56:6e:69:3b:fd:c7:fc:d0:95:03:5b:1f:db:9e:
         59:54:c0:ab:74:a5:51:e5:50:5d:4a:a8:43:93:e5:02:77:ac:
         d9:cb:d8:20:78:f7:60:30:1e:64:d6:a8:11:89:19:62:df:e8:
         8d:02:68:69:78:fd:59:01:69:cc:47:00:22:b7:dc:62:57:43:
         82:28:87:78:27:3c:50:6b:9a:35:9e:ca:87:f9:d1:09:79:ad:
         74:9b:2f:8b:5e:6a:62:f8:e3:e5:02:df:fa:d1:82:19:31:f9:
         4a:63:ec:80:b5:b8:d5:83:4f:24:61:46:52:b5:c3:15:e0:2b:
         26:5f:78:d1:9d:14:37:7e:ad:2a:5c:30:e6:a6:a6:d7:51:52:
         fa:2a:53:f5:b7:22:58:77:b0:5f:ee:d4:9f:47:1c:80:7d:ba:
         d4:17:6e:e3:01:a6:f6:fc:ae:c8:98:04:55:d6:9b:4c:f0:1c:
         e4:76:65:1a:eb:fe:f3:6e:57:ba:79:19:2b:5d:f4:81:5a:96:
         5f:63:33:56
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5hRWfvTm6xYewfNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
MGViYjgyZDQtNGRiOS00MmNkLTgzZTEtZmU1YTVlMDRmZGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmizVhQkZhcjYkuqGaEKLSoYoOh4nuE3+FnYD
yan5KwAy9kBfDXcMLgLwLEwMbhYIiM551UXfocRydbjbq8o0MaWH8QI3bQo/shKK
YWBVILbwkB0H23JOWuB4eBqRhIlTIufZK6ZWHPwgBr6lsLUZ4T6dgaItTdg2S9sD
fVjsF+kHJ51nw9Cu4fOzpB8jJFX7Ink8u/1DpPJ10y3d/6KZ/6uuZ+Dv/+MxbB/d
BtX+N7RNEVqehKtKgsCvEq0LJOvCMYPi9M36T3n7MZcAgKe2Vcwpnhvst0Uc1dGG
LnjiZJet5tciq48mFh9TPW30QW1F5kYxmF0KM9zjoZuYQTBCZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGQUYGm3RltTJxukMWFu1z6/x3lsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmIwZjQyNmYtZDg0Ny0z
M2VmLWIzOGMtOGZiOWFkM2Q0YmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKaKsyIy/IcqL2/+QneSwbR4pB/DyX53I8PxM2d4WyiMjxusvmb6
IcV2Ujc24iKUPoK0T7bZQmbZyIFWbmk7/cf80JUDWx/bnllUwKt0pVHlUF1KqEOT
5QJ3rNnL2CB492AwHmTWqBGJGWLf6I0CaGl4/VkBacxHACK33GJXQ4Ioh3gnPFBr
mjWeyof50Ql5rXSbL4teamL44+UC3/rRghkx+Upj7IC1uNWDTyRhRlK1wxXgKyZf
eNGdFDd+rSpcMOamptdRUvoqU/W3Ilh3sF/u1J9HHIB9utQXbuMBpvb8rsiYBFXW
m0zwHOR2ZRrr/vNuV7p5GStd9IFall9jM1Y=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:33 2026 by rpki-client