Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d548787-923f-3e28-a99d-f4ceb50fa6fd.roa
File:                     6d548787-923f-3e28-a99d-f4ceb50fa6fd.roa (raw, json)
Hash identifier:          jklHsY4Fc4rSi3cbQ9jszXekCym4EuSumfn2jan9FPQ=
Subject key identifier:   8A:58:01:EA:D8:01:69:68:5F:8C:82:22:6D:8A:F4:75:9F:79:65:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0C0367595841EC16B2A0FB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d548787-923f-3e28-a99d-f4ceb50fa6fd.roa
Signing time:             Tue 03 Mar 2026 15:18:08 +0000
ROA not before:           Tue 03 Mar 2026 15:18:08 +0000
ROA not after:            Mon 01 Jun 2026 14:18:08 +0000
asID:                     396615
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:03:67:59:58:41:ec:16:b2:a0:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 15:18:08 2026 GMT
            Not After : Jun  1 14:18:08 2026 GMT
        Subject: CN=f5335a2b-9a1f-4625-b289-a0ec657a9973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:b2:c2:ff:65:32:01:7c:8f:59:08:b2:03:5a:
                    82:e1:1d:d7:78:44:5b:55:b8:3f:08:8c:68:8d:c4:
                    52:3a:62:5e:cc:2b:6c:2d:ab:22:0d:f9:00:d6:1c:
                    be:d7:b0:db:5e:67:42:13:b8:4e:72:38:71:4c:49:
                    be:bd:46:ba:65:a2:85:3a:f2:51:6e:f6:d2:b7:79:
                    15:57:58:20:8d:a9:29:78:8f:fb:fc:2d:cd:66:48:
                    1a:2c:05:ef:06:89:3d:38:6d:3a:b1:5a:df:e5:5e:
                    11:ef:28:6e:c4:27:18:3a:fd:ec:f5:48:43:e8:3d:
                    11:68:42:76:5a:4a:50:54:36:01:9b:86:58:69:b2:
                    3a:c6:69:30:cd:21:14:82:df:0f:4c:c8:93:61:04:
                    2f:3b:de:83:99:f6:07:62:9b:cb:ee:9d:12:41:1e:
                    8b:81:6f:c5:d2:ee:f6:d5:de:39:99:a9:ff:bb:2f:
                    0d:ee:fc:81:83:e3:d9:7b:82:a3:5c:65:f3:bb:84:
                    69:5a:e7:6e:18:18:ab:1b:b7:bc:da:6c:f4:97:c9:
                    b6:42:a6:fd:81:a1:91:b0:0f:16:98:e3:9b:af:fe:
                    7b:f0:2c:3f:1b:ae:e3:93:5a:de:da:cf:5f:47:b9:
                    2e:cc:55:76:83:3b:e0:a1:7c:c1:f2:d4:c0:db:5f:
                    14:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:58:01:EA:D8:01:69:68:5F:8C:82:22:6D:8A:F4:75:9F:79:65:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d548787-923f-3e28-a99d-f4ceb50fa6fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:57:06:88:aa:a8:b8:76:1b:b9:05:b7:61:ab:1c:5d:ad:58:
         da:31:47:66:2a:68:22:f8:e3:d3:c4:b0:3a:b7:c8:1a:1e:e8:
         37:6b:f0:e8:52:f1:bb:3d:b0:05:6b:43:d0:d0:da:24:5f:a5:
         8b:56:c1:bb:ab:63:1e:a4:d1:1a:e9:8f:9b:11:3c:84:e2:5a:
         19:c9:9c:08:6a:d3:80:f1:36:ef:2e:84:a7:9a:b7:1d:f4:3c:
         8e:d4:38:93:f5:54:1f:f5:e0:c2:e6:0e:81:48:20:79:84:94:
         5c:27:7a:ac:f8:57:03:87:b0:24:4a:12:22:c4:46:8f:91:bb:
         8d:c1:5f:9f:f9:07:61:21:23:43:57:51:58:85:aa:ed:40:46:
         42:99:dc:94:07:be:ea:80:29:7e:71:0c:8e:74:69:07:bf:d2:
         3b:1d:e3:a1:4f:c5:8a:c2:ce:e4:5c:36:ec:80:d3:34:e2:b2:
         88:f3:d6:35:5b:60:c3:15:11:01:e0:13:27:06:85:70:71:f2:
         76:ab:c9:be:34:11:09:40:f4:2f:2c:bf:51:18:ba:42:47:c3:
         c5:c7:95:50:4c:56:aa:54:f2:5c:52:1b:49:45:39:40:d5:bc:
         e7:45:59:1a:49:27:c0:cf:55:43:2a:db:41:a6:fe:ab:1b:55:
         01:c9:11:57
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2dZWEHsFrKg+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwMzE1MTgwOFoXDTI2MDYwMTE0MTgwOFowLzEtMCsGA1UEAxMk
ZjUzMzVhMmItOWExZi00NjI1LWIyODktYTBlYzY1N2E5OTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+rLC/2UyAXyPWQiyA1qC4R3XeERbVbg/CIxo
jcRSOmJezCtsLasiDfkA1hy+17DbXmdCE7hOcjhxTEm+vUa6ZaKFOvJRbvbSt3kV
V1ggjakpeI/7/C3NZkgaLAXvBok9OG06sVrf5V4R7yhuxCcYOv3s9UhD6D0RaEJ2
WkpQVDYBm4ZYabI6xmkwzSEUgt8PTMiTYQQvO96DmfYHYpvL7p0SQR6LgW/F0u72
1d45man/uy8N7vyBg+PZe4KjXGXzu4RpWuduGBirG7e82mz0l8m2Qqb9gaGRsA8W
mOObr/578Cw/G67jk1re2s9fR7kuzFV2gzvgoXzB8tTA218UswIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIpYAerYAWloX4yCIm2K9HWfeWU6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmQ1NDg3ODctOTIzZi0z
ZTI4LWE5OWQtZjRjZWI1MGZhNmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJNXBoiqqLh2G7kFt2GrHF2tWNoxR2YqaCL449PEsDq3yBoe6Ddr
8OhS8bs9sAVrQ9DQ2iRfpYtWwburYx6k0Rrpj5sRPITiWhnJnAhq04DxNu8uhKea
tx30PI7UOJP1VB/14MLmDoFIIHmElFwneqz4VwOHsCRKEiLERo+Ru43BX5/5B2Eh
I0NXUViFqu1ARkKZ3JQHvuqAKX5xDI50aQe/0jsd46FPxYrCzuRcNuyA0zTisojz
1jVbYMMVEQHgEycGhXBx8naryb40EQlA9C8sv1EYukJHw8XHlVBMVqpU8lxSG0lF
OUDVvOdFWRpJJ8DPVUMq20Gm/qsbVQHJEVc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:42:42 2026 by rpki-client