Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f3b25d5-cd1d-3f54-8ea5-a214f042df78.roa
File:                     6f3b25d5-cd1d-3f54-8ea5-a214f042df78.roa (raw, json)
Hash identifier:          LCBkUzpl+or6kq75jekfEIhj3cyADj+p5Db0/91XCx4=
Subject key identifier:   A7:C7:60:A5:9D:9C:BC:DC:09:3B:9C:69:BB:A3:1C:82:A6:FA:9A:47
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E885A5B54FE330B582C488C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f3b25d5-cd1d-3f54-8ea5-a214f042df78.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396578
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:5b:54:fe:33:0b:58:2c:48:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=484623ae-dabd-4e02-9814-de9667bb8b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:36:a8:ab:ab:ee:82:00:24:c5:3b:5a:52:8f:
                    8a:3b:b9:22:1a:7a:fd:30:f9:68:4e:8f:6c:85:f7:
                    d1:a9:8b:c6:4f:22:18:f7:e9:f3:bc:be:a2:e4:9e:
                    e8:bc:de:95:cd:fe:eb:83:fa:ca:cc:6c:27:35:36:
                    fc:a0:fa:cf:06:51:c8:05:8b:57:37:6d:82:e6:6c:
                    76:f5:e7:bc:4b:92:74:37:45:61:da:2e:08:cb:7f:
                    a3:08:30:36:e2:e7:66:d5:81:c9:25:f7:35:b8:c9:
                    3e:e6:6d:0a:c6:ef:d2:fc:99:86:7e:95:a0:ed:7a:
                    20:88:6d:4b:06:b4:0d:bf:09:60:9e:e7:ca:5d:3d:
                    20:bb:a1:b9:b3:68:59:18:1d:c5:38:68:1b:3c:66:
                    86:8e:02:df:35:a3:e6:51:ee:8c:24:4d:c7:38:53:
                    f0:0e:18:78:d9:e7:76:6a:1f:f5:ff:c1:41:95:67:
                    9e:65:ac:d5:71:5e:81:4e:04:1b:af:b6:fc:90:be:
                    30:1a:c3:f2:7e:4d:4e:9e:5b:72:a3:51:89:45:4b:
                    ba:b7:f7:44:87:b5:d0:bd:97:33:ad:ee:57:61:67:
                    f9:3c:03:b1:61:e6:29:98:12:e1:a7:da:6b:9e:c5:
                    b2:d2:1e:72:53:a0:3c:67:5a:d3:75:85:b4:07:78:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C7:60:A5:9D:9C:BC:DC:09:3B:9C:69:BB:A3:1C:82:A6:FA:9A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f3b25d5-cd1d-3f54-8ea5-a214f042df78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:3a:36:8b:fe:d0:bf:e1:c2:4d:b9:c9:77:b0:c7:0f:cd:9d:
         71:bc:27:7f:93:7c:d1:e3:0c:cf:c1:48:1f:56:5d:06:32:cf:
         60:a9:76:96:32:34:a8:10:2b:da:e5:03:b0:dd:e2:e2:dc:c6:
         23:0c:40:38:74:f5:b5:8e:20:a0:09:3a:1c:b0:14:bb:e8:cb:
         d1:b6:61:58:27:bb:91:d8:f3:c4:2b:99:30:17:19:6b:6b:75:
         ed:f9:45:bc:c7:1b:53:cc:25:73:5c:3a:35:b3:68:9c:09:54:
         c2:0a:dd:29:b3:49:65:ce:11:5f:43:c6:a0:b2:f0:5a:7d:c4:
         c0:c4:7a:ed:8d:5f:fb:4b:17:0e:87:71:43:e1:b8:c0:05:92:
         11:2e:5b:97:28:43:10:64:03:7a:1a:2f:22:f3:25:03:66:a7:
         02:bc:aa:33:bf:7a:7b:4c:e4:75:f8:52:9b:9c:12:20:73:f5:
         b8:29:a8:9f:9d:f9:8a:98:3d:77:45:70:9b:61:da:81:cf:d0:
         58:30:6f:59:8f:a5:ac:30:77:0b:6e:51:ae:a4:14:25:a1:2b:
         ab:ac:db:25:75:19:d8:0f:67:a4:d2:81:c2:4c:68:35:8b:45:
         c7:9d:70:ae:22:f9:a7:c4:d8:da:2d:ff:0a:e4:0a:0b:0d:dd:
         b7:65:b4:1f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6IWltU/jMLWCxIjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
NDg0NjIzYWUtZGFiZC00ZTAyLTk4MTQtZGU5NjY3YmI4YjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTaoq6vuggAkxTtaUo+KO7kiGnr9MPloTo9s
hffRqYvGTyIY9+nzvL6i5J7ovN6Vzf7rg/rKzGwnNTb8oPrPBlHIBYtXN22C5mx2
9ee8S5J0N0Vh2i4Iy3+jCDA24udm1YHJJfc1uMk+5m0Kxu/S/JmGfpWg7XogiG1L
BrQNvwlgnufKXT0gu6G5s2hZGB3FOGgbPGaGjgLfNaPmUe6MJE3HOFPwDhh42ed2
ah/1/8FBlWeeZazVcV6BTgQbr7b8kL4wGsPyfk1Onltyo1GJRUu6t/dEh7XQvZcz
re5XYWf5PAOxYeYpmBLhp9prnsWy0h5yU6A8Z1rTdYW0B3hqlQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKfHYKWdnLzcCTucabujHIKm+ppHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmYzYjI1ZDUtY2QxZC0z
ZjU0LThlYTUtYTIxNGYwNDJkZjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+6j
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACk6Nov+0L/hwk25yXewxw/NnXG8J3+TfNHjDM/BSB9WXQYyz2Cp
dpYyNKgQK9rlA7Dd4uLcxiMMQDh09bWOIKAJOhywFLvoy9G2YVgnu5HY88QrmTAX
GWtrde35RbzHG1PMJXNcOjWzaJwJVMIK3SmzSWXOEV9DxqCy8Fp9xMDEeu2NX/tL
Fw6HcUPhuMAFkhEuW5coQxBkA3oaLyLzJQNmpwK8qjO/entM5HX4UpucEiBz9bgp
qJ+d+YqYPXdFcJth2oHP0Fgwb1mPpawwdwtuUa6kFCWhK6us2yV1GdgPZ6TSgcJM
aDWLRcedcK4i+afE2Not/wrkCgsN3bdltB8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:28:41 2026 by rpki-client