Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c993ce6-e9d5-3ac7-921f-9040c454ed68.roa
File:                     7c993ce6-e9d5-3ac7-921f-9040c454ed68.roa (raw, json)
Hash identifier:          EYwEEjNhkAL1Hqm0yd0vgLN2OLFb81giCxSEdbrF/Io=
Subject key identifier:   0E:25:8C:F1:57:69:A2:58:E7:DB:02:C0:8F:80:64:A1:4C:D4:C4:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F4A67D71F6581155DF3C180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c993ce6-e9d5-3ac7-921f-9040c454ed68.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     22547
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:67:d7:1f:65:81:15:5d:f3:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=fde6f6a8-3da4-4cbb-b64b-2e9b3e6ec8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f8:76:0d:ac:2f:8d:9a:c5:6f:ce:1d:f2:9d:
                    c3:bd:3e:06:23:54:61:77:92:95:d7:be:7b:14:e8:
                    7e:ca:d9:c5:c5:08:ae:99:3a:a1:91:cd:29:a5:3d:
                    2f:7a:34:c3:88:b5:eb:a5:74:45:8d:d6:7c:bd:87:
                    c3:c6:0b:69:9b:30:96:1a:aa:93:52:f3:0c:f9:82:
                    97:0c:43:54:0c:51:9e:3e:4f:e5:8a:f8:f8:b5:25:
                    42:22:0a:5c:f4:fd:e2:1a:06:45:05:6d:ef:9c:8c:
                    71:5e:94:16:68:6c:67:53:70:b3:e9:76:5a:8a:14:
                    7e:4c:bf:73:3d:57:7e:87:45:ba:ea:8e:69:91:32:
                    a0:54:60:f0:2a:7c:02:f4:4e:a8:4c:a7:5d:cc:cb:
                    b5:55:af:bb:b7:f7:48:cd:68:14:52:bf:0b:0f:7e:
                    fb:07:89:0c:9b:36:5f:ad:b4:e8:ae:09:37:9e:1d:
                    f6:4c:98:d6:62:31:99:17:2d:3c:ac:66:1b:5f:55:
                    a2:51:3d:9c:da:43:65:d4:9d:00:67:d9:f3:70:46:
                    15:bc:71:e4:40:19:7a:c0:72:a0:17:04:80:09:e1:
                    b0:31:58:9e:68:5d:6c:80:3e:7a:3d:5b:df:86:ed:
                    c0:25:65:c7:0d:a9:91:78:96:a0:04:43:ad:04:dc:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:25:8C:F1:57:69:A2:58:E7:DB:02:C0:8F:80:64:A1:4C:D4:C4:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c993ce6-e9d5-3ac7-921f-9040c454ed68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:9c:3a:c7:2f:55:81:18:f6:d5:e0:49:23:c4:f1:cd:f5:c2:
         20:19:af:6e:05:de:d4:d6:51:81:a5:af:eb:06:c6:7a:21:5b:
         ff:8a:75:db:4c:c3:fa:17:1f:b9:f2:bd:26:15:b6:d8:bf:e5:
         f5:f7:91:e1:59:9e:03:eb:7f:96:1a:3c:8f:31:cf:3d:2d:3e:
         cd:d0:09:06:39:19:91:47:78:96:12:51:38:0e:f9:43:a8:db:
         98:dd:76:96:9b:55:e9:41:d0:61:74:e2:09:7b:dc:55:e6:a7:
         f0:00:8c:c6:b4:8c:6a:4e:ef:38:a8:88:6a:66:61:a2:2d:d5:
         3d:b3:4c:ff:61:6f:e1:23:8b:e6:d7:9f:7c:56:cd:fd:5f:38:
         75:ee:32:f6:fa:c5:72:c0:37:62:d8:3f:e9:21:53:9e:d8:27:
         51:a4:6c:93:30:52:12:73:9d:ee:e3:08:8f:81:57:ed:47:96:
         8a:35:91:49:13:d0:97:aa:c2:00:9a:95:ce:08:5b:51:4a:50:
         79:14:2b:ce:e4:44:e8:1d:ba:ac:b6:91:cc:c9:6e:f5:aa:26:
         b4:e3:a5:89:b1:2f:09:ac:3c:95:2c:a7:28:32:22:f6:50:fc:
         b1:77:15:be:9a:49:7b:c2:bb:7f:10:9a:4e:3a:ee:45:a3:bd:
         45:6c:b6:aa
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fSmfXH2WBFV3zwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
ZmRlNmY2YTgtM2RhNC00Y2JiLWI2NGItMmU5YjNlNmVjOGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvh2DawvjZrFb84d8p3DvT4GI1Rhd5KV1757
FOh+ytnFxQiumTqhkc0ppT0vejTDiLXrpXRFjdZ8vYfDxgtpmzCWGqqTUvMM+YKX
DENUDFGePk/livj4tSVCIgpc9P3iGgZFBW3vnIxxXpQWaGxnU3Cz6XZaihR+TL9z
PVd+h0W66o5pkTKgVGDwKnwC9E6oTKddzMu1Va+7t/dIzWgUUr8LD377B4kMmzZf
rbTorgk3nh32TJjWYjGZFy08rGYbX1WiUT2c2kNl1J0AZ9nzcEYVvHHkQBl6wHKg
FwSACeGwMVieaF1sgD56PVvfhu3AJWXHDamReJagBEOtBNy5iQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFA4ljPFXaaJY59sCwI+AZKFM1MRAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2M5OTNjZTYtZTlkNS0z
YWM3LTkyMWYtOTA0MGM0NTRlZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBNnDrHL1WBGPbV4EkjxPHN9cIgGa9uBd7U1lGB
pa/rBsZ6IVv/inXbTMP6Fx+58r0mFbbYv+X195HhWZ4D63+WGjyPMc89LT7N0AkG
ORmRR3iWElE4DvlDqNuY3XaWm1XpQdBhdOIJe9xV5qfwAIzGtIxqTu84qIhqZmGi
LdU9s0z/YW/hI4vm1598Vs39Xzh17jL2+sVywDdi2D/pIVOe2CdRpGyTMFISc53u
4wiPgVftR5aKNZFJE9CXqsIAmpXOCFtRSlB5FCvO5EToHbqstpHMyW71qia046WJ
sS8JrDyVLKcoMiL2UPyxdxW+mkl7wrt/EJpOOu5Fo71FbLaq
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:42 2026 by rpki-client