Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e5a2b27-2aab-399e-b98e-9533ff695be5.roa
File:                     7e5a2b27-2aab-399e-b98e-9533ff695be5.roa (raw, json)
Hash identifier:          8nZi1lj2DGhDj0rQ233xXsWMRPKGzjrz2xsbWviSoVY=
Subject key identifier:   1B:DB:AB:06:3E:64:A1:D5:98:7A:F9:09:B8:B6:7A:E3:67:DF:F3:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A3265FE276E5E23A8E5C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e5a2b27-2aab-399e-b98e-9533ff695be5.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396555
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:32:65:fe:27:6e:5e:23:a8:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=d8443422-8428-4155-b293-6677ddf55ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6c:23:5c:4e:fe:25:5e:06:02:b5:f0:0c:5c:
                    29:3e:c4:4b:79:a6:96:6d:09:65:bb:5e:b3:3f:75:
                    26:b2:da:fd:34:41:e5:eb:f6:17:98:a6:0e:fa:d2:
                    c4:a5:1c:fd:41:1b:bb:ed:27:c3:c1:0b:e9:95:7f:
                    72:da:95:9b:01:44:b8:48:e2:2f:09:f9:8e:38:88:
                    40:17:4f:a0:9c:90:60:e9:c7:73:b4:61:45:52:7c:
                    92:c0:65:37:b6:69:fd:ba:b0:2f:10:af:1c:80:33:
                    7f:55:07:65:1f:ca:d1:57:28:d5:08:a8:f7:cf:8d:
                    e1:9c:ed:64:93:ca:e1:64:0b:41:25:dc:eb:1d:da:
                    74:8e:b5:a1:89:ac:f7:85:a7:10:b1:40:6f:95:20:
                    73:31:89:f1:bd:0c:3d:79:99:a1:8b:62:f9:71:8f:
                    18:a9:48:ff:b6:dd:a6:0a:91:e9:89:6b:5f:27:2f:
                    7a:d4:7f:6f:9b:32:ea:14:5b:8c:0c:cb:00:4f:c4:
                    81:8c:40:2d:a7:ce:f1:9f:b9:ee:be:91:b4:57:8f:
                    d0:ac:c9:63:61:b4:54:91:56:9c:04:a6:ad:98:93:
                    e1:33:45:66:fc:35:df:78:17:bb:18:6e:f7:3f:fa:
                    de:d0:bc:20:28:0a:d7:43:b2:d9:c3:aa:f1:3e:39:
                    66:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DB:AB:06:3E:64:A1:D5:98:7A:F9:09:B8:B6:7A:E3:67:DF:F3:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7e5a2b27-2aab-399e-b98e-9533ff695be5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:3e:6e:fe:7a:4d:5d:5e:5e:a9:c7:9c:24:a1:8b:34:04:28:
         3c:da:be:43:da:29:bf:41:dc:81:39:4d:f2:96:2c:c1:4c:85:
         64:56:3f:ba:6a:3d:bd:55:5e:79:d8:c3:ec:88:c1:e0:47:23:
         3d:78:14:ca:3a:7d:12:96:8a:ab:d2:7a:aa:c2:f8:47:9a:68:
         9c:9a:8d:84:d9:a9:a5:5c:0f:3d:1e:fb:56:92:74:f0:e6:63:
         5f:89:f3:ac:94:b3:3d:3e:3e:9b:31:6c:da:95:68:c7:a9:bd:
         b3:9d:67:d5:52:3a:16:4c:6e:eb:06:22:34:df:c4:ba:9e:86:
         2e:d0:ed:11:1d:b4:c6:8d:02:61:9a:b0:32:44:f8:17:f1:f4:
         ac:c1:99:eb:84:92:7e:5a:dc:9b:c6:30:f8:41:d2:10:6e:8e:
         0e:4f:2b:38:17:ec:01:4a:7a:6d:3e:b6:7d:4f:5e:8a:b0:dd:
         89:33:ca:3d:e6:be:8f:db:06:af:d7:70:c2:36:34:e5:b3:d0:
         ce:33:02:c0:24:d8:75:44:28:84:ae:02:0c:a1:c0:51:4f:0c:
         5a:db:e6:15:87:3f:22:00:b1:de:6a:9b:12:6a:ae:f7:a6:a2:
         fc:77:8a:15:b7:bf:ea:3b:93:a6:73:39:04:40:9a:b5:4f:6f:
         19:b3:bb:b3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE04ajJl/iduXiOo5cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk
ZDg0NDM0MjItODQyOC00MTU1LWIyOTMtNjY3N2RkZjU1ZWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmwjXE7+JV4GArXwDFwpPsRLeaaWbQllu16z
P3Umstr9NEHl6/YXmKYO+tLEpRz9QRu77SfDwQvplX9y2pWbAUS4SOIvCfmOOIhA
F0+gnJBg6cdztGFFUnySwGU3tmn9urAvEK8cgDN/VQdlH8rRVyjVCKj3z43hnO1k
k8rhZAtBJdzrHdp0jrWhiaz3hacQsUBvlSBzMYnxvQw9eZmhi2L5cY8YqUj/tt2m
CpHpiWtfJy961H9vmzLqFFuMDMsAT8SBjEAtp87xn7nuvpG0V4/QrMljYbRUkVac
BKatmJPhM0Vm/DXfeBe7GG73P/re0LwgKArXQ7LZw6rxPjlmbQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBvbqwY+ZKHVmHr5Cbi2euNn3/MBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2U1YTJiMjctMmFhYi0z
OTllLWI5OGUtOTUzM2ZmNjk1YmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJM+bv56TV1eXqnHnCShizQEKDzavkPaKb9B3IE5TfKWLMFMhWRW
P7pqPb1VXnnYw+yIweBHIz14FMo6fRKWiqvSeqrC+EeaaJyajYTZqaVcDz0e+1aS
dPDmY1+J86yUsz0+PpsxbNqVaMepvbOdZ9VSOhZMbusGIjTfxLqehi7Q7REdtMaN
AmGasDJE+Bfx9KzBmeuEkn5a3JvGMPhB0hBujg5PKzgX7AFKem0+tn1PXoqw3Ykz
yj3mvo/bBq/XcMI2NOWz0M4zAsAk2HVEKISuAgyhwFFPDFrb5hWHPyIAsd5qmxJq
rvemovx3ihW3v+o7k6ZzOQRAmrVPbxmzu7M=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:27 2026 by rpki-client