Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/854062a0-51ad-3a22-b93b-fea524064b18.roa
File:                     854062a0-51ad-3a22-b93b-fea524064b18.roa (raw, json)
Hash identifier:          U2dz5cLLWA5bLu3llY11xYqYQlmqkyQ1iKc+i59MHKg=
Subject key identifier:   D4:0F:F9:3D:8E:35:1D:E9:51:E5:C4:DF:97:21:55:4D:71:9C:0C:EF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA84F3436675D92FCA63C44A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/854062a0-51ad-3a22-b93b-fea524064b18.roa
Signing time:             Tue 28 Apr 2026 14:56:58 +0000
ROA not before:           Tue 28 Apr 2026 14:56:58 +0000
ROA not after:            Mon 27 Jul 2026 14:56:58 +0000
asID:                     396616
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:4f:34:36:67:5d:92:fc:a6:3c:44:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 14:56:58 2026 GMT
            Not After : Jul 27 14:56:58 2026 GMT
        Subject: CN=88b2a724-ce61-4764-90e5-3e0e5790c376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:10:f6:11:1c:97:d2:a4:4c:37:49:7e:1c:
                    41:da:6b:ae:de:d8:5b:e7:3c:a8:b1:e6:e4:56:7a:
                    63:71:ce:47:d6:7e:d8:52:ae:a6:35:cd:6b:71:07:
                    2f:a0:66:f7:33:84:d7:f5:2d:71:35:b6:18:8d:df:
                    c2:d4:77:c9:3d:e7:18:34:37:a7:ed:92:2e:ca:44:
                    8b:d4:4b:74:4a:05:dd:10:2e:20:dc:78:11:45:b0:
                    f5:c2:c4:f7:55:80:7c:fc:42:07:94:9b:0a:59:46:
                    e4:23:4f:5e:0b:b0:19:c7:2e:bc:00:ef:ac:97:4a:
                    35:e2:71:ea:41:22:4e:29:77:b3:cd:b2:bd:80:3f:
                    ed:2e:5d:bb:79:eb:d6:fd:50:c1:10:e8:3e:17:37:
                    bf:35:4e:a2:98:da:ac:05:98:8a:68:06:ed:74:2a:
                    70:24:de:70:f1:c3:ad:18:12:07:d2:a8:b0:fb:6f:
                    f0:ae:40:ef:6a:85:1e:30:41:fe:0b:ed:67:31:57:
                    ca:53:e1:32:c0:5e:e7:ae:04:03:5c:3c:a0:bb:96:
                    a4:5c:1f:e7:45:a7:a9:66:1f:84:a2:d7:8d:6d:7b:
                    5e:24:2c:ad:e5:b1:3a:53:15:a5:51:d5:ad:64:52:
                    e9:72:4f:50:25:26:19:66:62:9d:76:f0:eb:52:66:
                    a5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0F:F9:3D:8E:35:1D:E9:51:E5:C4:DF:97:21:55:4D:71:9C:0C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/854062a0-51ad-3a22-b93b-fea524064b18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c2:ca:a6:18:0f:f8:b1:57:7f:dd:6c:e2:d9:80:ba:0e:f2:
         a3:17:0d:8d:9a:dd:8a:2f:a2:89:72:36:ac:12:89:f9:26:29:
         3c:41:76:22:c6:42:e4:a5:b2:3c:1c:ea:27:01:ba:c1:4c:d9:
         97:54:0e:6a:2b:ab:8b:c4:7b:a5:9e:27:78:b8:c5:74:2b:63:
         72:76:36:77:ba:00:f7:d9:2b:ab:a2:41:44:80:6c:d2:18:59:
         16:f8:bd:d3:e9:ec:6f:cb:30:5f:2e:f0:a0:4f:d8:d8:79:3a:
         15:8f:06:2f:6d:e6:48:73:25:6c:51:eb:66:06:1f:a4:d9:15:
         33:96:ea:36:dc:1b:ee:b8:ed:9a:98:7f:56:5a:d1:e7:25:03:
         8b:bc:66:91:ec:5c:19:66:9d:92:8c:77:a8:a0:b7:a2:39:1f:
         74:ce:27:01:54:6a:83:b9:e9:c6:7d:91:6f:e1:83:19:93:04:
         f4:5e:09:da:a6:0a:fb:4f:ce:37:13:25:d3:77:5c:44:17:e5:
         23:ba:70:f3:52:d6:4f:34:09:54:57:14:4f:51:1e:f4:a5:e3:
         c6:21:eb:c0:75:fa:c7:87:83:a8:99:ec:7a:cc:ad:11:92:9c:
         c9:1c:7b:c0:8e:f1:bf:ff:7f:f0:5f:24:2e:39:5a:62:f8:fe:
         aa:39:fa:69
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2oTzQ2Z12S/KY8RKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyODE0NTY1OFoXDTI2MDcyNzE0NTY1OFowLzEtMCsGA1UEAxMk
ODhiMmE3MjQtY2U2MS00NzY0LTkwZTUtM2UwZTU3OTBjMzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEUQ9hEcl9KkTDdJfhxB2muu3thb5zyosebk
Vnpjcc5H1n7YUq6mNc1rcQcvoGb3M4TX9S1xNbYYjd/C1HfJPecYNDen7ZIuykSL
1Et0SgXdEC4g3HgRRbD1wsT3VYB8/EIHlJsKWUbkI09eC7AZxy68AO+sl0o14nHq
QSJOKXezzbK9gD/tLl27eevW/VDBEOg+Fze/NU6imNqsBZiKaAbtdCpwJN5w8cOt
GBIH0qiw+2/wrkDvaoUeMEH+C+1nMVfKU+EywF7nrgQDXDygu5akXB/nRaepZh+E
oteNbXteJCyt5bE6UxWlUdWtZFLpck9QJSYZZmKddvDrUmalpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNQP+T2ONR3pUeXE35chVU1xnAzvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODU0MDYyYTAtNTFhZC0z
YTIyLWI5M2ItZmVhNTI0MDY0YjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+6j
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACDCyqYYD/ixV3/dbOLZgLoO8qMXDY2a3YovoolyNqwSifkmKTxB
diLGQuSlsjwc6icBusFM2ZdUDmorq4vEe6WeJ3i4xXQrY3J2Nne6APfZK6uiQUSA
bNIYWRb4vdPp7G/LMF8u8KBP2Nh5OhWPBi9t5khzJWxR62YGH6TZFTOW6jbcG+64
7ZqYf1Za0eclA4u8ZpHsXBlmnZKMd6igt6I5H3TOJwFUaoO56cZ9kW/hgxmTBPRe
CdqmCvtPzjcTJdN3XEQX5SO6cPNS1k80CVRXFE9RHvSl48Yh68B1+seHg6iZ7HrM
rRGSnMkce8CO8b//f/BfJC45WmL4/qo5+mk=
-----END CERTIFICATE-----
Generated at Wed May 13 11:34:59 2026 by rpki-client