Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8706a23e-42f3-39ef-9b21-0a78c3470093.roa
File:                     8706a23e-42f3-39ef-9b21-0a78c3470093.roa (raw, json)
Hash identifier:          XFcYcOwXR3e/1dBsJGzj04k3JQOC7Bev9lc/cfF7adA=
Subject key identifier:   6F:F0:F1:F9:EF:E2:9F:E1:93:56:F7:1A:1A:10:0D:23:CC:B9:DB:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F75A60D7FD3B645DC896A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8706a23e-42f3-39ef-9b21-0a78c3470093.roa
Signing time:             Tue 10 Mar 2026 14:28:41 +0000
ROA not before:           Tue 10 Mar 2026 14:28:41 +0000
ROA not after:            Mon 08 Jun 2026 14:28:41 +0000
asID:                     19836
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:75:a6:0d:7f:d3:b6:45:dc:89:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 14:28:41 2026 GMT
            Not After : Jun  8 14:28:41 2026 GMT
        Subject: CN=5ecb992b-7e47-4d2a-a3bd-64872a3b7341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:03:51:db:37:23:90:59:41:17:db:2a:c2:
                    eb:26:70:cc:15:cc:28:e6:a0:a4:cd:60:05:72:44:
                    0d:92:55:ef:ca:88:55:c3:be:1a:46:14:2e:c5:22:
                    1c:04:e3:24:6c:9c:80:52:ed:9f:13:25:8a:c8:7d:
                    75:1e:df:78:cc:19:a8:04:99:5a:cb:71:61:62:d5:
                    0e:da:6f:a4:12:65:76:13:04:23:ce:b6:97:a7:70:
                    15:a9:fe:30:0e:6b:0e:b2:a9:58:57:0c:76:3f:2c:
                    21:bb:7f:17:32:0d:03:85:be:c3:7a:71:6a:05:5b:
                    6c:62:f4:a9:fc:72:33:c4:a2:bf:f5:05:05:9b:d3:
                    32:de:f3:c6:96:e1:08:c3:29:b8:37:10:23:96:83:
                    54:f8:a0:e3:2d:3d:8f:7b:1d:50:5f:65:b7:e9:96:
                    d3:17:d6:cf:0b:38:d2:f0:27:64:35:63:fb:42:ce:
                    0a:11:5a:1d:fa:2f:7e:91:61:44:06:c0:0d:ee:b7:
                    85:2c:3c:4c:56:13:27:e1:b2:4b:2d:64:72:4f:17:
                    2d:0c:0a:7c:25:24:8c:fb:28:2d:b9:d4:8e:29:4a:
                    72:6b:18:d8:4b:51:3b:4a:7e:f7:f8:1c:3b:a1:4d:
                    3b:a9:7e:c5:dd:5d:f2:af:d1:95:44:b3:f1:00:66:
                    32:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F0:F1:F9:EF:E2:9F:E1:93:56:F7:1A:1A:10:0D:23:CC:B9:DB:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8706a23e-42f3-39ef-9b21-0a78c3470093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:62:59:d6:f3:bb:1f:a6:ad:4b:1b:3d:7d:99:19:df:df:35:
         07:40:e3:bd:e4:ed:2f:d7:f6:19:4b:b5:26:62:72:24:df:30:
         3b:d2:f5:52:24:15:f2:67:3b:b4:84:6d:d7:96:23:98:42:a7:
         25:8b:7a:10:68:60:52:ef:67:e9:e0:90:74:43:52:9d:a9:5b:
         51:c1:42:1f:d3:82:6b:b9:5b:3e:2c:fc:d2:38:7d:1f:d5:30:
         f2:28:78:24:4b:3f:de:45:f8:25:02:70:8f:f3:c3:db:e9:a6:
         cf:b1:39:e9:04:0b:54:27:80:ca:47:a3:f3:ed:42:c0:ff:25:
         9d:23:7c:9f:31:08:30:ae:95:4b:4d:48:a1:78:28:5f:0c:26:
         f1:52:73:a6:d3:26:a3:a8:e5:ef:1f:eb:b3:de:9d:1c:f9:f3:
         6d:8c:23:62:b7:cb:b6:fa:c8:87:a0:73:53:1a:dd:1e:fc:f9:
         d9:e8:4e:07:a6:d6:ca:fa:4c:33:dd:02:94:b4:0b:5d:40:19:
         b4:01:61:13:e0:38:34:b7:e0:c6:b9:8a:d3:97:ae:e5:57:7f:
         44:bf:06:34:02:07:7d:5e:47:cf:bd:ec:6a:69:3b:76:0e:43:
         e5:c0:28:75:65:21:d0:0e:cd:b7:86:97:6e:bc:cd:e1:3a:c4:
         c7:87:85:ea
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdaYNf9O2RdyJagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxMDE0Mjg0MVoXDTI2MDYwODE0Mjg0MVowLzEtMCsGA1UEAxMk
NWVjYjk5MmItN2U0Ny00ZDJhLWEzYmQtNjQ4NzJhM2I3MzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2ADUds3I5BZQRfbKsLrJnDMFcwo5qCkzWAF
ckQNklXvyohVw74aRhQuxSIcBOMkbJyAUu2fEyWKyH11Ht94zBmoBJlay3FhYtUO
2m+kEmV2EwQjzraXp3AVqf4wDmsOsqlYVwx2Pywhu38XMg0Dhb7DenFqBVtsYvSp
/HIzxKK/9QUFm9My3vPGluEIwym4NxAjloNU+KDjLT2Pex1QX2W36ZbTF9bPCzjS
8CdkNWP7Qs4KEVod+i9+kWFEBsAN7reFLDxMVhMn4bJLLWRyTxctDAp8JSSM+ygt
udSOKUpyaxjYS1E7Sn73+Bw7oU07qX7F3V3yr9GVRLPxAGYyVwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG/w8fnv4p/hk1b3GhoQDSPMudveMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODcwNmEyM2UtNDJmMy0z
OWVmLTliMjEtMGE3OGMzNDcwMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIliWdbzux+mrUsbPX2ZGd/fNQdA473k7S/X9hlLtSZiciTfMDvS
9VIkFfJnO7SEbdeWI5hCpyWLehBoYFLvZ+ngkHRDUp2pW1HBQh/Tgmu5Wz4s/NI4
fR/VMPIoeCRLP95F+CUCcI/zw9vpps+xOekEC1QngMpHo/PtQsD/JZ0jfJ8xCDCu
lUtNSKF4KF8MJvFSc6bTJqOo5e8f67PenRz5822MI2K3y7b6yIegc1Ma3R78+dno
Tgem1sr6TDPdApS0C11AGbQBYRPgODS34Ma5itOXruVXf0S/BjQCB31eR8+97Gpp
O3YOQ+XAKHVlIdAOzbeGl268zeE6xMeHheo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:41:18 2026 by rpki-client