Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/90ee3bf7-0b82-32b3-9e74-4029929e7993.roa
File:                     90ee3bf7-0b82-32b3-9e74-4029929e7993.roa (raw, json)
Hash identifier:          e7RWFDa44zpDSEZ/0imxcxVg0BM+CArCuRtxLoOOiyM=
Subject key identifier:   45:64:B3:9E:44:EE:73:69:B5:67:40:51:0E:00:FE:48:EE:DC:03:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA84F4F08B19B2100CB4E9880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/90ee3bf7-0b82-32b3-9e74-4029929e7993.roa
Signing time:             Tue 28 Apr 2026 14:57:10 +0000
ROA not before:           Tue 28 Apr 2026 14:57:10 +0000
ROA not after:            Mon 27 Jul 2026 14:57:10 +0000
asID:                     396604
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:4f:4f:08:b1:9b:21:00:cb:4e:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 14:57:10 2026 GMT
            Not After : Jul 27 14:57:10 2026 GMT
        Subject: CN=a9d92e84-4113-4069-8e27-3e4b2b8d3fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:37:68:e9:ba:2e:5d:89:73:2f:9e:c5:3f:4b:
                    de:2b:7f:c3:28:db:35:e5:34:5e:92:a9:ec:09:cb:
                    45:b8:a5:d8:48:5c:3c:ee:fa:26:1f:00:cd:47:f3:
                    18:db:4c:d1:1a:6f:11:04:b9:7a:dd:13:76:f4:0d:
                    99:2c:d9:ee:7b:b3:41:c7:0a:b8:e0:4e:71:10:23:
                    4c:08:37:63:22:d7:76:a1:51:13:bf:78:fa:6f:1f:
                    a7:2e:7c:67:d0:8f:05:73:b7:8e:8e:96:90:17:0f:
                    0a:78:c9:b2:e3:4a:29:d3:37:cf:16:ba:d7:6d:dc:
                    eb:2c:ae:1d:52:d8:de:db:16:81:e2:f2:6e:b9:53:
                    74:c0:43:8c:55:e8:b8:81:5b:46:e1:1d:56:2e:f1:
                    34:b2:fa:94:7b:1d:f6:dd:5e:d4:a9:91:af:eb:cf:
                    3c:70:0a:89:10:f1:e1:13:48:91:b2:89:68:ab:1e:
                    3a:74:a9:e0:dd:f8:48:a4:af:93:77:a3:ce:98:eb:
                    cc:97:f0:99:e2:ff:e2:0f:6a:a0:fe:fa:d6:c4:7d:
                    cb:b2:bf:32:ad:a6:d0:6b:f2:23:62:4c:e3:65:5f:
                    ef:bb:a8:de:55:6b:24:1b:21:1d:15:cf:46:a7:4c:
                    a9:09:dd:60:12:e3:da:3e:03:41:67:2d:e0:3a:4f:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:64:B3:9E:44:EE:73:69:B5:67:40:51:0E:00:FE:48:EE:DC:03:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/90ee3bf7-0b82-32b3-9e74-4029929e7993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f4:19:62:0a:15:ee:93:1f:57:96:ff:b5:b5:60:27:92:d9:
         09:16:2e:fd:37:86:e3:65:b0:40:f6:8f:18:b4:88:83:1c:e8:
         56:8b:48:fc:a2:50:8b:ff:26:c9:04:7a:12:c7:52:cc:50:64:
         6c:a5:28:46:27:0c:e8:44:3c:36:37:68:b3:eb:32:ba:59:d7:
         71:48:59:71:22:57:4d:88:dd:a2:1e:07:47:12:70:50:ac:78:
         2f:5d:64:ee:30:30:61:74:a6:29:40:bd:8e:43:d1:0e:c3:13:
         de:e4:4e:db:f7:34:66:1e:69:cd:7e:8c:84:22:4a:fc:cc:3e:
         9e:5b:b2:39:fa:52:63:10:d1:c8:42:26:4b:51:7a:de:b5:f1:
         e5:61:a6:64:54:27:97:31:a6:4d:82:fb:79:b7:ca:08:8e:3b:
         f0:e2:a3:39:46:a3:b4:4a:7f:d9:80:11:2e:83:17:ab:88:8e:
         4b:7e:5e:c5:4c:ba:c0:36:e6:c0:75:ea:b6:27:73:34:23:73:
         0c:78:14:fb:b8:e0:ba:70:6d:47:cb:5b:70:2d:73:0b:2f:cf:
         ee:30:6d:ec:8c:90:cb:53:7b:7f:12:b8:a0:18:80:1e:b7:69:
         7c:1e:ed:b1:04:94:ed:60:27:bf:6d:51:69:1e:fc:2c:58:b4:
         a5:79:dd:c0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2oT08IsZshAMtOmIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyODE0NTcxMFoXDTI2MDcyNzE0NTcxMFowLzEtMCsGA1UEAxMk
YTlkOTJlODQtNDExMy00MDY5LThlMjctM2U0YjJiOGQzZmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDdo6bouXYlzL57FP0veK3/DKNs15TRekqns
CctFuKXYSFw87vomHwDNR/MY20zRGm8RBLl63RN29A2ZLNnue7NBxwq44E5xECNM
CDdjItd2oVETv3j6bx+nLnxn0I8Fc7eOjpaQFw8KeMmy40op0zfPFrrXbdzrLK4d
Utje2xaB4vJuuVN0wEOMVei4gVtG4R1WLvE0svqUex323V7UqZGv6888cAqJEPHh
E0iRsoloqx46dKng3fhIpK+Td6POmOvMl/CZ4v/iD2qg/vrWxH3Lsr8yrabQa/Ij
YkzjZV/vu6jeVWskGyEdFc9Gp0ypCd1gEuPaPgNBZy3gOk8pqwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEVks55E7nNptWdAUQ4A/kju3AOwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTBlZTNiZjctMGI4Mi0z
MmIzLTllNzQtNDAyOTkyOWU3OTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+6j
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFP0GWIKFe6TH1eW/7W1YCeS2QkWLv03huNlsED2jxi0iIMc6FaL
SPyiUIv/JskEehLHUsxQZGylKEYnDOhEPDY3aLPrMrpZ13FIWXEiV02I3aIeB0cS
cFCseC9dZO4wMGF0pilAvY5D0Q7DE97kTtv3NGYeac1+jIQiSvzMPp5bsjn6UmMQ
0chCJktRet618eVhpmRUJ5cxpk2C+3m3ygiOO/DiozlGo7RKf9mAES6DF6uIjkt+
XsVMusA25sB16rYnczQjcwx4FPu44LpwbUfLW3Atcwsvz+4wbeyMkMtTe38SuKAY
gB63aXwe7bEElO1gJ79tUWke/CxYtKV53cA=
-----END CERTIFICATE-----
Generated at Wed May 13 11:47:25 2026 by rpki-client