Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9349e591-9703-31d8-95dd-9591157c67aa.roa
File:                     9349e591-9703-31d8-95dd-9591157c67aa.roa (raw, json)
Hash identifier:          7oarFOcXU9Bss1FezE0sj9u8WHQeJSAk24MxeMhQQMA=
Subject key identifier:   C6:EB:DB:A0:5A:AA:1D:4A:0B:3F:F4:16:3C:9D:3B:64:DD:05:8E:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2644BDDCAF134A04FAA50F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9349e591-9703-31d8-95dd-9591157c67aa.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     396567
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:bd:dc:af:13:4a:04:fa:a5:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=7889557d-565d-42dc-a51a-33c08e18c2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1e:aa:5c:8e:f5:cb:21:29:7f:6f:e1:ca:83:
                    bf:41:90:93:8e:4a:41:2c:fc:d8:c7:db:08:60:c3:
                    ad:75:cc:29:59:1f:eb:e5:31:e1:0e:fc:e7:fe:e3:
                    9d:ac:e3:6a:a3:23:85:b6:70:b6:56:fb:0b:6c:2b:
                    ef:19:04:7f:8e:cc:0a:0d:f2:d1:73:2d:b3:a8:22:
                    90:bb:ac:c8:11:33:2d:11:02:cf:26:bc:cf:3c:3b:
                    6a:38:7a:41:c7:35:85:be:b4:e5:80:63:4e:63:70:
                    da:2e:b2:39:16:3b:b3:28:71:1f:a1:35:6b:0e:00:
                    41:46:c7:fa:02:84:ea:9b:a8:35:39:f7:da:06:ce:
                    e3:62:75:41:79:b2:c9:10:66:d9:ac:3d:35:13:ef:
                    f0:c8:6b:87:1b:0c:d2:fa:d3:16:26:da:e1:5f:ff:
                    d3:de:2a:d2:1b:56:60:1b:9b:60:40:87:59:15:c1:
                    52:3c:9f:c5:5b:e2:db:db:73:f9:73:ba:e1:fb:8b:
                    75:60:c2:fd:c2:9e:17:1a:49:b1:a6:99:cc:b5:79:
                    0b:b0:67:1c:96:8a:a2:3f:b6:5c:ee:b1:96:54:12:
                    91:e8:06:20:1c:60:df:e9:5a:1e:f0:f0:1c:57:4b:
                    d4:b7:9d:33:a9:68:bf:99:61:71:69:39:c8:6c:c8:
                    3e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EB:DB:A0:5A:AA:1D:4A:0B:3F:F4:16:3C:9D:3B:64:DD:05:8E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9349e591-9703-31d8-95dd-9591157c67aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:b5:45:04:e4:81:6b:bd:f4:03:c5:fc:93:b5:ff:5c:e5:f4:
         90:cf:d4:ff:e3:b1:ac:ff:e3:e5:86:59:f5:4c:6b:34:70:68:
         0d:9c:c0:da:43:62:0c:f8:b6:5f:f3:52:7f:df:75:8c:ee:07:
         7f:71:1e:a2:90:49:09:32:7c:ba:ca:1b:dc:91:2b:40:6d:ff:
         fa:63:b0:81:a6:62:d8:62:4c:eb:9b:32:ad:14:67:7d:f4:1e:
         d9:ab:f0:ef:3b:83:eb:32:d6:04:1d:13:a5:48:d2:09:7a:10:
         2c:4f:18:40:f8:43:c8:04:53:f0:a9:22:b6:b0:75:0c:96:0e:
         f3:e1:38:74:70:9c:bc:0a:59:5f:e4:66:09:07:44:69:7b:02:
         bc:f7:7f:90:8c:9f:63:da:5d:ef:48:b1:5b:f8:ab:b8:7a:94:
         53:78:08:84:67:74:64:48:ea:71:23:c6:12:21:b1:5c:b0:ff:
         80:f2:4d:8e:31:e8:2f:01:1c:8e:94:10:ff:1d:ee:74:a0:d0:
         42:24:8e:88:91:9b:f8:90:28:28:e7:c0:6b:a2:4e:ce:03:b6:
         73:68:c1:27:cc:97:19:e5:2b:3f:aa:54:81:a8:18:7c:c3:79:
         1a:2e:92:45:ba:45:49:84:8a:43:68:37:fb:d7:4b:17:95:19:
         76:88:02:19
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0mRL3crxNKBPqlDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
Nzg4OTU1N2QtNTY1ZC00MmRjLWE1MWEtMzNjMDhlMThjMmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB6qXI71yyEpf2/hyoO/QZCTjkpBLPzYx9sI
YMOtdcwpWR/r5THhDvzn/uOdrONqoyOFtnC2VvsLbCvvGQR/jswKDfLRcy2zqCKQ
u6zIETMtEQLPJrzPPDtqOHpBxzWFvrTlgGNOY3DaLrI5FjuzKHEfoTVrDgBBRsf6
AoTqm6g1OffaBs7jYnVBebLJEGbZrD01E+/wyGuHGwzS+tMWJtrhX//T3irSG1Zg
G5tgQIdZFcFSPJ/FW+Lb23P5c7rh+4t1YML9wp4XGkmxppnMtXkLsGccloqiP7Zc
7rGWVBKR6AYgHGDf6Voe8PAcV0vUt50zqWi/mWFxaTnIbMg+fQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMbr26Baqh1KCz/0FjydO2TdBY7mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTM0OWU1OTEtOTcwMy0z
MWQ4LTk1ZGQtOTU5MTE1N2M2N2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALa1RQTkgWu99APF/JO1/1zl9JDP1P/jsaz/4+WGWfVMazRwaA2c
wNpDYgz4tl/zUn/fdYzuB39xHqKQSQkyfLrKG9yRK0Bt//pjsIGmYthiTOubMq0U
Z330Htmr8O87g+sy1gQdE6VI0gl6ECxPGED4Q8gEU/CpIrawdQyWDvPhOHRwnLwK
WV/kZgkHRGl7Arz3f5CMn2PaXe9IsVv4q7h6lFN4CIRndGRI6nEjxhIhsVyw/4Dy
TY4x6C8BHI6UEP8d7nSg0EIkjoiRm/iQKCjnwGuiTs4DtnNowSfMlxnlKz+qVIGo
GHzDeRoukkW6RUmEikNoN/vXSxeVGXaIAhk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:43:58 2026 by rpki-client