Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f26e038-d1ba-38c1-acb4-2a1b00387da5.roa
File:                     9f26e038-d1ba-38c1-acb4-2a1b00387da5.roa (raw, json)
Hash identifier:          z/UOlOvJswCYqNpB0maZDpy6TF24Aj1GOveeQi5lgEs=
Subject key identifier:   93:B0:B7:A0:87:A2:B8:E9:8E:C5:20:09:E6:58:F5:15:B4:07:AE:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A56B7923565ADA14F3C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f26e038-d1ba-38c1-acb4-2a1b00387da5.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396543
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:56:b7:92:35:65:ad:a1:4f:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=ebc27c56-c120-4e04-b520-2af2dd3afef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4c:88:69:ad:ae:81:41:37:85:af:97:0d:71:
                    19:c9:3b:eb:cd:20:2b:8f:bb:8d:f5:2a:e3:93:d7:
                    22:f6:ef:55:55:43:c4:90:fc:85:6a:a4:4b:05:a3:
                    06:f0:06:72:e1:2d:75:23:03:f4:e0:d2:8a:bc:80:
                    53:2c:c3:7e:9f:ce:33:c4:97:81:27:b4:ea:38:ab:
                    29:60:78:f8:4a:63:e1:47:6a:32:bc:68:b6:c2:2b:
                    9a:11:40:ec:f6:fe:71:c0:c2:c3:7e:f9:66:78:a5:
                    b1:6a:44:34:f9:e4:32:19:d1:6a:2e:86:d1:04:e3:
                    56:1b:cf:fe:1b:51:74:e1:35:74:79:88:21:57:f0:
                    ce:a7:44:64:90:68:62:d8:d9:d2:ab:03:2b:b2:48:
                    12:07:83:31:56:45:02:12:89:d3:0e:8e:e1:81:b5:
                    3c:8d:26:c1:3f:65:fc:14:c0:81:db:db:7b:0a:34:
                    6e:0f:33:0c:fa:cb:7d:30:ac:4c:a6:24:69:b3:8e:
                    8b:f2:f7:fe:45:51:54:54:77:0d:ad:ae:3c:c1:c0:
                    a5:4c:43:a4:af:3d:7a:0e:dc:aa:ad:d4:a8:6e:1f:
                    92:61:f1:ca:9d:30:92:91:bd:68:02:eb:c2:6f:1c:
                    af:3f:75:5f:77:a3:4d:8b:ef:3c:bf:41:7a:74:39:
                    88:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B0:B7:A0:87:A2:B8:E9:8E:C5:20:09:E6:58:F5:15:B4:07:AE:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f26e038-d1ba-38c1-acb4-2a1b00387da5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:1c:bc:11:ad:7e:38:00:b8:87:64:23:87:df:ac:33:c9:69:
         40:a4:8a:76:4b:03:e3:a7:0c:c4:64:3f:a3:5d:98:2c:5d:82:
         a7:68:5e:bb:d9:62:a2:c4:09:3e:cc:cd:6f:79:9a:07:a5:78:
         6a:9c:1c:4d:40:10:7f:70:c3:25:a9:56:59:d2:d2:8a:0e:1d:
         a1:b9:99:15:6a:27:72:3e:7e:69:50:12:e3:26:16:11:cf:9f:
         81:e4:1f:cc:39:f5:52:8a:76:cc:ad:47:a8:d4:0a:63:de:d5:
         aa:3b:72:86:36:05:ff:60:a0:71:ba:17:ee:5d:08:31:3b:8f:
         59:b1:e7:f2:2f:46:9f:11:d2:ad:b6:c1:94:10:4f:e2:4d:3d:
         40:47:93:32:6a:a6:65:68:c0:72:8f:3f:4a:d9:84:c0:63:15:
         ea:a7:86:09:16:38:73:21:8d:a5:7b:cf:40:5d:49:cd:8a:7f:
         e1:0b:3e:f7:5f:0f:12:13:bd:c2:20:47:10:7f:0d:cb:99:1c:
         fb:f2:af:90:76:f5:f3:d2:87:83:d2:59:4b:01:36:7d:49:a7:
         05:ae:6b:27:a3:57:be:84:f2:67:27:9e:27:02:fb:1e:c8:e2:
         03:7f:59:10:d3:a6:8a:93:5c:04:10:cb:17:4b:d5:4e:50:49:
         ea:39:77:32
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE04ala3kjVlraFPPEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk
ZWJjMjdjNTYtYzEyMC00ZTA0LWI1MjAtMmFmMmRkM2FmZWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEyIaa2ugUE3ha+XDXEZyTvrzSArj7uN9Srj
k9ci9u9VVUPEkPyFaqRLBaMG8AZy4S11IwP04NKKvIBTLMN+n84zxJeBJ7TqOKsp
YHj4SmPhR2oyvGi2wiuaEUDs9v5xwMLDfvlmeKWxakQ0+eQyGdFqLobRBONWG8/+
G1F04TV0eYghV/DOp0RkkGhi2NnSqwMrskgSB4MxVkUCEonTDo7hgbU8jSbBP2X8
FMCB29t7CjRuDzMM+st9MKxMpiRps46L8vf+RVFUVHcNra48wcClTEOkrz16Dtyq
rdSobh+SYfHKnTCSkb1oAuvCbxyvP3Vfd6NNi+88v0F6dDmIpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJOwt6CHorjpjsUgCeZY9RW0B66aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWYyNmUwMzgtZDFiYS0z
OGMxLWFjYjQtMmExYjAwMzg3ZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGEcvBGtfjgAuIdkI4ffrDPJaUCkinZLA+OnDMRkP6NdmCxdgqdo
XrvZYqLECT7MzW95mgeleGqcHE1AEH9wwyWpVlnS0ooOHaG5mRVqJ3I+fmlQEuMm
FhHPn4HkH8w59VKKdsytR6jUCmPe1ao7coY2Bf9goHG6F+5dCDE7j1mx5/IvRp8R
0q22wZQQT+JNPUBHkzJqpmVowHKPP0rZhMBjFeqnhgkWOHMhjaV7z0BdSc2Kf+EL
PvdfDxITvcIgRxB/DcuZHPvyr5B29fPSh4PSWUsBNn1JpwWuayejV76E8mcnnicC
+x7I4gN/WRDTpoqTXAQQyxdL1U5QSeo5dzI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:45:43 2026 by rpki-client