Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2c7ec40-25c1-3ee5-ac8e-5d2973ac48f3.roa
File:                     a2c7ec40-25c1-3ee5-ac8e-5d2973ac48f3.roa (raw, json)
Hash identifier:          LyWBTZVcmPWtFKmImUakeR+FioYEpsSLi79KP6kWirA=
Subject key identifier:   64:62:A0:54:5F:19:F1:78:D1:6A:E0:E8:EB:67:5B:6B:29:B3:08:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F4A660C772849F7F50917C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2c7ec40-25c1-3ee5-ac8e-5d2973ac48f3.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     396606
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:66:0c:77:28:49:f7:f5:09:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=d920b6f6-3bfb-4d2d-8c09-3217c771e247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:f6:63:62:3f:1c:4b:da:e6:75:24:17:8e:
                    0a:7e:15:16:6d:71:99:53:8d:f5:33:7a:a1:19:b4:
                    e1:74:95:e9:b7:2c:e1:7d:c4:ca:f7:42:91:a6:c4:
                    37:d6:a0:81:28:bc:aa:51:dc:bb:58:cb:fe:d2:4c:
                    55:51:0f:de:f2:3d:f2:09:56:10:7f:d5:73:4c:4a:
                    70:90:e4:cb:39:f2:4e:20:a6:5d:35:3c:b2:1a:f2:
                    a9:ed:fa:24:6a:f2:7e:9b:71:85:34:8d:28:1a:81:
                    c2:c2:d6:c8:32:28:b9:2d:93:9d:e9:df:65:fe:f3:
                    0e:0d:63:7e:ff:53:7f:ed:48:5c:bc:2b:93:c8:28:
                    09:39:86:bd:c4:42:65:ce:14:71:d4:67:c5:36:26:
                    19:8d:19:55:89:db:76:d2:ae:98:5a:d7:dd:60:91:
                    c8:ec:5b:1f:1c:a5:8a:86:53:5c:20:1a:5d:f7:87:
                    bc:3b:7e:01:17:6b:50:ab:a7:7a:84:05:51:fd:91:
                    74:53:49:28:eb:5f:4b:8e:4c:5e:e8:15:33:6c:07:
                    39:57:9d:ef:27:01:f1:5d:d4:72:f9:07:34:8e:f4:
                    ab:5a:44:e9:b7:03:16:ca:23:0b:22:38:7d:0e:a2:
                    29:3c:82:dd:ff:97:08:06:cc:30:cb:6b:36:d9:a4:
                    42:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:62:A0:54:5F:19:F1:78:D1:6A:E0:E8:EB:67:5B:6B:29:B3:08:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2c7ec40-25c1-3ee5-ac8e-5d2973ac48f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:da:21:a9:79:72:b0:95:3c:1e:49:76:19:cb:23:1d:12:7e:
         fa:c0:72:c5:4c:02:74:5d:27:3a:12:b7:75:5d:39:7f:d1:3d:
         b9:55:b3:99:36:19:95:b4:cd:73:a6:ad:f9:6e:1e:a0:dc:0e:
         ac:89:3c:a2:4c:94:31:24:03:de:e6:d5:85:08:48:e1:4c:58:
         00:2e:d0:f3:e6:4b:87:96:92:4a:74:36:67:20:0f:99:6d:94:
         a3:b6:86:c4:77:25:13:d6:df:88:75:ce:27:c4:09:d9:6e:99:
         53:4a:ac:6b:f9:95:89:c6:f5:18:17:b4:ed:5d:43:31:9e:e6:
         db:9c:96:e8:f3:53:43:9d:ea:a6:d4:53:9d:a0:58:1c:13:c5:
         e7:4e:51:89:de:df:ec:b2:2d:b7:25:35:8b:32:49:4f:d0:76:
         01:51:26:89:d3:7e:c8:d0:7a:98:bf:3a:5d:9c:81:16:ed:10:
         7b:7f:16:a8:12:59:98:85:13:06:da:57:27:29:e6:94:e6:d9:
         07:a6:3d:4f:76:49:ac:a2:26:ae:2c:e8:54:8d:96:af:89:8a:
         dc:e0:39:82:f8:8c:5f:f9:d8:1d:df:3b:41:a4:f7:75:dd:0d:
         9d:db:17:13:e1:4c:20:ae:7c:38:e3:28:9f:11:2b:e4:00:6c:
         ae:98:35:6e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fSmYMdyhJ9/UJF8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
ZDkyMGI2ZjYtM2JmYi00ZDJkLThjMDktMzIxN2M3NzFlMjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAj2Y2I/HEva5nUkF44KfhUWbXGZU431M3qh
GbThdJXptyzhfcTK90KRpsQ31qCBKLyqUdy7WMv+0kxVUQ/e8j3yCVYQf9VzTEpw
kOTLOfJOIKZdNTyyGvKp7fokavJ+m3GFNI0oGoHCwtbIMii5LZOd6d9l/vMODWN+
/1N/7UhcvCuTyCgJOYa9xEJlzhRx1GfFNiYZjRlVidt20q6YWtfdYJHI7FsfHKWK
hlNcIBpd94e8O34BF2tQq6d6hAVR/ZF0U0ko619Ljkxe6BUzbAc5V53vJwHxXdRy
+Qc0jvSrWkTptwMWyiMLIjh9DqIpPILd/5cIBswwy2s22aRC+wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGRioFRfGfF40Wrg6OtnW2spswieMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTJjN2VjNDAtMjVjMS0z
ZWU1LWFjOGUtNWQyOTczYWM0OGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBa2iGpeXKwlTweSXYZyyMdEn76wHLFTAJ0XSc6
Erd1XTl/0T25VbOZNhmVtM1zpq35bh6g3A6siTyiTJQxJAPe5tWFCEjhTFgALtDz
5kuHlpJKdDZnIA+ZbZSjtobEdyUT1t+Idc4nxAnZbplTSqxr+ZWJxvUYF7TtXUMx
nubbnJbo81NDneqm1FOdoFgcE8XnTlGJ3t/ssi23JTWLMklP0HYBUSaJ037I0HqY
vzpdnIEW7RB7fxaoElmYhRMG2lcnKeaU5tkHpj1PdkmsoiauLOhUjZaviYrc4DmC
+Ixf+dgd3ztBpPd13Q2d2xcT4Uwgrnw44yifESvkAGyumDVu
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:09:18 2026 by rpki-client