Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab4cdfb4-38a9-3a93-b583-47d78d43bd19.roa
File:                     ab4cdfb4-38a9-3a93-b583-47d78d43bd19.roa (raw, json)
Hash identifier:          K7lz5ltRE/yAGhOuu6EoO+OpFWNDkvHpzuU4+U/RXv0=
Subject key identifier:   D2:2C:48:DD:C1:F5:E0:E7:7D:55:4A:C1:03:98:50:2A:60:36:55:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2644CC15708167BB89449F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab4cdfb4-38a9-3a93-b583-47d78d43bd19.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     396549
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:cc:15:70:81:67:bb:89:44:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=4bf40f70-3fdd-45b8-8181-bc982fb22650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:22:9c:ee:a1:39:4d:8f:fc:4d:fd:71:04:96:
                    71:2c:d5:c1:3b:16:ee:96:e4:2e:48:c2:ce:46:99:
                    00:7b:95:a7:62:f6:58:72:81:1c:cd:d2:80:a6:b5:
                    66:14:4a:ec:e6:e2:74:a7:31:d9:26:89:7c:d6:a2:
                    43:ff:02:62:2c:c8:01:28:89:6a:b0:34:27:0f:07:
                    3a:0f:7d:35:1f:8c:b3:3b:28:47:9c:86:a2:8c:b2:
                    79:f4:16:c3:b4:17:97:ad:63:1c:e3:b6:0c:eb:0e:
                    5b:6f:17:60:a8:7e:ec:18:d0:7e:0e:11:b1:7b:cc:
                    f8:61:b2:fb:29:23:f9:89:5d:49:b0:54:5a:6a:df:
                    19:b5:a1:17:a5:99:75:21:89:86:18:1f:02:a2:62:
                    84:a7:6f:43:b3:40:8f:20:7a:2c:91:12:1e:45:1c:
                    e3:2a:f1:da:cf:69:82:1f:1c:16:f5:d5:a0:d1:b4:
                    b9:73:79:03:e4:0f:df:eb:ca:9d:8b:4d:1e:0e:50:
                    26:20:01:52:6a:29:ee:aa:db:14:f6:9f:ec:13:23:
                    c3:66:42:dc:be:be:e6:2e:05:ee:63:ef:f8:fd:a2:
                    db:e0:5f:45:0c:5b:e4:f3:f0:f4:18:cb:bc:28:f9:
                    5c:bf:f1:0e:78:f8:d4:7f:08:06:25:ee:7a:20:eb:
                    ae:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2C:48:DD:C1:F5:E0:E7:7D:55:4A:C1:03:98:50:2A:60:36:55:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab4cdfb4-38a9-3a93-b583-47d78d43bd19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:86:c6:02:58:21:d5:c0:0a:52:b4:f5:80:e2:c6:95:64:8e:
         ad:e5:00:d5:c0:da:90:ab:7b:52:c7:bf:b2:c5:9f:9f:6e:db:
         90:0a:27:81:e7:90:d9:95:28:0e:8c:ec:28:56:84:34:da:f6:
         72:38:95:13:8a:7b:2d:78:6e:d5:a1:7c:1f:b0:cb:a5:1b:6d:
         ba:89:29:4a:f1:aa:38:3f:eb:db:4f:fc:67:64:52:98:7a:2d:
         2e:a5:c8:da:1f:47:f0:4f:cd:8a:8c:76:c0:b1:ab:4b:64:69:
         43:44:0c:53:28:d8:3c:09:22:7e:42:97:76:e1:c6:5a:bf:db:
         16:34:cd:ef:b2:df:27:fb:f7:84:8c:9f:b3:40:fa:50:31:29:
         a2:bb:57:d4:0b:bf:53:1f:cd:1e:8b:f2:7e:ad:38:15:7a:f0:
         f1:7f:a0:60:e1:6b:31:b6:ce:c3:47:a8:dc:ea:1d:23:f0:e3:
         16:d7:d6:53:37:60:ee:b9:6a:85:1b:eb:db:14:cb:ba:d3:09:
         a9:94:e9:7b:c8:35:67:d7:57:53:4e:b1:69:c1:f1:a6:66:81:
         69:b8:67:29:34:b8:af:09:cd:ed:34:21:d3:fe:86:d6:db:8c:
         3d:9c:52:b1:0b:d9:12:37:64:36:f9:72:bd:2b:49:08:7c:1a:
         0d:1c:61:ea
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0mRMwVcIFnu4lEn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
NGJmNDBmNzAtM2ZkZC00NWI4LTgxODEtYmM5ODJmYjIyNjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyKc7qE5TY/8Tf1xBJZxLNXBOxbuluQuSMLO
RpkAe5WnYvZYcoEczdKAprVmFErs5uJ0pzHZJol81qJD/wJiLMgBKIlqsDQnDwc6
D301H4yzOyhHnIaijLJ59BbDtBeXrWMc47YM6w5bbxdgqH7sGNB+DhGxe8z4YbL7
KSP5iV1JsFRaat8ZtaEXpZl1IYmGGB8ComKEp29Ds0CPIHoskRIeRRzjKvHaz2mC
HxwW9dWg0bS5c3kD5A/f68qdi00eDlAmIAFSainuqtsU9p/sEyPDZkLcvr7mLgXu
Y+/4/aLb4F9FDFvk8/D0GMu8KPlcv/EOePjUfwgGJe56IOuuEQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNIsSN3B9eDnfVVKwQOYUCpgNlWNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWI0Y2RmYjQtMzhhOS0z
YTkzLWI1ODMtNDdkNzhkNDNiZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD2GxgJYIdXAClK09YDixpVkjq3lANXA2pCre1LHv7LFn59u25AK
J4HnkNmVKA6M7ChWhDTa9nI4lROKey14btWhfB+wy6UbbbqJKUrxqjg/69tP/Gdk
Uph6LS6lyNofR/BPzYqMdsCxq0tkaUNEDFMo2DwJIn5Cl3bhxlq/2xY0ze+y3yf7
94SMn7NA+lAxKaK7V9QLv1MfzR6L8n6tOBV68PF/oGDhazG2zsNHqNzqHSPw4xbX
1lM3YO65aoUb69sUy7rTCamU6XvINWfXV1NOsWnB8aZmgWm4Zyk0uK8Jze00IdP+
htbbjD2cUrEL2RI3ZDb5cr0rSQh8Gg0cYeo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:33:45 2026 by rpki-client