Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad94c5b2-cb8d-355d-8c5f-f0db97e1fe1e.roa
File:                     ad94c5b2-cb8d-355d-8c5f-f0db97e1fe1e.roa (raw, json)
Hash identifier:          11g/w3LxddKZNCm0HKlMqqk6xPV2nfRaxZps9q3OMaw=
Subject key identifier:   44:75:6C:3D:4D:56:6C:B3:8A:C0:6B:1A:64:E2:1D:C3:93:06:7F:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D19B4EE95A7FF26622B80CB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad94c5b2-cb8d-355d-8c5f-f0db97e1fe1e.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     396600
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:ee:95:a7:ff:26:62:2b:80:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=e06ed13d-6565-4355-bc1c-947844491934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:64:2e:16:32:31:26:6a:79:5a:b9:24:e4:1e:
                    d3:4f:cc:55:18:68:8a:41:dc:aa:dd:7b:d0:57:46:
                    9a:25:9e:de:ec:85:de:da:55:f4:e8:0c:cd:5e:de:
                    11:b7:1d:bc:95:ad:e9:10:e3:31:ec:1b:4d:44:c5:
                    e3:6d:77:47:1a:e8:69:3c:75:6e:f0:79:3c:7c:3b:
                    b7:65:b2:12:97:5c:68:d1:08:be:ee:f1:95:d9:53:
                    1d:ad:e4:f9:ef:99:96:23:b8:bc:e8:c9:29:d5:60:
                    45:77:39:6c:df:57:65:27:9f:32:a9:05:78:98:d5:
                    7e:e4:29:c6:38:54:e4:ac:51:0c:d3:7f:e3:42:65:
                    58:d3:17:74:a9:3e:60:b9:11:17:df:82:a0:29:51:
                    d9:02:b3:08:8c:f4:09:3c:9e:8b:e7:27:fb:d2:7b:
                    47:03:b5:fb:bd:56:6c:98:7f:fa:34:f0:5c:65:74:
                    3c:ac:b5:39:6f:b0:2f:f0:79:97:e8:26:ec:54:a6:
                    2b:22:93:7b:ea:b7:7d:44:43:81:59:dc:0e:93:37:
                    73:5a:dd:f1:21:0e:97:eb:a1:8f:c8:61:4c:04:8f:
                    66:8b:64:68:6e:16:af:15:4e:d6:de:19:90:7f:28:
                    57:d7:ed:fb:fa:fa:af:ef:7f:ef:eb:f2:39:7c:d5:
                    05:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:75:6C:3D:4D:56:6C:B3:8A:C0:6B:1A:64:E2:1D:C3:93:06:7F:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad94c5b2-cb8d-355d-8c5f-f0db97e1fe1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d7:1b:0e:c8:ea:87:cc:ee:eb:ae:d0:85:4b:4b:a9:5f:ed:
         1c:2e:a1:b0:a7:ac:3f:4e:24:41:5e:1e:70:0e:10:47:76:b4:
         af:24:21:92:27:6e:06:36:c0:d9:e4:f8:3b:e2:f5:70:f5:d9:
         2e:a4:55:de:dc:0a:bc:72:c5:d6:b3:66:ff:07:76:07:8a:4b:
         24:a2:98:7f:0f:81:2e:8e:74:19:aa:5f:d4:7f:a0:75:fb:40:
         80:bf:b6:ac:ac:7d:c5:d4:70:9f:04:3c:5c:5a:37:b3:97:90:
         ff:d4:dc:e7:0e:d8:42:35:50:e0:ca:cc:f5:e1:ce:36:56:bf:
         5d:bc:b5:64:70:59:43:2e:d9:6a:7b:1b:b4:b9:95:f1:44:e8:
         e5:a2:df:bd:e5:09:66:f2:59:d5:04:0d:1b:bf:ff:76:a1:7e:
         5e:06:aa:c0:ae:e5:41:41:c8:e0:2f:22:4f:c3:6b:85:d1:28:
         c3:57:a2:ae:5e:58:9a:60:3b:27:8f:e3:64:0a:6a:04:12:ce:
         2b:b3:28:ba:8d:f0:dc:05:71:41:ef:9f:dc:e4:2b:98:dc:0b:
         fa:82:b4:ea:1a:db:73:86:f0:0c:e2:58:f1:ff:45:50:48:1b:
         f0:4f:b9:ed:42:34:39:8d:ef:b2:91:89:b9:16:7b:f4:fa:1d:
         5e:bb:2d:58
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0ZtO6Vp/8mYiuAy4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk
ZTA2ZWQxM2QtNjU2NS00MzU1LWJjMWMtOTQ3ODQ0NDkxOTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mQuFjIxJmp5Wrkk5B7TT8xVGGiKQdyq3XvQ
V0aaJZ7e7IXe2lX06AzNXt4Rtx28la3pEOMx7BtNRMXjbXdHGuhpPHVu8Hk8fDu3
ZbISl1xo0Qi+7vGV2VMdreT575mWI7i86Mkp1WBFdzls31dlJ58yqQV4mNV+5CnG
OFTkrFEM03/jQmVY0xd0qT5guREX34KgKVHZArMIjPQJPJ6L5yf70ntHA7X7vVZs
mH/6NPBcZXQ8rLU5b7Av8HmX6CbsVKYrIpN76rd9REOBWdwOkzdzWt3xIQ6X66GP
yGFMBI9mi2RobhavFU7W3hmQfyhX1+37+vqv73/v6/I5fNUFRQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFER1bD1NVmyzisBrGmTiHcOTBn8yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWQ5NGM1YjItY2I4ZC0z
NTVkLThjNWYtZjBkYjk3ZTFmZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAU1xsOyOqHzO7rrtCFS0upX+0cLqGwp6w/TiRB
Xh5wDhBHdrSvJCGSJ24GNsDZ5Pg74vVw9dkupFXe3Aq8csXWs2b/B3YHikskoph/
D4EujnQZql/Uf6B1+0CAv7asrH3F1HCfBDxcWjezl5D/1NznDthCNVDgysz14c42
Vr9dvLVkcFlDLtlqexu0uZXxROjlot+95Qlm8lnVBA0bv/92oX5eBqrAruVBQcjg
LyJPw2uF0SjDV6KuXliaYDsnj+NkCmoEEs4rsyi6jfDcBXFB75/c5CuY3Av6grTq
GttzhvAM4ljx/0VQSBvwT7ntQjQ5je+ykYm5Fnv0+h1euy1Y
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:15 2026 by rpki-client