Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aec7db41-46c5-35b8-841a-b5dbb3371672.roa
File:                     aec7db41-46c5-35b8-841a-b5dbb3371672.roa (raw, json)
Hash identifier:          JSrN9KT7NgU5QxkMK1tYwtU2V8zG55PvX33p+HRSzs4=
Subject key identifier:   50:F6:DE:28:4F:69:E5:60:E6:28:17:E1:83:5D:69:D3:D5:5C:3A:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D422F896D8643986F5483EFE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aec7db41-46c5-35b8-841a-b5dbb3371672.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     396572
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:89:6d:86:43:98:6f:54:83:ef:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=cd712c5f-d77a-4549-b06c-4cbe17114baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:43:4f:ce:a5:80:d6:ed:f4:b1:b1:4d:e0:52:
                    e6:0f:50:b7:5a:81:b4:66:95:19:a5:9a:11:a4:16:
                    df:c9:fd:45:70:14:c3:17:48:c7:90:f2:5f:bd:32:
                    d8:b2:8c:a3:f2:4e:78:e9:14:64:76:61:65:e6:aa:
                    01:af:97:d5:8b:99:18:45:b6:86:ff:2d:8f:17:1a:
                    11:39:50:1d:6e:22:a4:74:68:c4:e4:c7:45:b5:49:
                    c4:4a:dd:32:13:6a:af:67:42:61:1b:cc:25:64:3a:
                    ec:34:60:54:f9:20:72:d5:71:40:88:ab:5f:34:15:
                    a1:28:a5:dc:c0:aa:ca:7a:46:1a:c9:27:55:52:b5:
                    37:11:c1:61:fb:6f:94:73:ef:b7:59:e1:2e:e2:78:
                    fc:c7:43:0c:ed:78:75:b2:42:bc:25:dc:53:35:9b:
                    d4:ed:b8:83:59:a0:18:f6:2d:e6:8d:38:ca:05:1a:
                    cf:86:fe:5c:fa:b8:85:1e:f3:02:c3:93:7a:e9:09:
                    f6:fb:ed:7f:e1:00:84:20:9a:4f:59:67:2a:26:35:
                    15:b5:53:62:fc:ed:ab:f4:d2:73:4b:cd:2b:84:ac:
                    36:eb:42:c5:13:da:52:7e:78:6e:92:7d:8a:0a:96:
                    10:4d:ec:86:7a:de:97:09:6e:ec:c3:3a:e6:39:4a:
                    d7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F6:DE:28:4F:69:E5:60:E6:28:17:E1:83:5D:69:D3:D5:5C:3A:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aec7db41-46c5-35b8-841a-b5dbb3371672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:f0:f3:57:56:44:3e:a9:a0:a4:21:ff:a1:75:59:03:6a:d5:
         10:86:65:ab:e1:24:cf:3e:b5:e5:62:ea:1f:87:01:10:5b:6f:
         9e:cd:12:03:e5:cf:55:db:d2:31:27:ee:c1:a1:14:11:21:21:
         f1:79:d9:7f:86:4c:fc:76:d5:8a:a1:04:d5:3a:31:4a:eb:3d:
         78:2e:4a:f7:71:89:85:ed:53:0e:93:cc:f5:e5:19:62:fa:4f:
         11:c2:83:d1:db:4a:bb:28:22:29:fd:13:1a:08:a2:e2:47:ad:
         fa:c2:9c:98:53:39:9a:6e:1d:5a:45:b1:62:f8:d3:02:91:fc:
         e1:be:de:2c:9e:d8:08:20:c0:86:73:d9:a9:08:69:03:11:4c:
         25:eb:6b:18:a3:e4:e6:b3:c0:8b:37:06:57:e8:99:29:4e:4e:
         03:0f:62:3a:4a:7f:34:64:1d:04:10:bc:fd:06:54:02:d9:23:
         a1:10:6d:fe:07:85:bd:66:c2:24:66:d8:20:77:4e:67:ac:63:
         f5:eb:fc:bf:02:13:0f:0a:19:a4:0e:a3:fd:0a:b7:30:89:89:
         5a:c4:1c:89:bb:df:62:98:82:24:05:b4:e6:e8:e0:e9:c9:e1:
         f5:a2:c2:5d:4a:a4:11:ce:ee:ab:7d:ba:dc:9c:23:00:02:da:
         ca:cf:d7:86
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1CL4lthkOYb1SD7+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk
Y2Q3MTJjNWYtZDc3YS00NTQ5LWIwNmMtNGNiZTE3MTE0YmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikNPzqWA1u30sbFN4FLmD1C3WoG0ZpUZpZoR
pBbfyf1FcBTDF0jHkPJfvTLYsoyj8k546RRkdmFl5qoBr5fVi5kYRbaG/y2PFxoR
OVAdbiKkdGjE5MdFtUnESt0yE2qvZ0JhG8wlZDrsNGBU+SBy1XFAiKtfNBWhKKXc
wKrKekYaySdVUrU3EcFh+2+Uc++3WeEu4nj8x0MM7Xh1skK8JdxTNZvU7biDWaAY
9i3mjTjKBRrPhv5c+riFHvMCw5N66Qn2++1/4QCEIJpPWWcqJjUVtVNi/O2r9NJz
S80rhKw260LFE9pSfnhukn2KCpYQTeyGet6XCW7swzrmOUrX2wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFD23ihPaeVg5igX4YNdadPVXDoTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWVjN2RiNDEtNDZjNS0z
NWI4LTg0MWEtYjVkYmIzMzcxNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALLw81dWRD6poKQh/6F1WQNq1RCGZavhJM8+teVi6h+HARBbb57N
EgPlz1Xb0jEn7sGhFBEhIfF52X+GTPx21YqhBNU6MUrrPXguSvdxiYXtUw6TzPXl
GWL6TxHCg9HbSrsoIin9ExoIouJHrfrCnJhTOZpuHVpFsWL40wKR/OG+3iye2Agg
wIZz2akIaQMRTCXraxij5OazwIs3BlfomSlOTgMPYjpKfzRkHQQQvP0GVALZI6EQ
bf4Hhb1mwiRm2CB3TmesY/Xr/L8CEw8KGaQOo/0KtzCJiVrEHIm732KYgiQFtObo
4OnJ4fWiwl1KpBHO7qt9utycIwAC2srP14Y=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:57:34 2026 by rpki-client