Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0f1752e-8430-31ee-a057-d1730f919013.roa
File:                     d0f1752e-8430-31ee-a057-d1730f919013.roa (raw, json)
Hash identifier:          pyVoi4depIPfvnPrxvXknJ57ljN+vckF3rj1gLuYol4=
Subject key identifier:   27:16:30:00:9F:61:11:40:E6:FE:03:70:64:E6:FC:59:4E:CD:2A:9C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A4B8C9D0B9D5F0EB5729800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0f1752e-8430-31ee-a057-d1730f919013.roa
Signing time:             Thu 23 Apr 2026 14:28:17 +0000
ROA not before:           Thu 23 Apr 2026 14:28:17 +0000
ROA not after:            Wed 22 Jul 2026 14:28:17 +0000
asID:                     397199
IP address blocks:        2001:503:a83e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:4b:8c:9d:0b:9d:5f:0e:b5:72:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 14:28:17 2026 GMT
            Not After : Jul 22 14:28:17 2026 GMT
        Subject: CN=6f952d29-186f-431c-899c-c88d575d8f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:af:0a:01:65:77:44:6a:82:8d:20:c9:12:f9:
                    df:e6:7d:4d:e9:40:78:02:db:ca:16:b8:fa:62:dc:
                    92:c6:6a:e7:e9:b9:76:59:08:84:29:79:14:34:14:
                    45:5c:64:e5:0e:44:c4:d1:b8:25:39:61:74:68:2f:
                    84:0f:74:bd:64:10:aa:1a:60:c4:ee:8b:1a:80:c0:
                    98:d4:bb:f6:35:04:c3:cd:c0:1d:55:f2:26:a2:76:
                    75:38:20:21:7c:fe:6d:25:19:cd:1a:57:c7:64:42:
                    d0:77:2e:a4:96:66:6a:be:86:4f:43:5d:fd:9b:d5:
                    e3:3a:3b:af:38:cc:48:60:9d:3b:6e:a4:90:15:38:
                    9d:5a:65:0d:5b:6b:cf:6b:fc:cf:d6:ea:f4:50:5d:
                    21:39:32:5a:b0:7a:18:87:d9:e2:93:9d:2a:5b:a9:
                    08:16:0e:0e:c7:54:2e:87:0e:48:99:31:df:15:eb:
                    25:6f:16:df:48:86:16:e6:c7:7c:cb:88:b8:2d:41:
                    d4:ab:3a:9a:f7:0a:ac:27:da:3e:70:30:8c:1b:e3:
                    d9:d0:0a:47:7e:73:3b:04:f2:5a:28:04:9e:f0:ce:
                    3a:51:05:67:13:d9:fc:24:29:c9:c3:2d:69:df:3b:
                    b4:65:d5:72:f6:52:ea:05:cc:c6:8e:81:64:24:2c:
                    9b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:16:30:00:9F:61:11:40:E6:FE:03:70:64:E6:FC:59:4E:CD:2A:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0f1752e-8430-31ee-a057-d1730f919013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:53:51:86:e2:bb:51:90:60:8c:6c:c3:c8:3c:9b:dd:28:43:
         c1:81:29:0a:4d:05:d0:99:67:cb:bc:10:26:3c:88:80:ca:70:
         a2:42:b4:8c:19:13:62:00:b0:c1:45:d0:02:f1:96:1d:4b:32:
         ad:08:2b:50:b2:8a:ac:25:ad:86:d4:ac:e0:1b:1f:be:e1:05:
         b5:53:c4:db:49:8a:b5:f1:7e:7d:3c:05:b9:e2:d6:1f:72:f5:
         52:f4:6c:e6:4a:c1:40:92:16:5d:dd:c1:57:10:c4:05:61:62:
         e1:f2:c8:58:fe:64:6f:0e:0e:fe:9e:8b:62:5c:5d:ba:18:85:
         4d:f3:e5:5f:87:ff:8e:c0:50:6e:14:c3:4b:e6:42:c8:fc:58:
         c8:ed:8a:de:2c:03:65:53:6f:97:c0:94:29:2e:39:de:5e:d6:
         ad:00:0f:34:ae:5d:e5:0a:64:44:65:29:00:e1:49:9f:6a:8f:
         31:6a:4c:68:35:a4:c3:22:58:51:7a:f4:21:02:80:07:1f:1e:
         4d:d9:e4:07:93:59:e5:e8:b9:6d:6a:ae:ad:88:48:60:37:d9:
         8d:44:c0:31:c9:c9:1e:15:5e:69:9e:c6:0c:ce:c2:78:e8:36:
         f6:70:47:bf:4c:c4:54:18:94:67:55:0e:a0:e6:56:10:bc:83:
         c5:69:a9:1a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2aS4ydC51fDrVymAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyMzE0MjgxN1oXDTI2MDcyMjE0MjgxN1owLzEtMCsGA1UEAxMk
NmY5NTJkMjktMTg2Zi00MzFjLTg5OWMtYzg4ZDU3NWQ4ZjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK8KAWV3RGqCjSDJEvnf5n1N6UB4AtvKFrj6
YtySxmrn6bl2WQiEKXkUNBRFXGTlDkTE0bglOWF0aC+ED3S9ZBCqGmDE7osagMCY
1Lv2NQTDzcAdVfImonZ1OCAhfP5tJRnNGlfHZELQdy6klmZqvoZPQ139m9XjOjuv
OMxIYJ07bqSQFTidWmUNW2vPa/zP1ur0UF0hOTJasHoYh9nik50qW6kIFg4Ox1Qu
hw5ImTHfFeslbxbfSIYW5sd8y4i4LUHUqzqa9wqsJ9o+cDCMG+PZ0ApHfnM7BPJa
KASe8M46UQVnE9n8JCnJwy1p3zu0ZdVy9lLqBczGjoFkJCybrwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCcWMACfYRFA5v4DcGTm/FlOzSqcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDBmMTc1MmUtODQzMC0z
MWVlLWEwNTctZDE3MzBmOTE5MDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA6g+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGFTUYbiu1GQYIxsw8g8m90oQ8GBKQpNBdCZZ8u8ECY8iIDKcKJC
tIwZE2IAsMFF0ALxlh1LMq0IK1CyiqwlrYbUrOAbH77hBbVTxNtJirXxfn08Bbni
1h9y9VL0bOZKwUCSFl3dwVcQxAVhYuHyyFj+ZG8ODv6ei2JcXboYhU3z5V+H/47A
UG4Uw0vmQsj8WMjtit4sA2VTb5fAlCkuOd5e1q0ADzSuXeUKZERlKQDhSZ9qjzFq
TGg1pMMiWFF69CECgAcfHk3Z5AeTWeXouW1qrq2ISGA32Y1EwDHJyR4VXmmexgzO
wnjoNvZwR79MxFQYlGdVDqDmVhC8g8VpqRo=
-----END CERTIFICATE-----
Generated at Wed May 13 09:51:38 2026 by rpki-client