Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de58fc05-8c8e-3f06-aac8-21f5f6e1056a.roa
File:                     de58fc05-8c8e-3f06-aac8-21f5f6e1056a.roa (raw, json)
Hash identifier:          /1xGv6mrs+mIx33n+f/SsCvbXav1hErpLxXA6T7DuBE=
Subject key identifier:   7F:23:3B:E2:11:60:17:AB:B6:39:86:EA:5F:80:AD:D4:54:3B:A4:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBBA06F9453C65C3AE53C0600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de58fc05-8c8e-3f06-aac8-21f5f6e1056a.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     396576
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:6f:94:53:c6:5c:3a:e5:3c:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=0a592f2d-e1cc-4c84-b26b-bffcbe3d352a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7c:66:0e:e1:c9:34:6b:cd:57:5d:5b:00:ae:
                    36:2d:21:63:31:6d:17:af:65:f1:23:6d:5d:e6:38:
                    94:33:8f:c7:b0:08:b3:88:f5:ef:2c:49:17:e1:76:
                    d8:01:5a:19:f1:66:39:ec:a9:c6:ea:ab:11:23:42:
                    c4:83:e8:89:97:b8:c3:91:d5:68:29:3f:84:79:3d:
                    3b:4f:57:f4:23:c4:a0:08:22:08:27:fb:28:bf:27:
                    97:11:c3:0c:5e:25:2d:fb:49:dd:fd:82:37:12:a4:
                    15:19:31:d9:80:9f:d9:2e:8a:e0:3a:58:a4:a0:ca:
                    ae:26:59:79:3f:69:4f:1b:4a:a5:e3:e3:6b:1c:47:
                    2e:d0:ef:0a:b8:cb:16:44:ce:a0:78:06:eb:bb:4c:
                    16:c2:3b:b3:5f:bb:ea:a6:2a:a8:7b:d7:6a:8e:6c:
                    e1:d6:2e:5a:fc:01:af:06:28:10:dd:25:61:cf:9b:
                    c2:55:43:ab:54:19:75:93:a0:26:6e:4e:fd:9b:51:
                    a4:61:89:68:8d:ad:6d:54:70:c0:b8:23:ee:86:9e:
                    1d:e1:06:95:76:ed:42:ed:b4:af:07:3a:53:dd:04:
                    bb:dd:f1:81:4b:b5:ed:2c:ed:e4:09:69:79:2b:5d:
                    31:32:05:2c:d5:83:7f:43:87:f8:d7:53:5f:e4:d5:
                    64:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:23:3B:E2:11:60:17:AB:B6:39:86:EA:5F:80:AD:D4:54:3B:A4:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de58fc05-8c8e-3f06-aac8-21f5f6e1056a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c8:30:a6:69:c5:a0:fd:16:32:19:57:8b:fe:46:c9:a9:ff:
         0b:99:4c:c1:bc:b5:75:e9:70:30:07:92:18:04:1c:c6:18:8e:
         9d:0c:b7:57:a9:70:2c:04:cf:9a:36:8c:db:95:28:79:6f:b1:
         7f:1f:f6:5d:90:7a:ca:4a:fc:37:65:8f:a7:52:06:bb:f0:bb:
         77:27:2b:8d:d1:9e:c5:4b:08:b9:44:e5:fb:58:ef:9e:02:63:
         6e:0f:dc:04:37:53:87:9b:9c:00:56:e7:c5:4a:fa:64:68:ef:
         45:fa:b8:ac:ce:72:22:e8:57:39:65:0a:00:0f:f0:dd:72:5b:
         c1:7d:60:3c:aa:15:13:60:b9:54:0e:80:ae:8b:4a:eb:e2:fc:
         dc:b8:d3:8f:50:49:0d:26:4c:d8:7c:75:bb:67:f2:ba:01:df:
         5f:c2:82:c2:f4:87:a6:f2:e3:19:1c:d0:77:17:40:e9:b4:0d:
         70:ce:be:e2:4e:a1:ec:5b:82:0f:c5:48:0f:93:b7:da:23:9b:
         bc:ee:02:eb:8c:90:e6:2a:98:9a:e7:44:29:58:2f:67:79:65:
         bd:e5:6d:60:22:ab:d8:df:7c:16:8e:e6:5d:a7:53:e5:7e:8e:
         8e:f5:6c:13:9d:3f:ee:e5:2e:0f:e2:26:f2:b3:66:97:73:2a:
         3d:c0:fb:50
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE27oG+UU8ZcOuU8BgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk
MGE1OTJmMmQtZTFjYy00Yzg0LWIyNmItYmZmY2JlM2QzNTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHxmDuHJNGvNV11bAK42LSFjMW0Xr2XxI21d
5jiUM4/HsAiziPXvLEkX4XbYAVoZ8WY57KnG6qsRI0LEg+iJl7jDkdVoKT+EeT07
T1f0I8SgCCIIJ/sovyeXEcMMXiUt+0nd/YI3EqQVGTHZgJ/ZLorgOlikoMquJll5
P2lPG0ql4+NrHEcu0O8KuMsWRM6geAbru0wWwjuzX7vqpiqoe9dqjmzh1i5a/AGv
BigQ3SVhz5vCVUOrVBl1k6Ambk79m1GkYYloja1tVHDAuCPuhp4d4QaVdu1C7bSv
BzpT3QS73fGBS7XtLO3kCWl5K10xMgUs1YN/Q4f411Nf5NVkBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH8jO+IRYBertjmG6l+ArdRUO6QhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGU1OGZjMDUtOGM4ZS0z
ZjA2LWFhYzgtMjFmNWY2ZTEwNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE7IMKZpxaD9FjIZV4v+Rsmp/wuZTMG8tXXpcDAHkhgEHMYYjp0M
t1epcCwEz5o2jNuVKHlvsX8f9l2QespK/Ddlj6dSBrvwu3cnK43RnsVLCLlE5ftY
754CY24P3AQ3U4ebnABW58VK+mRo70X6uKzOciLoVzllCgAP8N1yW8F9YDyqFRNg
uVQOgK6LSuvi/Ny4049QSQ0mTNh8dbtn8roB31/CgsL0h6by4xkc0HcXQOm0DXDO
vuJOoexbgg/FSA+Tt9ojm7zuAuuMkOYqmJrnRClYL2d5Zb3lbWAiq9jffBaO5l2n
U+V+jo71bBOdP+7lLg/iJvKzZpdzKj3A+1A=
-----END CERTIFICATE-----
Generated at Wed May 13 07:23:49 2026 by rpki-client