Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e83ea84c-7a33-3723-92d5-1b2ff87312a8.roa
File:                     e83ea84c-7a33-3723-92d5-1b2ff87312a8.roa (raw, json)
Hash identifier:          BUcdFVJkjZCES7BLGKFFAmBM021s/0SnwAbBG+5Cy8Y=
Subject key identifier:   00:9C:02:3B:57:72:DB:3D:04:1F:4D:45:8E:DC:16:C4:31:E2:12:D2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A4B93233E7FCC10D6FFAA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e83ea84c-7a33-3723-92d5-1b2ff87312a8.roa
Signing time:             Thu 23 Apr 2026 14:28:20 +0000
ROA not before:           Thu 23 Apr 2026 14:28:20 +0000
ROA not after:            Wed 22 Jul 2026 14:28:20 +0000
asID:                     396585
IP address blocks:        2001:503:a83e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:4b:93:23:3e:7f:cc:10:d6:ff:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 14:28:20 2026 GMT
            Not After : Jul 22 14:28:20 2026 GMT
        Subject: CN=86bbdf1c-6df6-43d2-9952-f396cc6c68e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:42:be:95:2b:62:0d:8f:72:c4:fa:45:27:4d:
                    2a:5c:3e:d2:64:df:4d:5f:ac:e2:1b:36:f5:85:e2:
                    c8:62:3f:42:86:e8:4c:bf:dc:fd:12:b6:4a:c3:49:
                    9a:f0:99:90:df:ab:42:f8:17:e1:9d:11:4c:73:e8:
                    d9:40:9d:0f:d0:89:98:67:1a:ce:6d:09:a2:4f:38:
                    13:d3:f3:41:e6:f4:95:17:ad:74:8f:35:4b:d5:af:
                    1a:88:56:54:75:45:a0:30:41:aa:7a:bb:82:e3:23:
                    43:6e:eb:e8:2d:dc:ab:87:d5:3e:e1:22:05:5b:10:
                    65:8f:44:57:a2:bf:8a:8d:73:8f:e5:9d:1f:29:31:
                    c7:b8:e5:9e:62:5d:2b:2c:09:b7:b9:af:29:04:6f:
                    e6:e6:fb:15:e8:9c:bf:62:9c:1e:cf:6c:67:77:e0:
                    9d:36:d6:e4:df:5c:28:ed:23:d1:14:ce:3e:82:a4:
                    ad:1b:aa:b0:eb:6d:40:d7:37:ed:99:24:a4:7e:3f:
                    36:86:fe:bf:b5:e9:9d:cc:07:c6:54:a7:72:91:1f:
                    34:7e:74:d3:c0:47:a6:41:37:07:ef:bd:95:9d:25:
                    e2:18:2a:f0:f8:92:5f:58:2d:0b:73:7c:eb:80:be:
                    70:dc:28:e3:ed:68:bc:02:41:1a:a3:95:c9:18:3b:
                    90:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9C:02:3B:57:72:DB:3D:04:1F:4D:45:8E:DC:16:C4:31:E2:12:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e83ea84c-7a33-3723-92d5-1b2ff87312a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:0c:c1:87:95:a1:be:31:e1:1f:11:bb:ac:3a:03:40:3c:19:
         60:11:3f:99:d1:06:f9:76:6b:ef:aa:41:1e:8b:44:34:a6:48:
         ae:26:1e:bb:45:2d:70:9d:42:b5:12:65:50:f7:00:c4:aa:cf:
         14:11:98:28:ec:06:8e:df:03:9b:bb:2d:c4:90:d0:61:fd:a6:
         cb:e7:18:9a:d1:ea:a9:9c:22:73:a5:38:15:fd:b5:f8:3a:f6:
         d6:79:54:f8:54:48:a4:8f:c5:55:dc:3b:ea:08:3c:25:f8:3d:
         4d:71:fa:10:58:d0:c8:6c:0b:80:b9:f2:03:56:17:80:3c:65:
         20:5f:c3:08:15:16:54:98:77:aa:6e:15:6a:dd:51:6a:ce:10:
         ae:a7:fc:6b:13:a5:8c:0f:d9:36:f4:7f:1a:c0:e8:f0:ed:fc:
         0a:ab:ca:59:6c:5f:32:37:fc:88:75:30:6d:38:65:2c:ce:56:
         25:7f:f4:db:ed:e0:a2:66:dc:8d:42:bb:cf:e6:ca:f5:33:40:
         71:35:0f:6b:d7:85:f9:d9:ac:52:f3:64:d0:d1:e2:46:03:73:
         51:99:00:4a:0f:b7:8e:11:e7:4b:0f:33:82:37:0b:90:8f:97:
         d5:17:94:d5:10:56:5b:b0:af:23:7c:24:74:39:ba:e7:78:fe:
         a1:5c:2e:a1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2aS5MjPn/MENb/qoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyMzE0MjgyMFoXDTI2MDcyMjE0MjgyMFowLzEtMCsGA1UEAxMk
ODZiYmRmMWMtNmRmNi00M2QyLTk5NTItZjM5NmNjNmM2OGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkK+lStiDY9yxPpFJ00qXD7SZN9NX6ziGzb1
heLIYj9ChuhMv9z9ErZKw0ma8JmQ36tC+BfhnRFMc+jZQJ0P0ImYZxrObQmiTzgT
0/NB5vSVF610jzVL1a8aiFZUdUWgMEGqeruC4yNDbuvoLdyrh9U+4SIFWxBlj0RX
or+KjXOP5Z0fKTHHuOWeYl0rLAm3ua8pBG/m5vsV6Jy/Ypwez2xnd+CdNtbk31wo
7SPRFM4+gqStG6qw621A1zftmSSkfj82hv6/temdzAfGVKdykR80fnTTwEemQTcH
772VnSXiGCrw+JJfWC0Lc3zrgL5w3Cjj7Wi8AkEao5XJGDuQVwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFACcAjtXcts9BB9NRY7cFsQx4hLSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTgzZWE4NGMtN2EzMy0z
NzIzLTkyZDUtMWIyZmY4NzMxMmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA6g+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALIMwYeVob4x4R8Ru6w6A0A8GWARP5nRBvl2a++qQR6LRDSmSK4m
HrtFLXCdQrUSZVD3AMSqzxQRmCjsBo7fA5u7LcSQ0GH9psvnGJrR6qmcInOlOBX9
tfg69tZ5VPhUSKSPxVXcO+oIPCX4PU1x+hBY0MhsC4C58gNWF4A8ZSBfwwgVFlSY
d6puFWrdUWrOEK6n/GsTpYwP2Tb0fxrA6PDt/AqryllsXzI3/Ih1MG04ZSzOViV/
9Nvt4KJm3I1Cu8/myvUzQHE1D2vXhfnZrFLzZNDR4kYDc1GZAEoPt44R50sPM4I3
C5CPl9UXlNUQVluwryN8JHQ5uud4/qFcLqE=
-----END CERTIFICATE-----
Generated at Wed May 13 06:48:41 2026 by rpki-client