Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e85b8c6a-beac-310d-b4a1-a2f74e366fcd.roa
File:                     e85b8c6a-beac-310d-b4a1-a2f74e366fcd.roa (raw, json)
Hash identifier:          gNdt4qxnmbHe4IfGMUbzwts/vN36aGgLkgLJTfuJTb8=
Subject key identifier:   31:66:A0:D2:92:3F:2E:A6:40:66:5E:69:B8:91:45:32:6B:B7:9F:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D97555DAC560F80CAF6D78780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e85b8c6a-beac-310d-b4a1-a2f74e366fcd.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     19836
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:5d:ac:56:0f:80:ca:f6:d7:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=9e1a7245-a927-4c8a-8855-9b16b1eeae5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:7a:30:51:54:c1:ea:59:a8:81:fc:0b:e8:
                    78:85:a2:f4:d6:d2:ea:3d:cb:24:dc:ff:28:e2:8c:
                    7c:56:98:f1:4f:2c:d3:84:e4:ef:70:27:c6:70:0f:
                    61:2e:1a:b8:ed:21:b6:58:1e:8f:66:eb:b2:c4:66:
                    a0:40:ed:3a:77:b8:6f:15:54:88:6b:c5:71:d3:d2:
                    65:cc:85:68:d8:d3:67:bc:ee:31:66:13:7c:6c:b9:
                    67:b8:1c:f6:8b:66:22:b5:7f:c4:13:aa:a0:e4:00:
                    63:02:7c:d9:4c:2e:81:74:4f:a3:e2:b9:89:7a:e1:
                    5f:e1:58:39:61:b1:10:ff:2d:b3:e7:0b:a6:03:42:
                    19:4f:48:52:3b:d0:77:84:47:a2:6a:61:b6:5c:a3:
                    94:bd:c0:c5:eb:e0:8b:a8:dc:e1:55:a5:f2:e6:f8:
                    e1:39:c0:92:9f:3a:2d:88:c3:f1:82:f7:96:af:0a:
                    da:2f:a1:dc:41:c6:3d:0d:fb:df:a9:78:b8:9b:d2:
                    2d:87:89:11:a1:e7:97:e9:2d:f9:1f:d0:05:d2:65:
                    43:85:a0:7d:bd:bd:18:8c:66:86:ab:24:37:56:5a:
                    25:1a:69:7c:09:83:2b:5a:d4:28:dc:e4:84:fe:30:
                    93:ae:2e:b6:cb:9b:26:0c:ce:4f:02:67:55:10:e9:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:66:A0:D2:92:3F:2E:A6:40:66:5E:69:B8:91:45:32:6B:B7:9F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e85b8c6a-beac-310d-b4a1-a2f74e366fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:25:18:22:6c:17:4b:94:40:25:0d:ab:6d:2f:ea:72:01:ec:
         c0:9c:19:a4:b5:b9:a1:4c:86:dc:f8:3b:f9:53:4a:81:81:7e:
         22:d0:04:f0:22:07:6c:86:2a:4b:04:62:ee:af:f0:a0:68:b7:
         1f:22:fd:11:0b:a3:7a:bb:71:83:2d:18:0d:56:85:79:36:40:
         93:33:89:95:0b:59:fa:fd:c6:cf:f9:51:b3:8b:58:3b:ba:e7:
         4b:4d:39:50:2b:f4:cf:30:78:e2:4e:1c:a2:61:27:a9:d7:8d:
         29:4f:b3:fe:f5:00:5d:af:3e:a9:fd:0e:bb:74:aa:c8:11:8d:
         a8:e6:32:f5:7b:54:67:69:1b:cc:d8:76:86:19:69:a6:19:4e:
         bd:99:70:47:29:5d:87:44:66:61:fb:f1:ce:6b:2e:40:ca:61:
         e0:79:03:fd:0c:b7:64:7e:fb:0c:f9:32:fe:87:62:7b:2c:33:
         8a:3e:c3:6f:36:47:8d:74:3b:76:4f:62:17:95:81:dd:de:49:
         28:e9:7a:88:ce:61:da:04:c9:ea:e4:cb:95:72:e3:c6:fc:63:
         d0:62:4c:b6:05:44:dc:a0:e1:ac:3a:b9:df:bc:4c:58:63:98:
         e6:8e:3f:d3:be:85:ce:9b:5f:f9:3c:b1:fc:0a:de:54:fd:6e:
         d8:b0:1d:5c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2XVV2sVg+AyvbXh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk
OWUxYTcyNDUtYTkyNy00YzhhLTg4NTUtOWIxNmIxZWVhZTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuB6MFFUwepZqIH8C+h4haL01tLqPcsk3P8o
4ox8VpjxTyzThOTvcCfGcA9hLhq47SG2WB6PZuuyxGagQO06d7hvFVSIa8Vx09Jl
zIVo2NNnvO4xZhN8bLlnuBz2i2YitX/EE6qg5ABjAnzZTC6BdE+j4rmJeuFf4Vg5
YbEQ/y2z5wumA0IZT0hSO9B3hEeiamG2XKOUvcDF6+CLqNzhVaXy5vjhOcCSnzot
iMPxgveWrwraL6HcQcY9DfvfqXi4m9Ith4kRoeeX6S35H9AF0mVDhaB9vb0YjGaG
qyQ3VlolGml8CYMrWtQo3OSE/jCTri62y5smDM5PAmdVEOnVzQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDFmoNKSPy6mQGZeabiRRTJrt5/bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTg1YjhjNmEtYmVhYy0z
MTBkLWI0YTEtYTJmNzRlMzY2ZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABolGCJsF0uUQCUNq20v6nIB7MCcGaS1uaFMhtz4O/lTSoGBfiLQ
BPAiB2yGKksEYu6v8KBotx8i/RELo3q7cYMtGA1WhXk2QJMziZULWfr9xs/5UbOL
WDu650tNOVAr9M8weOJOHKJhJ6nXjSlPs/71AF2vPqn9Drt0qsgRjajmMvV7VGdp
G8zYdoYZaaYZTr2ZcEcpXYdEZmH78c5rLkDKYeB5A/0Mt2R++wz5Mv6HYnssM4o+
w282R410O3ZPYheVgd3eSSjpeojOYdoEyerky5Vy48b8Y9BiTLYFRNyg4aw6ud+8
TFhjmOaOP9O+hc6bX/k8sfwK3lT9btiwHVw=
-----END CERTIFICATE-----
Generated at Wed May 13 07:06:38 2026 by rpki-client