Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f71d5499-e0da-372f-ad28-af4b7d614e75.roa
File:                     f71d5499-e0da-372f-ad28-af4b7d614e75.roa (raw, json)
Hash identifier:          rr4DML4CAIi6h+APyMkfA4kJk+B3dapwavwnZVXrO/Y=
Subject key identifier:   01:BA:28:0E:14:DE:B8:5F:84:C2:AF:03:09:FE:0E:9D:CD:9B:8A:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E885A5AE29E7D276297662B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f71d5499-e0da-372f-ad28-af4b7d614e75.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396573
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:5a:e2:9e:7d:27:62:97:66:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=d997125a-42cc-42cd-ace4-380b62f4eede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4a:d8:e6:a7:29:dd:b6:cd:35:f1:10:37:6d:
                    ea:10:65:5d:e2:bc:e4:da:a8:ef:3c:a6:7b:a8:3c:
                    b9:2b:d5:2b:b4:63:92:f4:2d:26:71:f8:f2:a0:a6:
                    c6:c3:23:18:92:49:12:d7:63:b7:3a:a3:68:d6:b2:
                    bc:fa:4c:c5:fb:49:69:97:be:9e:fd:69:51:26:ec:
                    57:62:d2:d2:53:4c:1d:36:4a:c7:88:ac:1b:aa:3b:
                    fc:a7:bb:9b:f6:dc:84:90:f9:ab:f2:5c:b7:b9:32:
                    97:ce:3a:4f:21:5c:5d:b9:ef:bc:de:02:02:19:50:
                    e6:92:b1:59:67:e7:63:1f:7d:c1:87:e5:a5:af:59:
                    3c:b9:1b:1c:3c:11:fd:37:22:96:08:fe:7d:3d:a2:
                    fd:3e:2e:1d:9a:6b:de:15:99:77:e6:b3:15:23:d2:
                    44:39:47:97:50:d2:7c:b7:a5:c7:60:ee:97:a6:40:
                    9f:5b:79:85:42:bf:c0:09:cc:61:d9:5f:35:62:b7:
                    23:e9:a4:11:be:fd:f2:db:5b:a4:2d:d9:aa:2b:fb:
                    0f:ed:e4:ae:e0:e7:29:4c:0a:dc:ad:21:70:df:51:
                    ea:6c:c4:f3:7f:b0:80:39:93:b6:31:ab:84:7b:59:
                    50:14:5f:d9:42:44:81:9b:5d:9c:a5:a7:7c:89:24:
                    a4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BA:28:0E:14:DE:B8:5F:84:C2:AF:03:09:FE:0E:9D:CD:9B:8A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f71d5499-e0da-372f-ad28-af4b7d614e75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c5:95:7b:e7:2e:9d:bd:34:88:f0:e3:09:87:23:87:a7:b5:
         1c:ba:1b:bd:e1:60:b0:55:ce:9b:98:11:04:a3:fc:0a:dc:dc:
         cf:55:06:9a:97:d1:93:f1:c7:be:19:f6:70:9e:e8:02:7f:ca:
         19:ac:11:c9:51:04:5e:a1:a2:4d:50:5b:8c:1b:cd:9f:4c:91:
         bb:27:90:55:f7:24:58:9e:e8:72:ae:26:b9:01:47:9b:e8:16:
         bb:1d:19:dd:d1:ea:84:09:d4:cc:6f:61:a4:9b:46:d9:b1:58:
         cf:ea:4e:2d:3c:6a:b3:9d:d8:ed:3e:f6:e9:b4:aa:60:b0:9f:
         53:2e:a3:25:ac:2b:1d:fa:88:73:f5:be:f5:32:d0:a0:ef:3e:
         08:85:f3:c0:37:18:10:50:76:23:6a:c5:bb:2c:01:85:fd:65:
         ec:2f:d1:a5:57:2e:1c:7c:ef:f3:2c:0d:bf:1c:ad:f7:65:54:
         84:de:e7:b3:a1:b3:e6:1d:62:3b:26:bc:f0:29:37:73:a1:38:
         1e:c4:5e:03:76:de:a1:ce:ea:a7:07:cf:cd:2e:36:f0:31:75:
         7e:a5:e0:f9:77:e2:ec:69:d9:d7:27:ed:f1:66:52:40:13:ca:
         2d:05:00:4e:6a:cd:c9:f5:a6:1f:af:13:04:db:99:76:7a:df:
         d7:58:fa:3b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6IWlrinn0nYpdmKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
ZDk5NzEyNWEtNDJjYy00MmNkLWFjZTQtMzgwYjYyZjRlZWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmErY5qcp3bbNNfEQN23qEGVd4rzk2qjvPKZ7
qDy5K9UrtGOS9C0mcfjyoKbGwyMYkkkS12O3OqNo1rK8+kzF+0lpl76e/WlRJuxX
YtLSU0wdNkrHiKwbqjv8p7ub9tyEkPmr8ly3uTKXzjpPIVxdue+83gICGVDmkrFZ
Z+djH33Bh+Wlr1k8uRscPBH9NyKWCP59PaL9Pi4dmmveFZl35rMVI9JEOUeXUNJ8
t6XHYO6XpkCfW3mFQr/ACcxh2V81Yrcj6aQRvv3y21ukLdmqK/sP7eSu4OcpTArc
rSFw31HqbMTzf7CAOZO2MauEe1lQFF/ZQkSBm12cpad8iSSkiwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAG6KA4U3rhfhMKvAwn+Dp3Nm4riMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjcxZDU0OTktZTBkYS0z
NzJmLWFkMjgtYWY0YjdkNjE0ZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+6j
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABXFlXvnLp29NIjw4wmHI4entRy6G73hYLBVzpuYEQSj/Arc3M9V
BpqX0ZPxx74Z9nCe6AJ/yhmsEclRBF6hok1QW4wbzZ9MkbsnkFX3JFie6HKuJrkB
R5voFrsdGd3R6oQJ1MxvYaSbRtmxWM/qTi08arOd2O0+9um0qmCwn1MuoyWsKx36
iHP1vvUy0KDvPgiF88A3GBBQdiNqxbssAYX9Zewv0aVXLhx87/MsDb8crfdlVITe
57Ohs+YdYjsmvPApN3OhOB7EXgN23qHO6qcHz80uNvAxdX6l4Pl34uxp2dcn7fFm
UkATyi0FAE5qzcn1ph+vEwTbmXZ639dY+js=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:48:23 2026 by rpki-client