Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b8aba7c-1fa6-3402-92a4-cf55734edf4d.roa
File:                     1b8aba7c-1fa6-3402-92a4-cf55734edf4d.roa (raw, json)
Hash identifier:          ddpppQqNCkxkOPKi1JSoo7J9WX0g38EfrqpBBS4TDrg=
Subject key identifier:   0C:D3:47:E0:FA:A9:3C:67:73:EF:32:E2:22:1B:12:A2:1A:63:9E:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E09F253E7FC66DAF3EB43C500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b8aba7c-1fa6-3402-92a4-cf55734edf4d.roa
Signing time:             Tue 02 Jun 2026 14:19:03 +0000
ROA not before:           Tue 02 Jun 2026 14:19:03 +0000
ROA not after:            Mon 31 Aug 2026 14:19:03 +0000
asID:                     20172
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:f2:53:e7:fc:66:da:f3:eb:43:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 14:19:03 2026 GMT
            Not After : Aug 31 14:19:03 2026 GMT
        Subject: CN=bb4ea090-3358-4e69-a03f-a49a8d73ee4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:6c:3c:ae:3a:a6:77:b9:2e:d8:eb:1b:db:
                    2c:9f:dd:f8:c2:55:8a:4b:b9:de:1c:2f:63:38:63:
                    59:b8:5f:89:6d:be:4d:92:14:66:46:b7:07:6e:fc:
                    fb:26:60:2b:e3:37:8b:fa:e6:cf:45:3d:c7:80:9d:
                    93:b0:0f:67:ff:0f:a4:8c:fc:b5:20:c3:5b:6b:ef:
                    2c:3d:ca:cd:4e:4b:45:44:44:8b:6f:bd:e2:16:8f:
                    4d:64:41:05:d2:d9:f3:c3:8b:6b:a6:cf:99:df:f9:
                    fb:e4:dd:65:e6:45:ef:37:6d:49:5b:59:61:d5:ae:
                    02:61:2e:36:e4:15:5e:9b:e7:cf:7e:fd:d3:96:aa:
                    7f:57:41:de:4f:53:a0:67:87:e4:f4:35:72:56:89:
                    9c:23:98:0d:0d:60:92:2f:9a:30:83:8b:db:27:f4:
                    a8:48:0d:33:35:b2:d0:68:f8:61:c2:1d:7b:49:a3:
                    5a:e7:22:ec:7d:7e:aa:bb:21:73:12:85:02:d9:6d:
                    76:49:45:6f:2b:b9:a4:1f:f0:3e:f1:98:82:b2:c4:
                    20:2e:df:77:12:43:86:98:fd:87:82:7c:85:5e:4b:
                    b9:e5:37:c7:0c:c2:e3:d8:10:27:a0:c2:89:59:82:
                    80:c0:db:1a:ac:74:6f:1a:3a:d2:41:1e:b5:15:9c:
                    9e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D3:47:E0:FA:A9:3C:67:73:EF:32:E2:22:1B:12:A2:1A:63:9E:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b8aba7c-1fa6-3402-92a4-cf55734edf4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:68:3e:f5:09:2d:79:bc:64:68:19:57:dc:88:7a:7f:e8:06:
         df:bd:45:6e:85:1b:7b:13:38:1a:77:1e:11:96:ed:cc:44:23:
         a8:82:38:55:fe:42:d1:1b:bc:93:a1:81:04:25:90:bb:0d:1d:
         30:cb:28:f6:01:24:5c:8d:4e:bc:27:5e:08:ac:dd:c6:e5:5e:
         b5:77:2b:8e:1d:0e:78:61:25:7b:08:4b:17:74:eb:0c:cc:e5:
         11:09:f6:b0:63:ed:4b:df:19:78:45:e5:49:a6:f0:cb:f9:ab:
         8c:f6:dc:92:07:77:87:63:11:2a:ab:15:5f:77:03:ad:c0:80:
         a6:08:85:c1:a9:55:68:9d:f2:03:bb:16:a2:d2:77:00:eb:fc:
         a7:c0:cb:22:b5:5e:d4:4f:fa:7a:d8:64:58:f5:7a:cf:bb:7f:
         e3:43:ef:7b:88:b1:60:6a:dc:c8:f5:af:c6:a6:6b:09:f9:42:
         a7:7d:ef:74:03:94:f0:fc:36:4e:c8:a8:82:af:76:b3:55:59:
         01:61:79:2e:6b:97:ab:1f:33:2c:f3:cc:e5:b7:fa:af:72:84:
         6c:0f:0a:e2:23:c4:50:65:c2:ad:58:1a:ce:1c:08:7a:92:65:
         22:a4:a9:fe:db:21:63:44:b5:8a:3d:60:0b:20:d2:2c:dc:43:
         80:42:29:22
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4J8lPn/Gba8+tDxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYwMjE0MTkwM1oXDTI2MDgzMTE0MTkwM1owLzEtMCsGA1UEAxMk
YmI0ZWEwOTAtMzM1OC00ZTY5LWEwM2YtYTQ5YThkNzNlZTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4psPK46pne5LtjrG9ssn934wlWKS7neHC9j
OGNZuF+Jbb5NkhRmRrcHbvz7JmAr4zeL+ubPRT3HgJ2TsA9n/w+kjPy1IMNba+8s
PcrNTktFRESLb73iFo9NZEEF0tnzw4trps+Z3/n75N1l5kXvN21JW1lh1a4CYS42
5BVem+fPfv3Tlqp/V0HeT1OgZ4fk9DVyVomcI5gNDWCSL5owg4vbJ/SoSA0zNbLQ
aPhhwh17SaNa5yLsfX6quyFzEoUC2W12SUVvK7mkH/A+8ZiCssQgLt93EkOGmP2H
gnyFXku55TfHDMLj2BAnoMKJWYKAwNsarHRvGjrSQR61FZyeQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAzTR+D6qTxnc+8y4iIbEqIaY54xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWI4YWJhN2MtMWZhNi0z
NDAyLTkyYTQtY2Y1NTczNGVkZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACdoPvUJLXm8ZGgZV9yIen/oBt+9RW6FG3sTOBp3HhGW7cxEI6iC
OFX+QtEbvJOhgQQlkLsNHTDLKPYBJFyNTrwnXgis3cblXrV3K44dDnhhJXsISxd0
6wzM5REJ9rBj7UvfGXhF5Umm8Mv5q4z23JIHd4djESqrFV93A63AgKYIhcGpVWid
8gO7FqLSdwDr/KfAyyK1XtRP+nrYZFj1es+7f+ND73uIsWBq3Mj1r8amawn5Qqd9
73QDlPD8Nk7IqIKvdrNVWQFheS5rl6sfMyzzzOW3+q9yhGwPCuIjxFBlwq1YGs4c
CHqSZSKkqf7bIWNEtYo9YAsg0izcQ4BCKSI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:53 2026 by rpki-client