Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b0d71e7-239b-3d49-9f2b-425cd8410b02.roa
File:                     2b0d71e7-239b-3d49-9f2b-425cd8410b02.roa (raw, json)
Hash identifier:          XBAa7FBUJgMJzTlA/7XEJ1KsHsqh1YCPj4MS4Oi5tcQ=
Subject key identifier:   E4:12:36:0A:3D:B5:BF:78:9B:2D:03:97:B2:6E:04:78:8B:40:FD:CC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DFA709C104DEEB779D293F880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b0d71e7-239b-3d49-9f2b-425cd8410b02.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     36624
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:9c:10:4d:ee:b7:79:d2:93:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=533c67f6-cf01-47e0-bfb5-5b27501ebd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:09:3b:20:60:35:33:2f:6b:25:59:f2:fd:87:
                    de:03:60:f1:0f:33:7f:07:9a:d2:c1:cc:86:83:28:
                    69:47:95:de:65:cf:8c:5b:59:fc:a8:6e:9d:fb:54:
                    a5:ff:91:0c:5b:b2:3d:97:6b:a2:87:af:7b:e9:79:
                    96:e7:85:4f:19:03:0b:c5:1b:2a:20:98:b6:53:8d:
                    13:7b:80:c9:8a:b5:eb:c7:10:d7:2b:84:18:0a:1c:
                    47:a6:8e:e0:be:2d:f2:09:44:70:1d:6e:2e:db:d8:
                    0b:31:ef:2b:5d:34:17:7e:37:05:89:66:63:51:4f:
                    ea:28:fd:d4:e3:a2:13:c9:94:52:31:ac:ff:85:68:
                    a2:06:a2:0d:cb:ac:e9:33:bd:d5:84:88:b4:ec:84:
                    81:9d:62:60:ec:e7:6b:8f:5e:31:dc:03:b8:1b:95:
                    be:fc:76:8f:13:fe:9b:5b:f6:74:18:ee:05:7e:4d:
                    8f:e4:8d:6f:42:c2:80:45:ad:23:c2:fa:08:2a:4a:
                    2c:9f:7c:f5:49:3d:5b:cf:5f:d8:4f:fd:c2:b2:56:
                    9b:01:33:f0:2c:97:9e:3c:71:d1:b8:41:11:da:7e:
                    66:c9:00:98:bb:c8:7d:af:0f:3e:d1:89:7e:fe:cf:
                    fd:12:fb:72:cd:ec:54:a9:dc:b2:a2:72:1d:30:1f:
                    5c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:12:36:0A:3D:B5:BF:78:9B:2D:03:97:B2:6E:04:78:8B:40:FD:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b0d71e7-239b-3d49-9f2b-425cd8410b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ee:d7:e7:aa:69:7e:43:f5:09:ae:ab:e1:7b:8d:0b:84:d6:
         5f:7f:65:31:a4:ec:38:7e:5b:eb:ef:a0:58:bd:87:28:e6:cf:
         cb:30:fa:47:af:78:31:8f:e3:03:31:00:31:c6:78:93:ab:79:
         ff:52:bf:66:2f:fd:4e:bc:61:0a:6d:98:c0:27:2a:88:d2:be:
         b2:80:09:08:e6:04:2a:7d:17:e4:29:56:70:a9:86:23:17:0e:
         c6:e9:72:c2:80:2b:3d:99:97:99:e4:73:8f:87:80:c3:4c:bb:
         3e:ed:92:f4:51:dd:9e:2e:d1:1a:99:8e:bd:ed:16:4d:72:ab:
         e8:65:c8:68:c5:71:d8:7c:35:cf:b1:64:61:34:5e:fa:90:2f:
         91:93:94:3e:6b:9f:4b:66:d1:bf:5c:aa:22:fd:cd:9b:d0:2b:
         7d:1c:2b:dc:00:28:38:2f:b9:1b:85:3a:3e:36:7e:c4:dc:aa:
         e9:6d:b8:68:7b:d1:ad:45:a7:04:1a:9b:71:81:d7:34:7d:6b:
         83:8c:c9:bf:d2:9a:a0:cc:48:c7:bc:ee:44:a1:26:80:e8:99:
         1c:ed:c3:80:44:8b:e2:d9:6d:e8:d9:c1:df:01:23:62:1b:7d:
         f5:d0:54:d8:10:83:2c:3c:da:e1:fd:5e:30:ce:ef:a7:a8:56:
         9f:d6:74:d1
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE36cJwQTe63edKT+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk
NTMzYzY3ZjYtY2YwMS00N2UwLWJmYjUtNWIyNzUwMWViZDJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwk7IGA1My9rJVny/YfeA2DxDzN/B5rSwcyG
gyhpR5XeZc+MW1n8qG6d+1Sl/5EMW7I9l2uih6976XmW54VPGQMLxRsqIJi2U40T
e4DJirXrxxDXK4QYChxHpo7gvi3yCURwHW4u29gLMe8rXTQXfjcFiWZjUU/qKP3U
46ITyZRSMaz/hWiiBqINy6zpM73VhIi07ISBnWJg7Odrj14x3AO4G5W+/HaPE/6b
W/Z0GO4Ffk2P5I1vQsKARa0jwvoIKkosn3z1ST1bz1/YT/3CslabATPwLJeePHHR
uEER2n5myQCYu8h9rw8+0Yl+/s/9EvtyzexUqdyyonIdMB9cuwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOQSNgo9tb94my0Dl7JuBHiLQP3MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmIwZDcxZTctMjM5Yi0z
ZDQ5LTlmMmItNDI1Y2Q4NDEwYjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAP7tfnqml+Q/UJrqvhe40LhNZff2UxpOw4flvr
76BYvYco5s/LMPpHr3gxj+MDMQAxxniTq3n/Ur9mL/1OvGEKbZjAJyqI0r6ygAkI
5gQqfRfkKVZwqYYjFw7G6XLCgCs9mZeZ5HOPh4DDTLs+7ZL0Ud2eLtEamY697RZN
cqvoZchoxXHYfDXPsWRhNF76kC+Rk5Q+a59LZtG/XKoi/c2b0Ct9HCvcACg4L7kb
hTo+Nn7E3Krpbbhoe9GtRacEGptxgdc0fWuDjMm/0pqgzEjHvO5EoSaA6Jkc7cOA
RIvi2W3o2cHfASNiG3310FTYEIMsPNrh/V4wzu+nqFaf1nTR
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:52:35 2026 by rpki-client