Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c4edb4b-097b-38ab-91f3-d358d83340f2.roa
File:                     3c4edb4b-097b-38ab-91f3-d358d83340f2.roa (raw, json)
Hash identifier:          Rsqn7ttGrBKATP4UuqvR5dKrXE1fwlszNG5hoL0LacA=
Subject key identifier:   D7:17:AC:DD:1A:2B:E9:E4:E6:79:68:B5:E6:36:B3:FF:C7:65:FC:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E18AEDC51843ED4628D561D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c4edb4b-097b-38ab-91f3-d358d83340f2.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     396603
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:dc:51:84:3e:d4:62:8d:56:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=d43e82fa-a97c-46f4-bbe8-dadf3a2353b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f4:be:18:f2:b7:12:46:f0:20:d8:f7:f1:00:
                    a5:35:0f:1b:de:72:4a:c9:67:83:c8:20:e4:b0:31:
                    28:b4:7f:75:50:13:db:85:cd:4d:83:a3:36:cf:ef:
                    48:bd:23:ca:ef:6b:5a:9e:0a:e0:72:ed:50:cb:2d:
                    75:bb:f7:e3:65:2f:47:de:2a:33:76:b5:f9:a2:28:
                    4b:90:bb:b7:63:43:04:b6:33:08:43:8c:33:24:cd:
                    71:6e:d5:01:9f:b1:34:03:82:0a:93:12:de:31:57:
                    d0:06:ba:b5:fd:e9:59:cc:ef:23:20:3f:3f:18:3c:
                    b0:35:68:9b:1e:7b:22:52:a4:ef:a4:96:a2:51:2e:
                    ba:b6:08:9b:a2:5a:18:40:9d:c1:51:bb:03:b8:51:
                    51:4b:77:b2:2e:67:6e:3a:99:db:e5:95:cd:b6:a3:
                    28:e3:69:b2:c7:3b:71:7a:f7:55:56:a5:5e:d4:20:
                    dc:59:f8:2a:06:d6:e8:05:ee:2f:c0:63:53:6a:63:
                    ba:c6:8d:56:56:14:94:3f:2b:be:07:4e:b0:2e:f8:
                    c9:23:2c:b8:b6:f1:b2:f8:d2:82:25:71:f5:ad:5b:
                    a6:cd:a2:c1:f7:9e:c6:a4:14:3b:a1:73:bb:68:88:
                    84:1f:19:b1:e1:b5:54:d0:5d:1c:1d:1e:5b:ff:9a:
                    cf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:17:AC:DD:1A:2B:E9:E4:E6:79:68:B5:E6:36:B3:FF:C7:65:FC:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c4edb4b-097b-38ab-91f3-d358d83340f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:41:48:1a:99:34:57:e9:c5:0a:3c:fc:3f:f0:cb:a5:9f:11:
         ed:67:ed:8e:7d:d6:a2:fe:15:af:fc:a4:85:ad:ac:8b:25:a1:
         09:3d:08:58:45:3a:21:ea:84:a7:e6:8b:bf:f7:c0:51:6e:5e:
         5e:d7:38:fd:e6:74:b4:ee:6a:22:37:9f:9c:09:cf:22:ce:59:
         17:ce:6c:22:b1:1d:cc:25:c9:09:3f:bb:be:33:9d:48:ec:ee:
         f7:07:fc:55:cd:30:16:58:e8:33:ce:eb:cd:42:da:c3:6b:f8:
         86:ad:12:0b:50:80:37:17:8c:e0:17:b9:3a:7d:00:14:12:21:
         22:c1:c7:4f:a0:63:bf:05:21:62:be:fe:db:a8:82:ff:36:d1:
         c3:db:08:a8:c6:f3:e7:75:74:eb:4c:5b:6c:54:3f:d9:22:24:
         0d:17:9d:41:98:b4:85:1c:c0:fb:e0:45:01:f8:06:a6:63:d6:
         c3:49:dc:12:b7:6f:3d:0e:52:97:ab:fe:0f:76:6c:44:7b:dd:
         b2:b5:8a:d4:0b:56:22:65:4a:d2:e8:92:77:6c:63:7f:50:f1:
         11:19:99:bf:f9:ba:fd:ed:0c:d0:3f:63:52:f6:f1:72:b3:f7:
         91:8b:e7:e3:79:48:40:95:22:a5:98:fd:05:2c:77:14:35:c4:
         3a:52:3b:47
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4YrtxRhD7UYo1WHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk
ZDQzZTgyZmEtYTk3Yy00NmY0LWJiZTgtZGFkZjNhMjM1M2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/S+GPK3EkbwINj38QClNQ8b3nJKyWeDyCDk
sDEotH91UBPbhc1Ng6M2z+9IvSPK72tangrgcu1Qyy11u/fjZS9H3iozdrX5oihL
kLu3Y0MEtjMIQ4wzJM1xbtUBn7E0A4IKkxLeMVfQBrq1/elZzO8jID8/GDywNWib
HnsiUqTvpJaiUS66tgiboloYQJ3BUbsDuFFRS3eyLmduOpnb5ZXNtqMo42myxztx
evdVVqVe1CDcWfgqBtboBe4vwGNTamO6xo1WVhSUPyu+B06wLvjJIyy4tvGy+NKC
JXH1rVumzaLB957GpBQ7oXO7aIiEHxmx4bVU0F0cHR5b/5rPpwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNcXrN0aK+nk5nloteY2s//HZfx2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2M0ZWRiNGItMDk3Yi0z
OGFiLTkxZjMtZDM1OGQ4MzM0MGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALpBSBqZNFfpxQo8/D/wy6WfEe1n7Y591qL+Fa/8pIWtrIsloQk9
CFhFOiHqhKfmi7/3wFFuXl7XOP3mdLTuaiI3n5wJzyLOWRfObCKxHcwlyQk/u74z
nUjs7vcH/FXNMBZY6DPO681C2sNr+IatEgtQgDcXjOAXuTp9ABQSISLBx0+gY78F
IWK+/tuogv820cPbCKjG8+d1dOtMW2xUP9kiJA0XnUGYtIUcwPvgRQH4BqZj1sNJ
3BK3bz0OUper/g92bER73bK1itQLViJlStLokndsY39Q8REZmb/5uv3tDNA/Y1L2
8XKz95GL5+N5SECVIqWY/QUsdxQ1xDpSO0c=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:51:47 2026 by rpki-client