Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f33f70a-fd93-38a4-a886-6f957b5d8274.roa
File:                     3f33f70a-fd93-38a4-a886-6f957b5d8274.roa (raw, json)
Hash identifier:          DpFBG4BqmsBTrbNyotI886txZpbgVik1ag2IGdHw1nU=
Subject key identifier:   88:23:02:4A:85:D0:81:A9:29:1C:61:9C:28:3B:0F:7A:CB:F6:04:CC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D732BDCF3327690872DD41F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f33f70a-fd93-38a4-a886-6f957b5d8274.roa
Signing time:             Thu 09 Apr 2026 14:07:55 +0000
ROA not before:           Thu 09 Apr 2026 14:07:55 +0000
ROA not after:            Wed 08 Jul 2026 14:07:55 +0000
asID:                     396549
IP address blocks:        2001:500:133::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:2b:dc:f3:32:76:90:87:2d:d4:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  9 14:07:55 2026 GMT
            Not After : Jul  8 14:07:55 2026 GMT
        Subject: CN=9b0c3bbc-04d3-42cb-8fe0-b464092cb663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:0f:7b:af:09:fd:ce:3e:1f:b4:df:9b:5e:
                    45:16:1a:d1:17:32:23:f0:42:03:8d:bc:fc:72:50:
                    d1:1f:b0:ad:67:94:d7:70:1a:e1:30:d6:12:b3:e2:
                    6e:99:09:24:b4:46:11:a6:bb:fb:b8:5a:29:de:09:
                    fd:7f:59:05:d3:1e:28:8b:b2:a4:8a:8c:34:68:b3:
                    dd:c8:22:38:6e:5e:07:1b:0c:e1:8b:a4:25:6d:8e:
                    dc:f7:c2:d4:75:25:42:86:00:10:f7:74:59:ee:01:
                    d8:6e:fa:ff:44:c2:ab:96:03:43:86:f6:dd:e7:19:
                    60:64:0d:ce:89:25:14:12:e8:c3:3f:05:b3:63:ad:
                    a5:57:7f:f7:ac:a9:be:e3:7f:f0:bf:a8:77:49:47:
                    0f:bc:70:ce:69:f6:a2:97:83:90:42:23:82:1e:3f:
                    71:05:4b:1d:77:4b:88:b8:ce:f0:95:a6:c2:6a:44:
                    54:72:20:26:43:42:10:ce:84:83:a2:cc:ea:f4:6c:
                    5e:7a:be:31:34:88:c8:61:8b:0b:98:b8:39:29:eb:
                    a7:89:f0:7e:ae:1f:8d:3f:4f:2e:de:10:3f:6b:0e:
                    0c:76:26:3a:1e:01:71:b3:09:84:c9:e1:1b:dc:28:
                    ed:3a:19:e1:4f:9a:ee:f5:fb:25:1a:eb:d8:a1:a1:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:23:02:4A:85:D0:81:A9:29:1C:61:9C:28:3B:0F:7A:CB:F6:04:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f33f70a-fd93-38a4-a886-6f957b5d8274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:5d:4e:1e:8f:ff:c8:be:fb:ff:40:54:3d:d6:aa:69:c0:cd:
         4b:0d:9c:db:05:60:ea:bc:84:ab:1f:4b:78:8f:2e:b9:37:4e:
         d9:8f:02:83:2a:9f:24:97:4d:c6:9d:c6:74:10:17:e2:15:52:
         35:01:8a:10:ee:0e:a7:94:fe:b5:ca:cd:51:c1:d9:29:1a:05:
         80:01:a4:3c:b2:d4:7f:eb:a3:d5:04:c7:3f:49:10:38:8a:36:
         49:0f:f3:82:b6:ef:1c:d0:94:01:14:1f:4d:3d:63:63:90:1f:
         f6:c7:08:4c:eb:1e:53:cf:6b:e7:03:98:46:15:1b:b9:82:0a:
         8f:07:10:8c:d9:be:03:eb:35:68:f3:68:93:99:04:05:0c:c9:
         e3:48:b9:6d:ea:75:3e:25:7d:5f:4a:4a:38:40:dd:45:3d:6e:
         6c:f9:d4:e2:62:61:af:ca:04:94:d3:4d:b3:e0:92:f7:fd:6c:
         37:03:3c:2f:a0:11:17:c4:c5:0a:40:87:83:65:27:76:b7:3a:
         7b:97:50:71:39:c4:87:65:5c:1b:90:36:57:bd:d2:a0:e9:a6:
         b7:82:f4:5f:c5:c4:8e:79:8c:0b:dc:55:41:15:03:d2:7e:70:
         91:18:1a:e8:0a:a2:20:d7:20:ab:58:7c:49:f4:3a:28:3d:4b:
         5d:16:9a:11
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zK9zzMnaQhy3UH0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwOTE0MDc1NVoXDTI2MDcwODE0MDc1NVowLzEtMCsGA1UEAxMk
OWIwYzNiYmMtMDRkMy00MmNiLThmZTAtYjQ2NDA5MmNiNjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvgPe68J/c4+H7Tfm15FFhrRFzIj8EIDjbz8
clDRH7CtZ5TXcBrhMNYSs+JumQkktEYRprv7uFop3gn9f1kF0x4oi7Kkiow0aLPd
yCI4bl4HGwzhi6QlbY7c98LUdSVChgAQ93RZ7gHYbvr/RMKrlgNDhvbd5xlgZA3O
iSUUEujDPwWzY62lV3/3rKm+43/wv6h3SUcPvHDOafail4OQQiOCHj9xBUsdd0uI
uM7wlabCakRUciAmQ0IQzoSDoszq9Gxeer4xNIjIYYsLmLg5KeunifB+rh+NP08u
3hA/aw4MdiY6HgFxswmEyeEb3CjtOhnhT5ru9fslGuvYoaF8qQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIgjAkqF0IGpKRxhnCg7D3rL9gTMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2YzM2Y3MGEtZmQ5My0z
OGE0LWE4ODYtNmY5NTdiNWQ4Mjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEJdTh6P/8i++/9AVD3WqmnAzUsNnNsFYOq8hKsfS3iPLrk3TtmP
AoMqnySXTcadxnQQF+IVUjUBihDuDqeU/rXKzVHB2SkaBYABpDyy1H/ro9UExz9J
EDiKNkkP84K27xzQlAEUH009Y2OQH/bHCEzrHlPPa+cDmEYVG7mCCo8HEIzZvgPr
NWjzaJOZBAUMyeNIuW3qdT4lfV9KSjhA3UU9bmz51OJiYa/KBJTTTbPgkvf9bDcD
PC+gERfExQpAh4NlJ3a3OnuXUHE5xIdlXBuQNle90qDppreC9F/FxI55jAvcVUEV
A9J+cJEYGugKoiDXIKtYfEn0Oig9S10WmhE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:59 2026 by rpki-client