Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/457f7cb5-5600-3da5-8820-b7614febc514.roa
File:                     457f7cb5-5600-3da5-8820-b7614febc514.roa (raw, json)
Hash identifier:          LhyPNeimNUTvx6mMQtpCb73z5B2QyrlszHuFk1CbsrQ=
Subject key identifier:   08:DD:B4:6F:11:BF:A7:0A:61:DF:94:B7:26:F9:4E:BF:6B:B5:43:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA187D73900CF915D02F180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/457f7cb5-5600-3da5-8820-b7614febc514.roa
Signing time:             Tue 07 Apr 2026 14:30:09 +0000
ROA not before:           Tue 07 Apr 2026 14:30:09 +0000
ROA not after:            Mon 06 Jul 2026 14:30:09 +0000
asID:                     40717
IP address blocks:        2001:500:13f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:87:d7:39:00:cf:91:5d:02:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:09 2026 GMT
            Not After : Jul  6 14:30:09 2026 GMT
        Subject: CN=ea85b82b-df91-4bb6-b60e-fcec158ebd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:03:2f:af:ab:9b:86:36:69:51:8d:c8:48:
                    5c:9d:9c:a0:7f:62:28:33:a0:64:16:f7:2e:be:e0:
                    1b:18:22:3c:ce:44:02:7b:57:3b:e7:91:5a:45:d8:
                    ca:88:5c:1c:d0:46:55:c8:50:17:54:50:87:d9:d1:
                    e0:a5:ae:1a:d3:f2:a5:a2:f6:02:03:00:60:03:f7:
                    3d:25:b3:69:b4:7b:fc:8d:4e:c1:79:6f:6f:c6:47:
                    e7:c8:ea:cf:f1:e5:a0:11:18:14:ab:5b:03:6e:63:
                    b0:db:3f:c6:21:c8:02:38:80:b4:65:5b:74:1c:12:
                    ea:e5:9b:8d:a9:49:63:5a:9e:f4:53:e5:59:f3:8f:
                    12:76:dc:20:e7:6f:c1:d1:65:59:07:ef:4e:87:62:
                    5a:f1:cf:61:5f:28:48:d2:e9:18:88:17:39:6f:19:
                    41:4a:9d:f5:7a:91:81:4a:e2:4a:57:68:cf:c5:64:
                    e9:98:6e:46:84:70:70:fa:ab:40:13:45:88:70:87:
                    8c:1a:9a:fa:19:46:ff:ef:77:72:49:bf:2d:76:56:
                    ee:30:67:c0:4d:a0:74:d5:a7:20:44:72:28:52:16:
                    ae:be:a0:95:e4:86:03:ff:de:98:34:04:f1:b1:54:
                    7c:76:45:63:d0:55:b0:69:46:13:d7:e3:aa:65:45:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DD:B4:6F:11:BF:A7:0A:61:DF:94:B7:26:F9:4E:BF:6B:B5:43:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/457f7cb5-5600-3da5-8820-b7614febc514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:de:8c:56:9d:0b:8c:0b:5b:6d:7b:dd:13:3f:e0:e6:ee:5c:
         c4:08:bd:c5:2c:58:81:8b:ec:6b:db:33:a4:12:8b:e0:96:dd:
         84:50:17:55:8e:c3:8b:6d:f1:4f:58:85:a6:a1:13:4d:a6:c1:
         df:92:6f:e5:22:ae:39:ad:3e:b2:21:c8:85:73:f3:bb:23:6f:
         95:ca:2d:9a:2e:3b:a4:6a:99:12:23:81:a5:75:9c:0e:28:80:
         70:34:b8:3e:82:c6:f5:cd:da:77:16:ee:c5:3b:96:6f:4f:fc:
         53:e4:eb:5e:4a:57:6c:0a:4a:bf:c6:e3:d1:c6:c0:1a:8d:38:
         e1:20:9e:fb:07:20:d7:8d:c0:a2:34:2e:29:5b:70:b6:68:af:
         63:6f:9c:b3:2b:5d:d5:00:71:3b:d3:ae:8a:02:d8:bd:68:94:
         17:c7:c1:b1:13:1b:3f:7f:a0:9a:5d:e5:c3:1f:21:8c:3c:91:
         b2:e7:bd:bd:6e:9c:49:d2:7a:87:8c:7a:3d:91:5e:6f:7d:6b:
         f2:01:0d:46:e6:d4:f0:44:d8:ec:46:98:72:52:f1:4a:f2:d0:
         88:c9:6e:2d:57:f3:73:96:1e:c4:57:9b:e4:64:25:f5:7d:69:
         4c:22:80:58:83:95:c1:91:c4:d2:4f:9b:07:b6:ea:c4:ef:fb:
         81:ab:f1:78
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toYfXOQDPkV0C8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwNzE0MzAwOVoXDTI2MDcwNjE0MzAwOVowLzEtMCsGA1UEAxMk
ZWE4NWI4MmItZGY5MS00YmI2LWI2MGUtZmNlYzE1OGViZDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkUDL6+rm4Y2aVGNyEhcnZygf2IoM6BkFvcu
vuAbGCI8zkQCe1c755FaRdjKiFwc0EZVyFAXVFCH2dHgpa4a0/KlovYCAwBgA/c9
JbNptHv8jU7BeW9vxkfnyOrP8eWgERgUq1sDbmOw2z/GIcgCOIC0ZVt0HBLq5ZuN
qUljWp70U+VZ848Sdtwg52/B0WVZB+9Oh2Ja8c9hXyhI0ukYiBc5bxlBSp31epGB
SuJKV2jPxWTpmG5GhHBw+qtAE0WIcIeMGpr6GUb/73dySb8tdlbuMGfATaB01acg
RHIoUhauvqCV5IYD/96YNATxsVR8dkVj0FWwaUYT1+OqZUUEgQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAjdtG8Rv6cKYd+Utyb5Tr9rtUNYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDU3ZjdjYjUtNTYwMC0z
ZGE1LTg4MjAtYjc2MTRmZWJjNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALLejFadC4wLW2173RM/4ObuXMQIvcUsWIGL7GvbM6QSi+CW3YRQ
F1WOw4tt8U9YhaahE02mwd+Sb+UirjmtPrIhyIVz87sjb5XKLZouO6RqmRIjgaV1
nA4ogHA0uD6CxvXN2ncW7sU7lm9P/FPk615KV2wKSr/G49HGwBqNOOEgnvsHINeN
wKI0LilbcLZor2NvnLMrXdUAcTvTrooC2L1olBfHwbETGz9/oJpd5cMfIYw8kbLn
vb1unEnSeoeMej2RXm99a/IBDUbm1PBE2OxGmHJS8Ury0IjJbi1X83OWHsRXm+Rk
JfV9aUwigFiDlcGRxNJPmwe26sTv+4Gr8Xg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:13 2026 by rpki-client