Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57b594da-b798-3b5d-92de-99adf24dbfd1.roa
File:                     57b594da-b798-3b5d-92de-99adf24dbfd1.roa (raw, json)
Hash identifier:          7CQ3EcEYfYI1oHL2yt/2hYLeRmJ0VfZpWLE3TMfQCqA=
Subject key identifier:   13:23:3C:87:B5:CC:FA:E8:34:63:8E:1B:BA:CD:5A:3E:2D:3F:1D:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD99CB95D7B52A842C559BE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57b594da-b798-3b5d-92de-99adf24dbfd1.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     20362
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:b9:5d:7b:52:a8:42:c5:59:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=0c3e5eb8-45a4-4a75-a99c-3d14f3be8a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5e:7a:a2:8d:77:93:0d:32:e2:7b:03:44:f1:
                    be:b1:a8:a4:02:3f:21:3e:53:c5:a1:0e:24:ee:d5:
                    49:b8:8c:0f:5e:82:4f:7d:93:c0:20:5f:da:f8:7a:
                    49:f5:90:40:38:b6:19:c7:a1:d6:9e:61:54:2f:ec:
                    29:60:1b:32:cc:5c:c9:15:b6:07:b1:6a:20:63:e2:
                    69:59:54:33:2e:4b:d7:0e:52:8d:ff:1f:c0:b5:10:
                    6a:89:98:fa:56:44:67:01:36:9c:4a:23:3c:ae:e5:
                    45:d0:08:2f:d0:c3:b2:3b:28:8d:e9:c1:db:10:bf:
                    9f:44:90:2b:06:bd:b2:8f:31:0a:94:72:32:4e:ef:
                    7f:51:62:54:92:57:46:e7:c6:bb:f2:37:da:2e:06:
                    29:06:bd:7a:36:f1:67:fe:c1:fa:cf:f5:15:81:76:
                    32:a5:ad:d8:2b:41:79:87:7f:31:5d:73:87:95:9b:
                    d8:a6:75:17:22:95:5f:49:ec:59:9a:cd:31:31:5a:
                    c8:74:39:d0:6f:85:1a:27:bb:da:d7:99:c3:f9:be:
                    df:75:71:03:e1:f6:38:9f:10:b4:83:1c:7d:d3:74:
                    99:e7:bd:03:38:c8:16:a6:33:00:21:f4:91:a1:13:
                    18:53:1b:2d:63:43:e3:ed:1d:d8:42:e9:ed:eb:f7:
                    ba:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:23:3C:87:B5:CC:FA:E8:34:63:8E:1B:BA:CD:5A:3E:2D:3F:1D:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57b594da-b798-3b5d-92de-99adf24dbfd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:0a:a4:ec:d3:b3:b5:db:e9:fc:e5:b0:1c:2b:6b:95:a7:1b:
         46:1d:c3:e3:9a:c8:ff:ed:95:12:65:aa:dc:c2:4b:2d:2e:8f:
         3e:eb:97:2b:22:8e:a2:04:19:0e:84:c9:14:c1:be:45:fb:0b:
         10:b3:2d:91:75:31:6d:dd:71:93:4f:5e:f5:79:08:16:6f:20:
         f9:da:7a:1c:69:64:4b:97:13:a4:fc:8c:d6:b6:b2:5f:4b:c9:
         f7:a0:10:de:13:15:05:8a:fa:79:63:43:10:02:36:ec:ee:03:
         3b:29:12:16:4e:22:3b:eb:b0:f1:fc:32:63:76:4b:7e:c6:a9:
         4d:c5:5b:3c:7b:da:ad:a5:24:fc:f4:f5:b1:5d:6d:90:98:a0:
         dc:b8:f7:94:ee:5e:a3:ce:f5:44:a6:29:21:39:b3:bc:3f:09:
         e9:9f:19:1e:24:89:05:ec:92:78:eb:b8:83:c2:fe:9d:69:53:
         02:88:c7:fb:fb:f1:89:b7:0d:07:52:65:57:e2:00:35:39:5d:
         a0:d9:c3:02:bf:47:0c:24:10:57:3a:06:b9:0a:7f:54:cc:e8:
         61:1f:3f:eb:77:7b:4c:22:36:df:2d:76:72:fc:07:57:3f:c0:
         a1:84:eb:e5:21:e9:56:45:8f:10:31:c9:c5:d9:62:4e:4b:3d:
         72:bf:43:80
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzZnLlde1KoQsVZvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk
MGMzZTVlYjgtNDVhNC00YTc1LWE5OWMtM2QxNGYzYmU4YTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl56oo13kw0y4nsDRPG+saikAj8hPlPFoQ4k
7tVJuIwPXoJPfZPAIF/a+HpJ9ZBAOLYZx6HWnmFUL+wpYBsyzFzJFbYHsWogY+Jp
WVQzLkvXDlKN/x/AtRBqiZj6VkRnATacSiM8ruVF0Agv0MOyOyiN6cHbEL+fRJAr
Br2yjzEKlHIyTu9/UWJUkldG58a78jfaLgYpBr16NvFn/sH6z/UVgXYypa3YK0F5
h38xXXOHlZvYpnUXIpVfSexZms0xMVrIdDnQb4UaJ7va15nD+b7fdXED4fY4nxC0
gxx903SZ570DOMgWpjMAIfSRoRMYUxstY0Pj7R3YQunt6/e6/QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBMjPIe1zProNGOOG7rNWj4tPx24MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTdiNTk0ZGEtYjc5OC0z
YjVkLTkyZGUtOTlhZGYyNGRiZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKMKpOzTs7Xb6fzlsBwra5WnG0Ydw+OayP/tlRJlqtzCSy0ujz7r
lysijqIEGQ6EyRTBvkX7CxCzLZF1MW3dcZNPXvV5CBZvIPnaehxpZEuXE6T8jNa2
sl9LyfegEN4TFQWK+nljQxACNuzuAzspEhZOIjvrsPH8MmN2S37GqU3FWzx72q2l
JPz09bFdbZCYoNy495TuXqPO9USmKSE5s7w/CemfGR4kiQXsknjruIPC/p1pUwKI
x/v78Ym3DQdSZVfiADU5XaDZwwK/RwwkEFc6BrkKf1TM6GEfP+t3e0wiNt8tdnL8
B1c/wKGE6+Uh6VZFjxAxycXZYk5LPXK/Q4A=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:36 2026 by rpki-client