Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59a22b46-fde4-3d7f-8cf4-45d16a30a94c.roa
File:                     59a22b46-fde4-3d7f-8cf4-45d16a30a94c.roa (raw, json)
Hash identifier:          omJbc5X+5T6k5NzNdtjRPTAXCYSXZzHEkjJjWrQos38=
Subject key identifier:   DE:E2:91:5F:26:00:0A:C3:20:D1:C4:E3:3D:C8:25:9F:21:96:EF:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DEC7B34BC1FCD2AE886A39280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59a22b46-fde4-3d7f-8cf4-45d16a30a94c.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     396606
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:34:bc:1f:cd:2a:e8:86:a3:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=f9e54ae0-7030-4cc4-81bd-35e7a2914caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:10:6a:86:e8:81:06:58:86:1d:db:e4:10:1c:
                    e9:fd:7f:89:cd:92:c0:22:f1:68:04:2d:37:82:9e:
                    f2:a6:ce:5a:cb:9c:08:8f:16:5e:6b:9c:0f:d3:f9:
                    80:ca:75:b0:43:f4:01:1e:b7:da:8c:38:78:c4:38:
                    2b:9d:e8:0b:cc:42:6b:a6:42:08:2e:4b:3d:71:83:
                    71:17:c9:3e:8f:40:73:bb:cd:3d:33:a5:90:ca:a6:
                    7b:0d:52:b9:01:07:12:ab:5c:e7:82:66:46:a4:5f:
                    5c:c7:57:a4:43:dc:08:79:8f:04:43:e7:9d:6a:80:
                    8e:46:c1:5e:ba:69:60:b1:8a:3e:1b:9d:f4:ed:00:
                    74:b1:72:23:d0:fb:42:f8:1b:0e:6d:b9:36:b1:c5:
                    b4:7b:a7:f6:24:76:27:d4:38:c0:bc:c4:bd:94:85:
                    0c:90:8b:b1:27:9f:e4:73:03:88:29:c3:82:42:12:
                    20:91:a7:50:64:26:05:34:d4:68:6f:39:35:08:a5:
                    f0:23:58:0d:8b:f4:44:6a:2e:d1:bf:85:cb:01:5f:
                    e6:e9:25:a7:41:30:8e:43:7b:90:25:e6:78:43:d6:
                    bc:32:30:e3:fa:90:a8:1e:44:16:f8:20:a2:dc:b7:
                    d9:ce:38:a1:7b:5f:00:d5:35:43:5a:e1:c6:3b:a5:
                    f0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E2:91:5F:26:00:0A:C3:20:D1:C4:E3:3D:C8:25:9F:21:96:EF:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59a22b46-fde4-3d7f-8cf4-45d16a30a94c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:0c:51:aa:d4:d5:00:9f:c1:3c:2a:29:b0:be:45:3c:71:3d:
         ca:fa:03:78:26:10:12:96:16:3e:37:a8:8b:7d:e7:5a:f4:3f:
         29:82:9b:5e:8c:fb:37:22:a0:08:8e:06:32:65:1f:4e:a0:3d:
         a0:1c:2b:97:8e:92:74:30:41:65:2d:f1:ed:39:c7:81:a7:e3:
         f5:35:86:48:a9:5c:23:c3:8f:7d:dd:c4:80:9e:65:b8:34:74:
         b5:f3:df:55:c9:18:76:2f:64:ac:6a:16:a2:0f:04:89:4c:d8:
         14:1e:f5:92:5a:04:a9:10:44:4c:ae:33:1b:51:7a:c3:21:62:
         ee:29:5f:89:34:f0:a2:45:c1:a7:4e:22:31:ce:88:81:7b:8f:
         a9:a7:e7:67:e9:17:3d:b0:cd:2c:8f:53:dd:0c:7c:9d:72:8d:
         27:74:5c:1f:6d:3f:a9:ac:8c:3f:99:b1:15:08:98:b2:dc:ee:
         57:41:84:5f:5a:80:12:cc:1b:48:26:a1:36:f8:29:92:8a:42:
         6b:a0:72:56:4d:09:ba:e0:7b:33:38:85:bb:d8:91:c6:ec:6a:
         ab:e7:e3:6a:54:16:2b:5b:b3:f2:0b:50:9b:d3:f0:b2:17:fd:
         46:08:ea:8c:e2:68:9b:d6:e9:f3:20:9b:a9:ad:80:65:de:ce:
         d2:2d:3e:a8
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE3sezS8H80q6IajkoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk
ZjllNTRhZTAtNzAzMC00Y2M0LTgxYmQtMzVlN2EyOTE0Y2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hBqhuiBBliGHdvkEBzp/X+JzZLAIvFoBC03
gp7yps5ay5wIjxZea5wP0/mAynWwQ/QBHrfajDh4xDgrnegLzEJrpkIILks9cYNx
F8k+j0Bzu809M6WQyqZ7DVK5AQcSq1zngmZGpF9cx1ekQ9wIeY8EQ+edaoCORsFe
umlgsYo+G5307QB0sXIj0PtC+BsObbk2scW0e6f2JHYn1DjAvMS9lIUMkIuxJ5/k
cwOIKcOCQhIgkadQZCYFNNRobzk1CKXwI1gNi/REai7Rv4XLAV/m6SWnQTCOQ3uQ
JeZ4Q9a8MjDj+pCoHkQW+CCi3LfZzjihe18A1TVDWuHGO6XwRQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFN7ikV8mAArDINHE4z3IJZ8hlu8SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTlhMjJiNDYtZmRlNC0z
ZDdmLThjZjQtNDVkMTZhMzBhOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAkDFGq1NUAn8E8KimwvkU8cT3K+gN4JhASlhY+
N6iLfeda9D8pgptejPs3IqAIjgYyZR9OoD2gHCuXjpJ0MEFlLfHtOceBp+P1NYZI
qVwjw4993cSAnmW4NHS1899VyRh2L2SsahaiDwSJTNgUHvWSWgSpEERMrjMbUXrD
IWLuKV+JNPCiRcGnTiIxzoiBe4+pp+dn6Rc9sM0sj1PdDHydco0ndFwfbT+prIw/
mbEVCJiy3O5XQYRfWoASzBtIJqE2+CmSikJroHJWTQm64HszOIW72JHG7Gqr5+Nq
VBYrW7PyC1Cb0/CyF/1GCOqM4mib1unzIJuprYBl3s7SLT6o
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:04:41 2026 by rpki-client