Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ac07ec8-9677-3fa4-b85d-3eb528e3fa04.roa
File:                     5ac07ec8-9677-3fa4-b85d-3eb528e3fa04.roa (raw, json)
Hash identifier:          7FoawMEElyffiXQgv0rKW3PhEhpb3h0n92ru/iJxHcE=
Subject key identifier:   E1:08:7C:9D:30:3F:7C:8A:92:E2:E4:7A:46:76:0F:13:2B:DB:75:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0006329959371CC4AE7A69B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ac07ec8-9677-3fa4-b85d-3eb528e3fa04.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     10515
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:32:99:59:37:1c:c4:ae:7a:69:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=8ed1fd54-2dad-4e9c-a9cd-d579fd7de1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7b:6b:0b:ce:52:5e:c0:8b:47:5c:c9:24:70:
                    8b:9e:66:d8:d6:4c:4b:c8:d7:db:e1:e3:98:be:31:
                    96:71:d8:92:ee:92:1b:06:9c:bc:ee:fb:f2:b5:87:
                    eb:d8:61:4f:06:49:9d:6c:a4:08:31:67:13:a9:6f:
                    db:a9:3d:94:61:6b:7e:2c:de:3a:30:a7:0e:7a:f5:
                    c6:e3:ab:82:da:a1:9e:06:8f:3c:26:19:ba:19:7d:
                    56:71:21:3c:b6:ec:6f:47:f0:54:42:3c:5a:0f:85:
                    78:cd:07:c6:d1:cb:52:e1:6c:c7:4a:ca:9e:99:f4:
                    81:e6:9c:de:a5:fa:ac:08:f9:91:76:24:91:c2:c9:
                    e5:59:f7:79:85:70:5b:fb:99:8d:c6:12:10:83:b0:
                    7c:cf:4a:2c:4b:33:57:cc:bf:a1:d9:59:30:8b:34:
                    b0:f3:13:72:47:fe:02:ac:17:37:51:39:e9:8d:96:
                    65:9b:f3:e5:dd:79:8f:c8:e8:f5:f9:5c:fd:16:e9:
                    d9:09:d1:d8:24:51:84:c0:c2:07:69:1c:16:4d:84:
                    50:96:3f:ae:ae:23:97:ef:a4:29:6d:01:c9:5f:bd:
                    2c:b8:7a:88:a4:15:5a:2c:e2:18:cb:ac:6e:3f:6c:
                    57:c8:f4:58:4f:c0:25:8b:ef:91:0e:a2:21:f7:bb:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:08:7C:9D:30:3F:7C:8A:92:E2:E4:7A:46:76:0F:13:2B:DB:75:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ac07ec8-9677-3fa4-b85d-3eb528e3fa04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e2:61:17:ab:22:de:2b:f4:75:59:3b:b2:77:76:f7:35:35:
         b4:d8:5b:12:cb:c8:4b:82:d3:75:9e:77:46:c3:7a:f5:9f:69:
         c0:29:cc:61:55:22:d0:55:89:02:5c:8c:dc:c9:20:4f:d5:84:
         1d:09:fa:4a:37:1b:2e:a5:ff:c5:d8:cd:ad:83:1c:9f:4f:0c:
         c8:65:54:78:e3:43:9c:01:f6:c1:a5:7d:87:90:0c:31:28:6a:
         32:cc:59:f7:41:aa:35:92:88:8e:3d:2c:e5:26:f6:24:b0:7f:
         e0:ce:21:1a:4a:a0:b7:4b:1b:35:7a:af:a4:5a:7d:7c:5d:8d:
         52:2a:bd:5e:57:eb:48:ac:25:f5:91:b4:e4:c4:1d:cb:01:48:
         2a:2a:fc:99:48:d8:e1:eb:72:36:99:c2:e8:81:5a:64:f8:d2:
         12:cc:07:ee:d3:7e:5f:f1:16:dd:a6:e9:88:23:75:4a:eb:b0:
         c1:53:cc:a5:6e:f2:9b:d8:ae:89:18:7c:dd:62:3e:85:86:4c:
         3f:24:95:0f:33:8a:b1:04:75:30:bb:00:29:90:52:48:4a:db:
         ec:d6:05:a0:77:3b:a5:63:7b:1f:01:c2:73:b2:cb:ba:a4:3d:
         82:43:b8:16:6b:b5:e7:0a:a1:74:e5:6d:cc:19:e0:14:0c:e3:
         23:8a:14:cf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ABjKZWTccxK56abAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
OGVkMWZkNTQtMmRhZC00ZTljLWE5Y2QtZDU3OWZkN2RlMWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXtrC85SXsCLR1zJJHCLnmbY1kxLyNfb4eOY
vjGWcdiS7pIbBpy87vvytYfr2GFPBkmdbKQIMWcTqW/bqT2UYWt+LN46MKcOevXG
46uC2qGeBo88Jhm6GX1WcSE8tuxvR/BUQjxaD4V4zQfG0ctS4WzHSsqemfSB5pze
pfqsCPmRdiSRwsnlWfd5hXBb+5mNxhIQg7B8z0osSzNXzL+h2VkwizSw8xNyR/4C
rBc3UTnpjZZlm/Pl3XmPyOj1+Vz9FunZCdHYJFGEwMIHaRwWTYRQlj+uriOX76Qp
bQHJX70suHqIpBVaLOIYy6xuP2xXyPRYT8Ali++RDqIh97sKdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOEIfJ0wP3yKkuLkekZ2DxMr23VgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWFjMDdlYzgtOTY3Ny0z
ZmE0LWI4NWQtM2ViNTI4ZTNmYTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFTiYRerIt4r9HVZO7J3dvc1NbTYWxLLyEuC03Wed0bDevWfacAp
zGFVItBViQJcjNzJIE/VhB0J+ko3Gy6l/8XYza2DHJ9PDMhlVHjjQ5wB9sGlfYeQ
DDEoajLMWfdBqjWSiI49LOUm9iSwf+DOIRpKoLdLGzV6r6RafXxdjVIqvV5X60is
JfWRtOTEHcsBSCoq/JlI2OHrcjaZwuiBWmT40hLMB+7Tfl/xFt2m6YgjdUrrsMFT
zKVu8pvYrokYfN1iPoWGTD8klQ8zirEEdTC7ACmQUkhK2+zWBaB3O6Vjex8BwnOy
y7qkPYJDuBZrtecKoXTlbcwZ4BQM4yOKFM8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:58:30 2026 by rpki-client