Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b9dee59-f663-3348-897b-8c2e7217273c.roa
File:                     5b9dee59-f663-3348-897b-8c2e7217273c.roa (raw, json)
Hash identifier:          97YgGkoN6Bj5LpHbo1UBBW9gmD2TN6w5G+hglswWOMQ=
Subject key identifier:   15:32:DD:EA:4D:00:5B:C6:2C:60:D8:8D:4B:48:F9:D1:A6:5D:D5:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D81285C77C0E71802BDCC1C60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b9dee59-f663-3348-897b-8c2e7217273c.roa
Signing time:             Tue 14 Apr 2026 14:22:10 +0000
ROA not before:           Tue 14 Apr 2026 14:22:10 +0000
ROA not after:            Mon 13 Jul 2026 14:22:10 +0000
asID:                     396600
IP address blocks:        2001:500:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:5c:77:c0:e7:18:02:bd:cc:1c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:10 2026 GMT
            Not After : Jul 13 14:22:10 2026 GMT
        Subject: CN=9b0ef847-8b8c-4ac1-9c85-13519fb7f2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fb:83:e4:2b:22:3f:f8:5f:71:10:0a:c1:f4:
                    a1:ae:fc:c8:71:5c:0d:88:70:fa:bd:c8:e9:cc:d6:
                    d0:ee:5a:36:ec:0a:bd:b5:81:b9:fc:33:9d:ea:c4:
                    2a:9b:28:58:09:8b:c9:e5:15:c3:bc:60:6e:1f:c9:
                    cc:7d:71:55:0d:1f:59:c3:d5:59:09:db:28:93:36:
                    56:60:7d:ca:78:ae:c3:47:e2:b4:85:bb:cd:ef:30:
                    75:19:73:2c:aa:fc:f7:97:c5:17:f8:f5:d7:bd:b0:
                    8c:ea:af:0c:3d:79:b2:23:4f:4d:43:91:af:dd:86:
                    d9:f1:bf:5c:f4:12:f9:88:30:d5:7c:07:51:03:34:
                    5d:4f:01:4a:cf:df:43:28:5a:2d:91:f8:9b:64:c1:
                    ee:87:d2:22:55:fb:2d:62:7a:3c:8b:f9:f2:62:79:
                    00:b8:87:86:48:56:49:22:6a:d4:fc:55:42:07:b6:
                    19:b5:e1:82:e1:be:91:5c:31:bf:e2:2e:97:eb:2b:
                    7a:fd:33:0e:21:47:ad:0e:c3:f8:76:21:db:bd:d2:
                    d9:c5:7e:c2:ea:cf:cf:5b:a5:e3:c2:25:54:a9:d3:
                    73:63:c4:ef:ae:f8:b9:43:a5:41:c2:85:72:d3:5a:
                    cd:94:35:9c:ba:aa:c5:56:7e:f1:9e:8b:ba:2e:ae:
                    cb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:32:DD:EA:4D:00:5B:C6:2C:60:D8:8D:4B:48:F9:D1:A6:5D:D5:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b9dee59-f663-3348-897b-8c2e7217273c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ae:50:42:05:7e:e4:b8:05:2d:a8:f5:da:40:3c:50:d7:87:
         25:ec:fb:34:0e:05:e3:68:73:3c:f8:c1:6b:61:fa:e3:45:a4:
         87:05:fd:8e:bd:b6:da:a8:7e:e9:99:41:49:4a:6d:65:3c:54:
         58:6f:55:72:86:9a:a6:94:31:2f:a9:b2:19:ab:49:1d:72:a1:
         33:db:1b:44:79:58:48:bd:eb:a8:62:b2:99:34:40:ad:cb:27:
         70:f7:ca:0f:3a:a3:98:19:eb:ab:8c:b7:29:79:67:cd:9e:df:
         3f:68:53:dc:2c:b8:f2:77:f2:c9:87:e0:9b:fc:04:0a:8d:77:
         7f:d3:d5:6f:bc:84:e0:fb:97:ad:6d:f3:f9:ab:db:fd:73:e7:
         40:a6:9f:b3:ad:42:6b:f3:ef:fc:5b:6d:71:79:32:84:81:16:
         29:fe:2b:97:b4:f6:76:ae:ea:90:1b:e2:1c:a4:6e:ba:5d:d2:
         36:0c:6a:1b:52:b9:9a:db:09:cd:0b:74:59:88:f8:eb:32:1c:
         f7:1f:3c:12:bd:54:0d:79:dc:71:c3:f1:88:d4:8b:b8:ed:0a:
         dd:bc:4e:e8:85:6f:68:01:20:9b:71:4c:57:2f:4f:bc:08:35:
         1c:d9:23:b0:17:93:01:31:bf:8d:f9:55:71:e2:e6:ef:6c:eb:
         90:a7:ec:7e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2BKFx3wOcYAr3MHGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNDE0MjIxMFoXDTI2MDcxMzE0MjIxMFowLzEtMCsGA1UEAxMk
OWIwZWY4NDctOGI4Yy00YWMxLTljODUtMTM1MTlmYjdmMmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfuD5CsiP/hfcRAKwfShrvzIcVwNiHD6vcjp
zNbQ7lo27Aq9tYG5/DOd6sQqmyhYCYvJ5RXDvGBuH8nMfXFVDR9Zw9VZCdsokzZW
YH3KeK7DR+K0hbvN7zB1GXMsqvz3l8UX+PXXvbCM6q8MPXmyI09NQ5Gv3YbZ8b9c
9BL5iDDVfAdRAzRdTwFKz99DKFotkfibZMHuh9IiVfstYno8i/nyYnkAuIeGSFZJ
ImrU/FVCB7YZteGC4b6RXDG/4i6X6yt6/TMOIUetDsP4diHbvdLZxX7C6s/PW6Xj
wiVUqdNzY8Tvrvi5Q6VBwoVy01rNlDWcuqrFVn7xnou6Lq7LoQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBUy3epNAFvGLGDYjUtI+dGmXdXGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWI5ZGVlNTktZjY2My0z
MzQ4LTg5N2ItOGMyZTcyMTcyNzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACWuUEIFfuS4BS2o9dpAPFDXhyXs+zQOBeNoczz4wWth+uNFpIcF
/Y69ttqofumZQUlKbWU8VFhvVXKGmqaUMS+pshmrSR1yoTPbG0R5WEi966hispk0
QK3LJ3D3yg86o5gZ66uMtyl5Z82e3z9oU9wsuPJ38smH4Jv8BAqNd3/T1W+8hOD7
l61t8/mr2/1z50Cmn7OtQmvz7/xbbXF5MoSBFin+K5e09nau6pAb4hykbrpd0jYM
ahtSuZrbCc0LdFmI+OsyHPcfPBK9VA153HHD8YjUi7jtCt28TuiFb2gBIJtxTFcv
T7wINRzZI7AXkwExv435VXHi5u9s65Cn7H4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:48:42 2026 by rpki-client