Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/690db9bb-0876-30e4-8c8b-029f03d03b70.roa
File:                     690db9bb-0876-30e4-8c8b-029f03d03b70.roa (raw, json)
Hash identifier:          C6ZSpACBjcW7T+nLBJfXs/S4xnuO1wN5ScAsPCixm1o=
Subject key identifier:   3E:D8:F6:00:3D:82:03:5B:A2:5E:BE:4A:B0:B8:3E:C6:D7:F6:33:95
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDE88024AD403185E7D636900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/690db9bb-0876-30e4-8c8b-029f03d03b70.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     396552
IP address blocks:        2001:501:8a29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:88:02:4a:d4:03:18:5e:7d:63:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=366daf0d-9447-4da4-b2c9-c49731462d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:be:f1:6a:a7:a0:0c:16:e7:fa:53:2b:ae:
                    13:df:03:e6:cf:d7:17:a3:63:5c:b8:1d:58:41:2c:
                    49:b6:f4:5a:2b:ec:1b:da:fd:a6:67:e3:24:a0:f0:
                    2c:b1:8a:ab:16:96:49:b9:e4:69:7b:9f:fd:cb:4b:
                    74:b1:ef:0e:b6:15:ee:ef:67:04:0c:8c:d4:f8:34:
                    b9:af:5d:82:46:b1:4a:ca:a2:3a:0e:43:4b:7b:51:
                    f6:81:e7:52:5f:ae:79:b9:a9:24:f1:a0:28:0d:89:
                    6f:d9:47:5a:ff:eb:42:71:99:1e:1f:55:3a:4b:53:
                    60:25:0a:a3:5b:b2:ca:3b:87:50:80:de:89:da:78:
                    56:6a:80:1c:7b:b9:f1:d2:cd:64:91:8d:be:52:3e:
                    43:9b:d8:85:67:27:15:1d:4a:16:a2:c1:41:48:14:
                    69:c6:68:9e:c8:1d:26:bc:4e:e6:dc:31:01:ad:80:
                    92:b8:51:05:79:b9:af:15:49:e9:aa:ce:dc:d5:d0:
                    8f:3e:a1:f6:ef:e8:fc:53:5e:6b:27:a8:97:bc:53:
                    ee:03:50:35:b4:10:13:e1:27:ce:88:0d:32:68:19:
                    41:fc:01:df:8e:5a:a4:b1:c1:54:6f:37:2e:94:16:
                    d7:cf:23:28:ba:25:c3:2e:da:9f:84:04:77:be:12:
                    f9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D8:F6:00:3D:82:03:5B:A2:5E:BE:4A:B0:B8:3E:C6:D7:F6:33:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/690db9bb-0876-30e4-8c8b-029f03d03b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:49:6f:4c:c9:40:74:a0:2e:86:a1:3b:5d:06:40:f6:54:a5:
         bb:3f:8c:56:c2:0d:5d:70:e5:ed:f7:26:f4:bb:f5:57:ba:ea:
         ce:28:6c:a1:99:c2:9c:77:62:83:9c:45:66:eb:96:cf:66:d4:
         16:58:8f:38:01:74:dc:88:ff:5c:d8:e7:ab:55:85:3e:d7:9b:
         e6:1b:b8:7d:58:f4:09:cb:6b:7d:4b:45:83:77:a6:90:9b:73:
         ae:d1:cb:f9:13:1c:ab:42:f6:0c:20:3b:32:9b:56:36:f1:fd:
         5e:c4:e0:07:e8:2e:6f:06:db:5c:b3:6a:20:75:25:5b:0d:1d:
         9a:52:f9:12:e0:52:c4:c6:59:f9:d1:23:64:35:d6:99:13:8b:
         e8:89:35:40:dd:97:67:85:2b:a8:dc:f6:f9:62:c6:ea:d2:39:
         b2:25:42:05:cf:0b:0b:5f:cc:fb:48:ba:5c:5a:58:6f:bf:ac:
         1b:73:75:1d:38:c8:a6:3f:5d:cd:bf:30:81:e2:85:64:c2:a1:
         6f:32:f7:f1:06:c3:29:38:d5:10:d4:5b:b9:ee:26:1c:fc:8a:
         3a:9a:24:aa:56:47:b3:c5:eb:af:de:8d:9c:a7:d5:b7:4d:f0:
         f7:3e:6f:11:cd:2b:11:1b:42:ff:63:4c:9e:65:9f:f9:98:aa:
         a2:a5:2a:27
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3eiAJK1AMYXn1jaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
MzY2ZGFmMGQtOTQ0Ny00ZGE0LWIyYzktYzQ5NzMxNDYyZDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4O+8WqnoAwW5/pTK64T3wPmz9cXo2NcuB1Y
QSxJtvRaK+wb2v2mZ+MkoPAssYqrFpZJueRpe5/9y0t0se8OthXu72cEDIzU+DS5
r12CRrFKyqI6DkNLe1H2gedSX655uakk8aAoDYlv2Uda/+tCcZkeH1U6S1NgJQqj
W7LKO4dQgN6J2nhWaoAce7nx0s1kkY2+Uj5Dm9iFZycVHUoWosFBSBRpxmieyB0m
vE7m3DEBrYCSuFEFebmvFUnpqs7c1dCPPqH27+j8U15rJ6iXvFPuA1A1tBAT4SfO
iA0yaBlB/AHfjlqkscFUbzculBbXzyMouiXDLtqfhAR3vhL51wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD7Y9gA9ggNbol6+SrC4PsbX9jOVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjkwZGI5YmItMDg3Ni0z
MGU0LThjOGItMDI5ZjAzZDAzYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKRJb0zJQHSgLoahO10GQPZUpbs/jFbCDV1w5e33JvS79Ve66s4o
bKGZwpx3YoOcRWbrls9m1BZYjzgBdNyI/1zY56tVhT7Xm+YbuH1Y9AnLa31LRYN3
ppCbc67Ry/kTHKtC9gwgOzKbVjbx/V7E4AfoLm8G21yzaiB1JVsNHZpS+RLgUsTG
WfnRI2Q11pkTi+iJNUDdl2eFK6jc9vlixurSObIlQgXPCwtfzPtIulxaWG+/rBtz
dR04yKY/Xc2/MIHihWTCoW8y9/EGwyk41RDUW7nuJhz8ijqaJKpWR7PF66/ejZyn
1bdN8Pc+bxHNKxEbQv9jTJ5ln/mYqqKlKic=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:26:49 2026 by rpki-client