Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/753a5fd3-7ead-3451-8a4a-8d52bc868907.roa
File:                     753a5fd3-7ead-3451-8a4a-8d52bc868907.roa (raw, json)
Hash identifier:          OX7nW8YJs0HVWMhrkuw/0wAhPH9s+6RG6aoHv2fl64o=
Subject key identifier:   8A:57:C3:55:33:B8:A5:F4:CD:2B:B7:D8:3B:98:4B:B5:56:7C:62:FA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E00060AD99A6D0DB4C96E0600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/753a5fd3-7ead-3451-8a4a-8d52bc868907.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     396543
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:0a:d9:9a:6d:0d:b4:c9:6e:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=7e4b6d6d-3e19-490d-9306-a7d3eaeb43dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:13:78:8b:77:31:12:b3:02:f4:a5:8c:e6:d4:
                    05:3d:6e:b7:eb:9c:b1:0b:0d:47:ef:b3:7f:1c:1f:
                    5f:a9:16:a2:a4:b8:d1:9e:9f:45:0e:7f:12:6a:e2:
                    95:d6:19:04:6c:57:40:c3:71:fa:81:db:54:89:ff:
                    fc:3a:f9:f4:80:3d:41:6d:78:1c:03:50:e0:4b:93:
                    d6:96:25:15:65:ac:4a:e2:4a:71:dc:7f:2e:80:f8:
                    0f:df:2c:fc:90:f7:a7:3f:09:a2:07:86:65:a3:16:
                    f1:4c:85:e2:bc:c8:44:4a:83:fe:55:9c:38:5e:19:
                    dd:e9:2d:77:86:b4:2e:3c:47:3e:64:8e:6c:3f:09:
                    c3:da:dd:85:ce:d7:0e:07:82:d7:ad:d7:3b:fd:61:
                    eb:46:36:dd:8e:f7:b8:e7:73:ca:00:13:04:51:26:
                    3b:64:4e:27:a2:f0:40:58:8a:e6:39:28:5c:a4:85:
                    da:a1:b7:1b:0a:2a:9b:ee:82:9a:d4:b2:4d:d9:1d:
                    75:2b:3a:a3:49:de:6e:60:f6:96:e2:bc:b4:ff:a5:
                    c2:38:71:48:44:ba:9c:8e:fb:da:c5:02:29:77:50:
                    23:c3:1b:e9:bf:bd:0c:77:90:56:92:dc:ec:77:4a:
                    79:34:df:b7:35:0e:67:8e:0a:2a:1d:88:17:89:de:
                    b5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:57:C3:55:33:B8:A5:F4:CD:2B:B7:D8:3B:98:4B:B5:56:7C:62:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/753a5fd3-7ead-3451-8a4a-8d52bc868907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1e:99:ca:ff:f6:1c:d8:62:fb:21:21:14:e7:17:23:4c:81:
         ab:85:9a:2b:91:8d:34:55:3f:39:62:a0:d6:7b:f6:79:2e:ce:
         c8:31:46:5b:d5:a4:b4:73:12:81:e2:14:50:81:b6:70:71:db:
         6f:d3:6a:a5:ea:25:20:c5:d1:9d:5b:52:5a:9a:5d:69:ee:3e:
         ee:77:30:ec:04:d7:17:17:ed:0a:9d:22:ad:78:4c:23:8a:97:
         87:22:f9:49:71:90:82:5d:ca:e5:1b:5a:79:af:72:54:a0:0f:
         07:11:fb:43:3a:f2:a7:6c:01:b2:7d:b0:aa:b2:8e:46:c3:79:
         97:ba:6b:c2:41:6f:59:f2:99:8c:71:2e:12:23:fe:ae:d1:ee:
         07:0f:e5:be:9a:91:8c:22:67:53:73:24:62:ba:67:aa:5e:10:
         7f:22:ad:3a:13:d7:36:4f:bd:a4:9f:b4:a9:90:ee:83:9e:db:
         7b:dc:9d:75:fc:0d:95:03:35:b1:b9:c6:4c:de:7b:26:bc:3b:
         4c:b9:36:0b:db:ea:63:f1:56:1b:93:26:87:2c:2d:28:dc:eb:
         44:3a:0d:37:65:b6:1b:69:e8:05:c0:db:d3:5b:40:2e:5d:46:
         41:2f:04:b8:05:61:84:35:9f:2d:e0:73:84:bf:e5:94:ed:6c:
         10:7f:d2:04
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE4ABgrZmm0NtMluBgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
N2U0YjZkNmQtM2UxOS00OTBkLTkzMDYtYTdkM2VhZWI0M2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xN4i3cxErMC9KWM5tQFPW6365yxCw1H77N/
HB9fqRaipLjRnp9FDn8SauKV1hkEbFdAw3H6gdtUif/8Ovn0gD1BbXgcA1DgS5PW
liUVZaxK4kpx3H8ugPgP3yz8kPenPwmiB4ZloxbxTIXivMhESoP+VZw4Xhnd6S13
hrQuPEc+ZI5sPwnD2t2FztcOB4LXrdc7/WHrRjbdjve453PKABMEUSY7ZE4novBA
WIrmOShcpIXaobcbCiqb7oKa1LJN2R11KzqjSd5uYPaW4ry0/6XCOHFIRLqcjvva
xQIpd1Ajwxvpv70Md5BWktzsd0p5NN+3NQ5njgoqHYgXid61kQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFIpXw1UzuKX0zSu32DuYS7VWfGL6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzUzYTVmZDMtN2VhZC0z
NDUxLThhNGEtOGQ1MmJjODY4OTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQABHpnK//Yc2GL7ISEU5xcjTIGrhZorkY00VT85
YqDWe/Z5Ls7IMUZb1aS0cxKB4hRQgbZwcdtv02ql6iUgxdGdW1Jaml1p7j7udzDs
BNcXF+0KnSKteEwjipeHIvlJcZCCXcrlG1p5r3JUoA8HEftDOvKnbAGyfbCqso5G
w3mXumvCQW9Z8pmMcS4SI/6u0e4HD+W+mpGMImdTcyRiumeqXhB/Iq06E9c2T72k
n7SpkO6Dntt73J11/A2VAzWxucZM3nsmvDtMuTYL2+pj8VYbkyaHLC0o3OtEOg03
ZbYbaegFwNvTW0AuXUZBLwS4BWGENZ8t4HOEv+WU7WwQf9IE
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:02:40 2026 by rpki-client