Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76fc94ff-88f7-36f8-86af-89ad2760b0fa.roa
File:                     76fc94ff-88f7-36f8-86af-89ad2760b0fa.roa (raw, json)
Hash identifier:          seu3DCCYhpgK+JnLSwRQcJdH24Nh6VUp1EM4eKAonew=
Subject key identifier:   5E:1A:3C:8B:E4:40:A7:44:6A:21:A1:81:BB:B3:4A:76:30:BD:3C:CC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DEC7B3B5A2DF97ACDF52F8200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76fc94ff-88f7-36f8-86af-89ad2760b0fa.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     36625
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:3b:5a:2d:f9:7a:cd:f5:2f:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=2b7ae03a-a8dc-4653-a3b5-928ccc3e7674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:0e:74:74:d6:0c:b9:cc:5d:ca:a9:b8:24:
                    a8:5f:33:0a:de:9c:0f:d8:f6:93:f5:fd:77:60:26:
                    ab:70:5a:74:5a:9f:e0:0a:7a:4d:9a:87:5d:93:14:
                    77:18:9f:73:05:35:7f:f7:d1:35:f0:bc:62:b5:eb:
                    e8:13:56:df:df:12:77:96:97:07:b0:d5:f8:b0:c9:
                    d8:56:2b:9d:b4:8a:58:79:59:bc:b3:71:93:f3:b3:
                    84:57:9e:c9:42:50:c5:7a:f1:92:ca:7c:77:63:eb:
                    3a:2d:05:3c:9b:f0:a3:53:44:3c:67:e6:b5:40:2c:
                    57:d5:c7:d4:22:3c:00:b0:29:3a:bc:5b:24:f7:f8:
                    69:cd:fe:d0:52:0f:00:c1:5c:0e:a2:92:6a:14:a0:
                    21:21:c5:5c:6b:65:8e:58:3f:1e:58:ed:a3:55:e6:
                    f4:ae:d4:df:1a:07:1c:05:a5:f9:72:e1:05:32:df:
                    ce:27:b5:b2:5a:7a:7d:ea:59:ba:51:a6:20:bd:c6:
                    90:e4:e1:ec:19:b7:91:f2:ab:21:dd:0f:03:41:76:
                    1b:ff:6b:09:ca:1a:e6:95:3c:a0:cb:f7:ce:69:da:
                    f8:dc:ba:6c:2b:29:7c:18:67:fd:79:17:c5:15:34:
                    67:64:e8:43:c8:3a:a3:19:12:9a:c1:aa:f3:76:f1:
                    32:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1A:3C:8B:E4:40:A7:44:6A:21:A1:81:BB:B3:4A:76:30:BD:3C:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76fc94ff-88f7-36f8-86af-89ad2760b0fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:11:72:21:2c:90:e5:6f:25:68:3b:70:2f:59:25:15:35:93:
         a0:80:02:be:39:3d:6b:22:16:16:42:86:9a:f4:c9:b8:35:98:
         c1:41:a8:ed:9f:ed:1e:b0:d1:ae:c7:dd:72:a9:30:3f:75:b1:
         fb:e7:7a:3a:1f:72:c6:66:f4:e9:b6:4b:74:6d:20:b7:37:85:
         fc:7f:64:ec:12:99:77:b3:6e:63:14:03:83:8e:d4:9d:a0:b7:
         27:10:2f:b8:ab:8e:a4:9d:4a:65:ad:a6:93:fb:8d:a9:a3:fc:
         b8:1c:d7:df:ff:d6:a4:8c:fe:dc:74:b6:35:4b:28:c2:98:80:
         23:85:a1:a4:08:ed:c3:15:7a:6b:81:17:d3:02:87:26:ae:4a:
         7a:85:c4:aa:34:c2:cb:e6:45:72:26:f5:78:67:cf:08:e1:30:
         c9:d1:ad:76:49:02:ce:70:95:ba:06:0c:56:d9:c0:f1:8d:aa:
         46:72:b9:66:fb:43:ab:b8:44:4e:9c:dd:e0:b0:5b:6a:d5:a3:
         80:58:18:e7:be:a0:d2:f2:e5:70:7e:b9:5b:f1:9a:c3:5d:b4:
         d7:d9:fe:cc:d0:bf:df:fc:fd:be:f9:91:8d:90:39:ca:30:4f:
         21:40:d8:a0:13:be:57:51:be:58:53:95:1c:07:14:84:86:bf:
         6c:52:60:b8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3seztaLfl6zfUvggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk
MmI3YWUwM2EtYThkYy00NjUzLWEzYjUtOTI4Y2NjM2U3Njc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiYOdHTWDLnMXcqpuCSoXzMK3pwP2PaT9f13
YCarcFp0Wp/gCnpNmoddkxR3GJ9zBTV/99E18LxitevoE1bf3xJ3lpcHsNX4sMnY
ViudtIpYeVm8s3GT87OEV57JQlDFevGSynx3Y+s6LQU8m/CjU0Q8Z+a1QCxX1cfU
IjwAsCk6vFsk9/hpzf7QUg8AwVwOopJqFKAhIcVca2WOWD8eWO2jVeb0rtTfGgcc
BaX5cuEFMt/OJ7WyWnp96lm6UaYgvcaQ5OHsGbeR8qsh3Q8DQXYb/2sJyhrmlTyg
y/fOadr43LpsKyl8GGf9eRfFFTRnZOhDyDqjGRKawarzdvEypwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF4aPIvkQKdEaiGhgbuzSnYwvTzMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzZmYzk0ZmYtODhmNy0z
NmY4LTg2YWYtODlhZDI3NjBiMGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABMRciEskOVvJWg7cC9ZJRU1k6CAAr45PWsiFhZChpr0ybg1mMFB
qO2f7R6w0a7H3XKpMD91sfvnejofcsZm9Om2S3RtILc3hfx/ZOwSmXezbmMUA4OO
1J2gtycQL7irjqSdSmWtppP7jamj/Lgc19//1qSM/tx0tjVLKMKYgCOFoaQI7cMV
emuBF9MChyauSnqFxKo0wsvmRXIm9XhnzwjhMMnRrXZJAs5wlboGDFbZwPGNqkZy
uWb7Q6u4RE6c3eCwW2rVo4BYGOe+oNLy5XB+uVvxmsNdtNfZ/szQv9/8/b75kY2Q
OcowTyFA2KATvldRvlhTlRwHFISGv2xSYLg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:03:08 2026 by rpki-client