Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92f9aa3c-4ac4-3f8e-ade7-f853413e15cd.roa
File:                     92f9aa3c-4ac4-3f8e-ade7-f853413e15cd.roa (raw, json)
Hash identifier:          IjHguKVvmZjP3yGDJQFcnqL/QEXUB8GSAzAaI00Knm8=
Subject key identifier:   0C:08:F0:6C:02:A2:45:1F:F0:04:B2:B2:9F:04:63:B3:51:63:7A:2B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0006318C7C7169FE71493D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92f9aa3c-4ac4-3f8e-ade7-f853413e15cd.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     396597
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:31:8c:7c:71:69:fe:71:49:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=e525457f-4534-4bc1-8990-57a438c16a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0e:37:01:5a:60:ee:d6:15:24:20:1c:4d:6c:
                    ac:e4:f1:59:34:ee:a8:48:90:83:46:50:a0:61:4e:
                    b7:d3:17:0c:fc:59:15:47:ae:d1:7a:27:3a:16:22:
                    f9:76:8d:f9:f9:e2:7c:e2:47:22:a5:f1:05:e5:93:
                    46:4b:2b:e6:12:6a:ad:68:57:95:d8:cc:cc:6f:4a:
                    fb:7d:91:fc:44:ff:b2:8b:4b:b8:22:7d:18:9e:64:
                    07:77:f5:e5:97:80:92:04:db:63:3a:11:72:30:f2:
                    85:d0:f6:87:59:5b:b3:cf:0f:f8:ae:5e:c3:6d:aa:
                    d2:e1:3c:ef:e3:0f:3f:d9:d5:58:d9:f5:c5:ce:78:
                    90:dc:a1:37:d0:07:61:f1:ca:05:ca:42:20:75:cb:
                    3e:c4:80:59:2e:19:59:20:51:61:b4:0e:57:dd:f9:
                    1e:7a:1c:92:f4:b8:7d:c8:45:8f:d5:19:db:6d:46:
                    ef:72:17:bf:03:75:73:ed:f0:72:d1:a5:3a:00:f4:
                    7c:31:a2:1f:6f:11:35:7d:15:ac:df:2c:b3:3b:2b:
                    2a:80:7a:7c:17:e1:30:78:92:bc:5c:5f:5f:3f:54:
                    b7:0f:35:88:c1:e2:16:ca:07:36:42:00:0f:8e:83:
                    c8:80:dc:86:6d:43:e1:ea:a7:b7:b8:38:12:5d:47:
                    1b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:08:F0:6C:02:A2:45:1F:F0:04:B2:B2:9F:04:63:B3:51:63:7A:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92f9aa3c-4ac4-3f8e-ade7-f853413e15cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:aa:36:6a:18:6c:c0:9b:2a:19:d0:5c:42:4e:41:f9:2e:9b:
         62:50:16:16:28:05:74:43:c1:cd:dd:0c:64:31:ce:1f:46:2a:
         47:f3:81:2a:6b:8b:f2:ab:66:69:d7:6e:b6:05:02:66:76:98:
         2d:48:36:24:ba:5e:be:4e:db:1d:a8:01:0a:df:5f:c0:35:59:
         f6:f5:43:2e:95:be:99:eb:88:ba:a3:dd:ba:9c:2a:b2:c7:24:
         13:a0:e2:38:28:83:30:91:58:23:32:15:d7:f0:9c:1d:43:34:
         7e:37:e6:91:cd:c9:fb:77:a5:55:b0:47:79:1a:4d:2e:94:b0:
         6d:8e:a3:f0:8a:90:c9:2e:70:75:7f:de:8e:57:eb:86:14:6b:
         02:bf:5a:37:67:d5:0a:26:d5:c6:b4:56:0a:fd:38:89:6a:43:
         5d:54:9e:6c:6e:a0:03:e0:4a:76:5d:c8:59:dd:cc:d2:e2:6e:
         40:65:9d:23:42:43:12:2e:ad:53:30:95:d6:61:bd:fa:53:74:
         8e:64:bf:64:bb:4a:ab:05:fa:6c:2d:9c:a1:f3:97:23:59:43:
         96:ca:f3:70:72:60:ba:cb:3d:2a:98:bd:f2:7e:cc:d5:98:5d:
         c5:7a:c4:f2:6f:29:17:33:61:6d:69:6b:61:65:c3:0a:e3:10:
         91:0b:2a:dc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4ABjGMfHFp/nFJPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
ZTUyNTQ1N2YtNDUzNC00YmMxLTg5OTAtNTdhNDM4YzE2YTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg43AVpg7tYVJCAcTWys5PFZNO6oSJCDRlCg
YU630xcM/FkVR67Reic6FiL5do35+eJ84kcipfEF5ZNGSyvmEmqtaFeV2MzMb0r7
fZH8RP+yi0u4In0YnmQHd/Xll4CSBNtjOhFyMPKF0PaHWVuzzw/4rl7DbarS4Tzv
4w8/2dVY2fXFzniQ3KE30Adh8coFykIgdcs+xIBZLhlZIFFhtA5X3fkeehyS9Lh9
yEWP1RnbbUbvche/A3Vz7fBy0aU6APR8MaIfbxE1fRWs3yyzOysqgHp8F+EweJK8
XF9fP1S3DzWIweIWygc2QgAPjoPIgNyGbUPh6qe3uDgSXUcbywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAwI8GwCokUf8ASysp8EY7NRY3orMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTJmOWFhM2MtNGFjNC0z
ZjhlLWFkZTctZjg1MzQxM2UxNWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAByqNmoYbMCbKhnQXEJOQfkum2JQFhYoBXRDwc3dDGQxzh9GKkfz
gSpri/KrZmnXbrYFAmZ2mC1INiS6Xr5O2x2oAQrfX8A1Wfb1Qy6VvpnriLqj3bqc
KrLHJBOg4jgogzCRWCMyFdfwnB1DNH435pHNyft3pVWwR3kaTS6UsG2Oo/CKkMku
cHV/3o5X64YUawK/Wjdn1Qom1ca0Vgr9OIlqQ11UnmxuoAPgSnZdyFndzNLibkBl
nSNCQxIurVMwldZhvfpTdI5kv2S7SqsF+mwtnKHzlyNZQ5bK83ByYLrLPSqYvfJ+
zNWYXcV6xPJvKRczYW1pa2FlwwrjEJELKtw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:56:04 2026 by rpki-client