Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/999a3410-e3de-38c8-ba84-c2cd75dbcb68.roa
File:                     999a3410-e3de-38c8-ba84-c2cd75dbcb68.roa (raw, json)
Hash identifier:          PMhHFXnj5Bx10t6t9yJ0U7UGSwIk+b6jd1nM7IH1Wfw=
Subject key identifier:   BC:C4:B3:49:CF:00:E4:F3:0B:F9:7E:10:FD:0D:8D:9C:B9:ED:5D:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E18AEE0C952844612852D1AA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/999a3410-e3de-38c8-ba84-c2cd75dbcb68.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     211369
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:e0:c9:52:84:46:12:85:2d:1a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=1d64a70b-458e-4f4f-b3ac-35d2bb44bd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:01:1b:54:36:a5:ab:d2:b6:cb:b5:cd:c0:6b:
                    45:5f:34:e0:d4:df:1c:05:2e:73:df:8d:06:c6:d6:
                    bc:23:1c:ed:e1:6d:cc:33:e0:7d:aa:bc:68:74:44:
                    bd:6d:55:71:3c:e9:c1:14:b7:ae:f8:d0:ae:a0:67:
                    aa:73:43:84:40:17:92:d4:b8:d0:55:3a:6a:5b:ee:
                    f4:70:77:01:c8:30:c5:3d:18:26:65:38:1f:bb:84:
                    8c:14:ae:57:4a:ef:d7:f1:01:08:4a:89:04:34:53:
                    b4:34:59:d4:5e:14:34:fd:05:b1:bf:19:73:16:b5:
                    99:a1:b5:44:f1:b1:aa:71:9b:5b:c9:0b:16:c4:2b:
                    81:2a:68:53:52:c9:5e:61:e8:60:6b:b5:33:63:71:
                    26:46:15:9f:05:9f:85:37:cb:48:f9:0b:3f:28:ae:
                    10:f5:5a:86:40:f4:83:c2:96:b9:c5:20:1a:14:33:
                    db:ae:21:5c:a9:a5:ae:88:72:74:22:10:3c:18:75:
                    57:52:50:55:81:f1:ac:80:b8:4b:72:db:a6:80:8b:
                    44:74:7c:ee:b3:5e:c6:a5:e6:4b:23:d4:b2:ac:7a:
                    57:8d:45:27:53:01:a9:b2:9d:a9:98:84:12:82:74:
                    57:d0:eb:6e:8a:6f:71:9d:1b:25:f7:6a:87:4d:4e:
                    dc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C4:B3:49:CF:00:E4:F3:0B:F9:7E:10:FD:0D:8D:9C:B9:ED:5D:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/999a3410-e3de-38c8-ba84-c2cd75dbcb68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7d:14:5d:fa:cd:a4:bc:b0:27:b0:0c:ce:3e:9f:0b:12:48:
         87:35:00:be:d8:0c:4e:d9:fc:e5:b0:a1:0b:00:36:92:ad:94:
         d2:6c:71:82:63:58:d2:c7:20:53:33:6a:15:9c:0c:63:b8:0c:
         a9:67:50:8d:86:bb:4f:4c:3d:81:22:3b:99:8b:f6:7a:5c:d6:
         52:23:f8:7e:92:d4:69:4a:7f:54:bc:8a:92:22:e5:8b:2b:31:
         37:67:83:5a:6d:6f:be:32:c5:d1:d1:36:b8:88:75:5e:13:b8:
         92:9a:5e:33:ac:a5:a0:78:2c:7c:be:39:0a:cf:91:91:74:6a:
         a1:f1:7f:e6:a6:25:bd:bf:a9:df:7a:48:9b:3b:dc:98:68:75:
         7c:9b:e0:60:51:6c:0c:0a:95:c2:d2:94:35:f7:9d:72:0b:f1:
         70:61:83:65:71:76:2d:cc:c8:62:30:a5:69:f9:34:bd:ac:c9:
         2f:eb:f4:e9:74:83:fe:91:de:8f:1f:a2:63:0a:cf:f4:88:87:
         f1:ac:e9:ff:80:47:c2:44:73:4c:51:98:7a:af:49:6c:23:0c:
         47:d6:9c:cb:5e:a1:bc:07:96:b3:8c:3d:3e:bb:3c:8c:25:ce:
         ef:c1:7c:a3:9b:60:17:90:b1:a4:3d:78:f9:39:be:19:e7:9e:
         e3:fa:45:2a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4YruDJUoRGEoUtGqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk
MWQ2NGE3MGItNDU4ZS00ZjRmLWIzYWMtMzVkMmJiNDRiZDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAEbVDalq9K2y7XNwGtFXzTg1N8cBS5z340G
xta8Ixzt4W3MM+B9qrxodES9bVVxPOnBFLeu+NCuoGeqc0OEQBeS1LjQVTpqW+70
cHcByDDFPRgmZTgfu4SMFK5XSu/X8QEISokENFO0NFnUXhQ0/QWxvxlzFrWZobVE
8bGqcZtbyQsWxCuBKmhTUsleYehga7UzY3EmRhWfBZ+FN8tI+Qs/KK4Q9VqGQPSD
wpa5xSAaFDPbriFcqaWuiHJ0IhA8GHVXUlBVgfGsgLhLctumgItEdHzus17GpeZL
I9SyrHpXjUUnUwGpsp2pmIQSgnRX0Otuim9xnRsl92qHTU7cRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLzEs0nPAOTzC/l+EP0NjZy57V0pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTk5YTM0MTAtZTNkZS0z
OGM4LWJhODQtYzJjZDc1ZGJjYjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEl9FF36zaS8sCewDM4+nwsSSIc1AL7YDE7Z/OWwoQsANpKtlNJs
cYJjWNLHIFMzahWcDGO4DKlnUI2Gu09MPYEiO5mL9npc1lIj+H6S1GlKf1S8ipIi
5YsrMTdng1ptb74yxdHRNriIdV4TuJKaXjOspaB4LHy+OQrPkZF0aqHxf+amJb2/
qd96SJs73JhodXyb4GBRbAwKlcLSlDX3nXIL8XBhg2Vxdi3MyGIwpWn5NL2syS/r
9Ol0g/6R3o8fomMKz/SIh/Gs6f+AR8JEc0xRmHqvSWwjDEfWnMteobwHlrOMPT67
PIwlzu/BfKObYBeQsaQ9ePk5vhnnnuP6RSo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:08:58 2026 by rpki-client