Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4830e01-1ef6-37bb-9641-9768261a36d5.roa
File:                     a4830e01-1ef6-37bb-9641-9768261a36d5.roa (raw, json)
Hash identifier:          w3i1GHHMPPAnEUC/fgtbzOnwh83u7Zh2qxo0Eh2+/dc=
Subject key identifier:   BA:01:BF:96:A3:7F:11:78:B0:3E:57:67:9C:95:C0:C9:3D:61:A5:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D59EA4BBDED9A35240D3BD300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4830e01-1ef6-37bb-9641-9768261a36d5.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     36621
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:4b:bd:ed:9a:35:24:0d:3b:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=85d2b7b0-0e5b-4599-b901-2f49ea3f3e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b2:f6:d4:fe:a1:63:38:01:5a:5d:8f:50:6f:
                    9e:6d:ab:17:ae:ea:3c:3c:ea:95:8f:b8:fc:ab:85:
                    cb:2d:71:a3:02:67:c0:c6:ba:f8:d0:d1:c6:31:5a:
                    bc:f3:f3:fd:24:11:79:50:03:e7:5e:72:81:ad:7e:
                    1b:d2:89:48:cc:45:ab:bc:23:d2:ac:22:f0:0f:5a:
                    5d:b6:84:72:35:59:0a:99:27:22:c6:2e:f3:16:a5:
                    13:75:1d:b0:4a:54:c1:fc:ef:be:24:e0:d8:7b:b1:
                    d8:82:a6:f7:6e:4f:bd:22:e9:d6:3b:d4:e1:19:0b:
                    32:52:9c:eb:39:fa:26:c1:82:6d:0e:f0:cf:4b:c3:
                    34:18:bc:f0:34:b5:ef:11:7e:e4:3f:9d:9b:56:ce:
                    eb:28:04:04:52:e9:8f:48:74:9d:e7:5e:bb:a0:13:
                    27:23:c5:fb:a0:99:05:44:55:04:33:32:c5:8c:0e:
                    5a:da:53:11:03:3b:a6:a3:91:5c:c8:9b:f2:5a:44:
                    d3:1d:1c:d4:7d:6f:d6:2b:e7:a5:f0:17:97:92:8e:
                    9e:09:a8:41:19:52:7b:b0:f8:80:4d:1f:8e:68:53:
                    7b:31:c7:60:55:21:03:b0:c0:43:50:73:7c:30:80:
                    39:fc:04:8c:7e:4d:b9:91:95:3a:db:96:c6:df:99:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:01:BF:96:A3:7F:11:78:B0:3E:57:67:9C:95:C0:C9:3D:61:A5:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4830e01-1ef6-37bb-9641-9768261a36d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ce:df:d4:30:19:71:eb:d7:89:dc:fe:37:7e:0f:5f:26:44:
         d8:0d:66:41:04:a1:d4:aa:59:61:3b:50:57:bc:7f:0d:80:19:
         f6:04:16:d3:af:0c:bb:fd:4e:f8:9e:a9:95:0d:90:7e:85:e0:
         55:e4:68:3c:d2:13:39:16:47:de:72:19:ab:ea:d5:2b:97:5e:
         4c:f9:2b:2f:9b:33:b7:85:89:8f:40:21:e6:c3:b3:51:09:5f:
         04:de:c6:13:86:71:8c:53:a3:a7:fd:23:3a:e3:93:99:11:98:
         3e:44:93:a0:c1:59:c8:e2:1d:0c:b1:7e:4d:af:fd:11:82:e0:
         84:7c:cb:95:b8:c7:4a:92:be:98:17:52:b4:e2:ef:d6:f5:b8:
         72:49:a9:88:6d:28:98:44:5c:42:70:5f:a2:40:fe:8b:17:4e:
         45:3a:48:e9:9b:41:36:b5:9f:98:8d:af:2e:29:78:76:cf:39:
         4b:d2:fc:fd:bb:a2:80:3d:ed:75:5d:b2:db:64:9d:f2:ba:e1:
         4a:05:2a:9b:4a:4a:e4:08:ad:91:ba:fc:aa:ca:43:61:c3:a7:
         94:00:f4:3f:ae:da:0b:27:71:af:40:f1:47:06:16:60:0b:f9:
         a5:43:c4:eb:b6:04:14:a7:ce:2d:f0:ce:50:4c:e8:82:32:0c:
         5f:e9:50:3c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6ku97Zo1JA070wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
ODVkMmI3YjAtMGU1Yi00NTk5LWI5MDEtMmY0OWVhM2YzZTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbL21P6hYzgBWl2PUG+ebasXruo8POqVj7j8
q4XLLXGjAmfAxrr40NHGMVq88/P9JBF5UAPnXnKBrX4b0olIzEWrvCPSrCLwD1pd
toRyNVkKmScixi7zFqUTdR2wSlTB/O++JODYe7HYgqb3bk+9IunWO9ThGQsyUpzr
OfomwYJtDvDPS8M0GLzwNLXvEX7kP52bVs7rKAQEUumPSHSd5167oBMnI8X7oJkF
RFUEMzLFjA5a2lMRAzumo5FcyJvyWkTTHRzUfW/WK+el8BeXko6eCahBGVJ7sPiA
TR+OaFN7McdgVSEDsMBDUHN8MIA5/ASMfk25kZU625bG35ngaQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLoBv5ajfxF4sD5XZ5yVwMk9YaXOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTQ4MzBlMDEtMWVmNi0z
N2JiLTk2NDEtOTc2ODI2MWEzNmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIbO39QwGXHr14nc/jd+D18mRNgNZkEEodSqWWE7UFe8fw2AGfYE
FtOvDLv9TvieqZUNkH6F4FXkaDzSEzkWR95yGavq1SuXXkz5Ky+bM7eFiY9AIebD
s1EJXwTexhOGcYxTo6f9Izrjk5kRmD5Ek6DBWcjiHQyxfk2v/RGC4IR8y5W4x0qS
vpgXUrTi79b1uHJJqYhtKJhEXEJwX6JA/osXTkU6SOmbQTa1n5iNry4peHbPOUvS
/P27ooA97XVdsttknfK64UoFKptKSuQIrZG6/KrKQ2HDp5QA9D+u2gsnca9A8UcG
FmAL+aVDxOu2BBSnzi3wzlBM6IIyDF/pUDw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:01:35 2026 by rpki-client