Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaaf5775-3df3-3476-a9d6-a63c88b65f7c.roa
File:                     aaaf5775-3df3-3476-a9d6-a63c88b65f7c.roa (raw, json)
Hash identifier:          Ke6HgYvnIQLD8VItIGKJvngCJ/TrccYIjv0Vb4m1vdc=
Subject key identifier:   25:70:6C:33:CE:1A:09:09:30:39:2E:63:60:93:E5:A3:49:BD:33:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E09F24C863B8ED444E90C7080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaaf5775-3df3-3476-a9d6-a63c88b65f7c.roa
Signing time:             Tue 02 Jun 2026 14:18:59 +0000
ROA not before:           Tue 02 Jun 2026 14:18:59 +0000
ROA not after:            Mon 31 Aug 2026 14:18:59 +0000
asID:                     397196
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:f2:4c:86:3b:8e:d4:44:e9:0c:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 14:18:59 2026 GMT
            Not After : Aug 31 14:18:59 2026 GMT
        Subject: CN=9784aec6-3c46-4530-8683-76b217f3776c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2b:9a:43:84:16:10:59:a8:71:cf:bb:cd:56:
                    b0:a5:4d:cc:db:3a:0d:2b:8a:a7:8c:2b:e9:ea:17:
                    c5:4e:15:ae:3f:b1:06:93:93:c8:8b:68:ce:b3:a3:
                    5c:8e:9d:36:3f:b1:18:60:31:67:96:10:c8:28:f9:
                    8f:80:1e:74:01:a9:8d:e8:4f:66:e3:25:9c:97:1f:
                    5c:d4:6a:94:63:6d:a4:89:57:4b:b4:80:eb:10:f0:
                    a3:86:d7:29:5f:0a:3e:da:be:9c:09:63:10:5d:9e:
                    38:b7:20:e1:c0:f2:9f:8a:73:d8:70:d0:3a:39:e4:
                    8a:51:bd:6d:85:87:b6:91:e9:3b:7a:a0:8f:4a:05:
                    39:c7:b3:df:cf:89:ae:b8:c5:12:ea:b4:ad:95:34:
                    87:5f:cb:5e:b7:c6:eb:eb:91:86:27:e8:be:f0:e6:
                    fd:65:cd:6c:4a:ad:d0:b9:e6:eb:67:23:34:a9:3c:
                    88:0b:0f:37:d4:b9:62:cd:dc:03:52:89:28:9f:10:
                    8c:7a:f1:e5:62:22:6a:e1:20:47:9e:7f:8e:cd:6e:
                    40:c5:4b:fa:be:fa:03:bc:3e:f9:7b:f1:d9:c4:53:
                    66:69:38:ef:d8:00:07:04:50:db:93:f7:5e:ff:71:
                    dc:aa:ab:70:9e:d3:4c:ae:c9:19:e6:81:5e:fc:9f:
                    a9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:70:6C:33:CE:1A:09:09:30:39:2E:63:60:93:E5:A3:49:BD:33:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaaf5775-3df3-3476-a9d6-a63c88b65f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e4:ce:a9:55:b1:1f:1d:48:7d:f8:00:84:0b:8c:da:58:f6:
         ae:44:ba:9b:4a:0d:8c:89:50:74:9a:94:f0:ae:cb:4c:ba:34:
         3e:1c:b2:29:5c:9f:61:fc:1f:bc:ad:23:e9:dc:5f:36:01:13:
         8e:a9:5e:ce:37:5d:74:44:d2:d4:10:87:ac:2c:ea:fa:25:0d:
         40:03:95:57:10:35:58:88:4c:34:18:b1:4d:19:51:37:6a:2a:
         5f:69:d7:aa:22:ca:6b:37:88:43:46:79:1c:48:6b:f9:4a:71:
         11:a5:b0:ce:d1:e5:2a:a1:0b:6b:ab:4a:50:35:9f:68:da:4d:
         62:d0:aa:87:f4:64:fa:a6:a3:b2:d6:88:a9:51:56:fe:11:10:
         14:7a:bf:76:a3:ba:0a:3e:20:63:b4:c0:f4:38:20:d6:90:45:
         94:e2:76:c9:a0:f1:69:a1:f6:ca:cd:ca:21:b0:d7:92:9b:d0:
         e5:8b:8f:bc:76:cb:08:94:48:47:ee:b5:40:0d:48:19:a3:10:
         46:c3:3a:bc:53:db:b3:cb:c0:ec:a7:0b:cb:dc:f8:d0:1e:91:
         da:52:d1:36:d3:cc:19:29:6c:37:db:0a:f4:4c:df:33:6f:1f:
         5f:23:71:a8:ec:d0:7d:2b:95:87:65:1a:21:18:64:3d:de:9d:
         04:06:14:f5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4J8kyGO47UROkMcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYwMjE0MTg1OVoXDTI2MDgzMTE0MTg1OVowLzEtMCsGA1UEAxMk
OTc4NGFlYzYtM2M0Ni00NTMwLTg2ODMtNzZiMjE3ZjM3NzZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiuaQ4QWEFmocc+7zVawpU3M2zoNK4qnjCvp
6hfFThWuP7EGk5PIi2jOs6Ncjp02P7EYYDFnlhDIKPmPgB50AamN6E9m4yWclx9c
1GqUY22kiVdLtIDrEPCjhtcpXwo+2r6cCWMQXZ44tyDhwPKfinPYcNA6OeSKUb1t
hYe2kek7eqCPSgU5x7Pfz4muuMUS6rStlTSHX8tet8br65GGJ+i+8Ob9Zc1sSq3Q
uebrZyM0qTyICw831LlizdwDUokonxCMevHlYiJq4SBHnn+OzW5AxUv6vvoDvD75
e/HZxFNmaTjv2AAHBFDbk/de/3HcqqtwntNMrskZ5oFe/J+pyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCVwbDPOGgkJMDkuY2CT5aNJvTOwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWFhZjU3NzUtM2RmMy0z
NDc2LWE5ZDYtYTYzYzg4YjY1ZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAHkzqlVsR8dSH34AIQLjNpY9q5EuptKDYyJUHSalPCuy0y6ND4c
silcn2H8H7ytI+ncXzYBE46pXs43XXRE0tQQh6ws6volDUADlVcQNViITDQYsU0Z
UTdqKl9p16oiyms3iENGeRxIa/lKcRGlsM7R5SqhC2urSlA1n2jaTWLQqof0ZPqm
o7LWiKlRVv4REBR6v3ajugo+IGO0wPQ4INaQRZTidsmg8Wmh9srNyiGw15Kb0OWL
j7x2ywiUSEfutUANSBmjEEbDOrxT27PLwOynC8vc+NAekdpS0TbTzBkpbDfbCvRM
3zNvH18jcajs0H0rlYdlGiEYZD3enQQGFPU=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:17:16 2026 by rpki-client