Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc60c2f2-7eec-350d-b561-e786c95426b0.roa
File:                     bc60c2f2-7eec-350d-b561-e786c95426b0.roa (raw, json)
Hash identifier:          wxW9UKKMcbNYf4EA8SlRVMg6iMUFqEq6WA/sV4+kRJQ=
Subject key identifier:   5F:7F:EB:8B:CD:1E:18:9E:6C:DC:5C:7C:AB:1E:50:BD:E3:2E:81:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0700A71032DA2814D7DFF180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc60c2f2-7eec-350d-b561-e786c95426b0.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     396588
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:a7:10:32:da:28:14:d7:df:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=10fba49e-c180-464c-aaf2-d59ea1767d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:be:5d:b5:45:f2:c3:53:22:3f:43:82:56:c4:
                    90:0f:a7:bd:54:92:a1:9d:08:45:ab:aa:c5:80:92:
                    e3:bb:8d:88:0f:08:43:b5:0c:23:cd:a0:34:7d:99:
                    52:9f:c2:8f:e4:09:d1:e4:54:8b:5f:69:dc:7a:93:
                    75:f1:b1:9c:00:32:2d:c4:ce:f8:b8:51:9e:57:cd:
                    68:34:96:06:3b:34:c1:ac:40:f3:2f:80:ce:b9:74:
                    5a:3e:00:f5:50:dc:7e:81:39:4b:cd:45:59:1a:98:
                    a8:ca:58:4e:07:64:f9:45:27:3d:44:e4:e2:8a:3e:
                    0f:98:d0:8a:5b:2e:32:59:7e:2d:7c:24:1d:d0:15:
                    44:3e:42:50:58:ba:a9:7e:70:2f:dd:d8:79:17:d3:
                    5e:0e:66:9d:de:db:a3:1f:f7:c7:cf:c8:f7:3c:db:
                    03:4f:af:a8:23:e0:18:27:15:73:3b:9e:b9:b4:3f:
                    93:0a:e6:8d:a3:7e:30:93:d1:58:74:2d:92:57:ab:
                    08:1e:d8:ed:42:0d:39:9f:c1:97:4c:d9:a9:eb:0a:
                    f8:32:0b:ad:60:21:89:69:86:c1:bf:c6:10:db:fc:
                    9c:3e:4c:6d:ec:ae:16:7c:db:db:d3:04:2d:f9:78:
                    9c:65:31:86:e8:b7:f8:f7:46:85:18:33:fd:68:eb:
                    61:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7F:EB:8B:CD:1E:18:9E:6C:DC:5C:7C:AB:1E:50:BD:E3:2E:81:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc60c2f2-7eec-350d-b561-e786c95426b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:0e:fd:00:59:5d:b5:50:80:de:d5:12:5a:d3:2e:65:e3:de:
         d4:d6:c5:0e:5b:8a:7b:f2:54:57:f3:42:c3:aa:3b:bd:10:6b:
         21:10:3c:c1:92:71:e2:bb:05:fe:9b:39:53:49:82:09:69:89:
         ca:92:ab:68:5b:46:e2:3d:bc:d4:e3:2f:dd:98:23:0f:d8:bd:
         be:3c:65:f0:47:c9:d5:8b:37:42:71:c1:f1:bf:2e:b9:f3:71:
         2e:9a:d4:4b:78:32:cc:2a:23:24:4c:63:34:33:15:93:3f:df:
         4c:ed:63:5e:72:dd:90:17:79:ee:7c:e0:08:81:ba:a1:4c:73:
         12:92:36:c7:21:f3:62:ac:e3:56:88:3a:71:26:7b:67:d9:b1:
         c1:1d:43:27:d4:76:db:19:03:b6:65:01:06:13:57:22:36:11:
         1b:87:12:be:97:00:f6:73:59:f2:59:30:72:b1:3d:e7:af:5b:
         4b:a9:39:31:46:12:8a:88:fd:3e:59:bf:ec:fd:5f:df:85:bb:
         7a:e8:13:3e:c2:23:b6:75:74:60:14:e4:73:fc:21:d1:02:6c:
         3d:53:fb:36:c0:3a:99:a0:6f:18:4b:63:7d:d7:30:16:ef:57:
         af:7b:a0:e7:52:c1:e5:f8:03:08:e4:ad:3e:dd:af:4e:2f:f0:
         4b:26:5f:f6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4HAKcQMtooFNff8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk
MTBmYmE0OWUtYzE4MC00NjRjLWFhZjItZDU5ZWExNzY3ZDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL5dtUXyw1MiP0OCVsSQD6e9VJKhnQhFq6rF
gJLju42IDwhDtQwjzaA0fZlSn8KP5AnR5FSLX2ncepN18bGcADItxM74uFGeV81o
NJYGOzTBrEDzL4DOuXRaPgD1UNx+gTlLzUVZGpioylhOB2T5RSc9ROTiij4PmNCK
Wy4yWX4tfCQd0BVEPkJQWLqpfnAv3dh5F9NeDmad3tujH/fHz8j3PNsDT6+oI+AY
JxVzO565tD+TCuaNo34wk9FYdC2SV6sIHtjtQg05n8GXTNmp6wr4MgutYCGJaYbB
v8YQ2/ycPkxt7K4WfNvb0wQt+XicZTGG6Lf490aFGDP9aOth+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF9/64vNHhiebNxcfKseUL3jLoFGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmM2MGMyZjItN2VlYy0z
NTBkLWI1NjEtZTc4NmM5NTQyNmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEgO/QBZXbVQgN7VElrTLmXj3tTWxQ5binvyVFfzQsOqO70QayEQ
PMGSceK7Bf6bOVNJgglpicqSq2hbRuI9vNTjL92YIw/Yvb48ZfBHydWLN0JxwfG/
LrnzcS6a1Et4MswqIyRMYzQzFZM/30ztY15y3ZAXee584AiBuqFMcxKSNsch82Ks
41aIOnEme2fZscEdQyfUdtsZA7ZlAQYTVyI2ERuHEr6XAPZzWfJZMHKxPeevW0up
OTFGEoqI/T5Zv+z9X9+Fu3roEz7CI7Z1dGAU5HP8IdECbD1T+zbAOpmgbxhLY33X
MBbvV697oOdSweX4AwjkrT7dr04v8EsmX/Y=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:08:24 2026 by rpki-client