Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be069f63-d5fb-372f-bc3c-08d03ac45fdc.roa
File:                     be069f63-d5fb-372f-bc3c-08d03ac45fdc.roa (raw, json)
Hash identifier:          roY8FVWlYbA8hS9dmttmDrcwsYxB/q+eA3e7CdVO7vs=
Subject key identifier:   4B:77:48:F2:F8:8B:15:36:4C:D8:01:D3:7E:7E:03:DF:8F:51:0F:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C7F414B96875D02525DE7
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be069f63-d5fb-372f-bc3c-08d03ac45fdc.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     397202
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:7f:41:4b:96:87:5d:02:52:5d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=b96211e0-9187-4f23-823b-e2dde5424499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7f:9b:59:5e:f6:54:b7:d0:62:09:17:de:35:
                    ff:52:a9:85:b0:da:7a:db:33:81:17:dc:24:1f:2d:
                    ce:8d:e6:14:05:bc:52:b9:b2:84:5c:75:0f:31:1e:
                    b2:9c:17:a7:7c:61:d5:a2:df:b5:af:fb:6f:5b:3e:
                    bc:cb:0d:e1:bc:54:0b:e8:7b:92:75:74:db:b3:40:
                    20:6b:6f:c2:59:2c:d2:d7:1e:e6:5f:60:6a:17:0d:
                    73:71:ef:c1:4c:f9:f7:e7:02:0c:b0:49:f7:18:23:
                    25:9d:fd:58:d6:3d:e0:1d:57:55:65:ce:0d:b8:e9:
                    82:d3:3a:ba:13:ad:92:7d:ae:39:24:08:54:b8:f2:
                    46:38:1f:71:49:c7:54:27:08:e8:75:09:54:2f:9b:
                    65:bc:7a:27:1b:55:de:11:64:c1:70:5c:7a:fc:6a:
                    2b:c6:02:01:8c:54:39:34:62:65:58:08:39:57:cf:
                    b6:75:c9:c2:3b:1c:31:65:1a:77:2e:aa:ff:8f:b0:
                    80:a0:3b:05:1e:a1:11:dc:be:6d:a7:93:91:68:04:
                    7d:d0:76:e2:07:1c:c4:d0:17:d0:01:7a:25:5b:07:
                    f9:04:82:4c:c4:69:1d:24:37:1f:3f:67:f9:23:30:
                    af:55:a9:6c:61:46:42:b6:b6:dd:13:fd:28:5e:92:
                    0a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:77:48:F2:F8:8B:15:36:4C:D8:01:D3:7E:7E:03:DF:8F:51:0F:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be069f63-d5fb-372f-bc3c-08d03ac45fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d1:56:04:45:6f:a5:a8:d1:f8:b9:95:7b:ef:8a:9c:d0:ef:
         06:0d:cf:2c:6a:41:73:d1:1e:47:53:e7:0e:7d:f9:3c:d4:ff:
         cf:4b:52:20:1e:39:bb:73:f0:60:5a:b1:f3:8c:40:b9:dd:bd:
         a7:e2:d8:5e:fc:ad:0e:f5:28:19:4a:18:1b:9b:fd:f9:45:d1:
         ea:43:e5:53:de:6b:85:19:af:64:ed:ee:0d:35:05:a0:63:36:
         ea:c0:4c:03:af:7b:26:5a:e1:c3:63:1b:39:20:b7:c3:08:d4:
         58:8d:85:33:c6:0a:08:8a:9c:1e:33:81:c9:90:48:fe:e5:c1:
         cc:f9:69:e4:ed:36:c1:7f:e0:8d:fe:07:98:eb:ca:93:4e:e6:
         a4:f2:26:61:67:d3:47:20:b2:73:d2:0a:a5:b1:5a:e9:e5:fb:
         4b:6d:78:cc:36:0e:bd:ab:2e:c2:85:33:b2:66:ea:c5:d7:65:
         18:0a:bc:5e:85:76:4f:3a:6d:2a:b1:11:09:81:a5:c0:7c:36:
         f3:4f:59:cb:8c:ce:e7:f6:42:12:0c:f2:1a:95:23:98:08:12:
         62:14:72:64:17:23:87:37:7a:3c:78:e3:25:1f:03:6a:04:f6:
         4e:92:62:29:bd:3c:77:59:47:7c:5d:a7:b1:e7:fd:82:e0:36:
         0b:2a:09:ce
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnH9BS5aHXQJSXecwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
Yjk2MjExZTAtOTE4Ny00ZjIzLTgyM2ItZTJkZGU1NDI0NDk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn+bWV72VLfQYgkX3jX/UqmFsNp62zOBF9wk
Hy3OjeYUBbxSubKEXHUPMR6ynBenfGHVot+1r/tvWz68yw3hvFQL6HuSdXTbs0Ag
a2/CWSzS1x7mX2BqFw1zce/BTPn35wIMsEn3GCMlnf1Y1j3gHVdVZc4NuOmC0zq6
E62Sfa45JAhUuPJGOB9xScdUJwjodQlUL5tlvHonG1XeEWTBcFx6/GorxgIBjFQ5
NGJlWAg5V8+2dcnCOxwxZRp3Lqr/j7CAoDsFHqER3L5tp5ORaAR90HbiBxzE0BfQ
AXolWwf5BIJMxGkdJDcfP2f5IzCvValsYUZCtrbdE/0oXpIKuQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEt3SPL4ixU2TNgB035+A9+PUQ/AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmUwNjlmNjMtZDVmYi0z
NzJmLWJjM2MtMDhkMDNhYzQ1ZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGLRVgRFb6Wo0fi5lXvvipzQ7wYNzyxqQXPRHkdT5w59+TzU/89L
UiAeObtz8GBasfOMQLndvafi2F78rQ71KBlKGBub/flF0epD5VPea4UZr2Tt7g01
BaBjNurATAOveyZa4cNjGzkgt8MI1FiNhTPGCgiKnB4zgcmQSP7lwcz5aeTtNsF/
4I3+B5jrypNO5qTyJmFn00cgsnPSCqWxWunl+0tteMw2Dr2rLsKFM7Jm6sXXZRgK
vF6Fdk86bSqxEQmBpcB8NvNPWcuMzuf2QhIM8hqVI5gIEmIUcmQXI4c3ejx44yUf
A2oE9k6SYim9PHdZR3xdp7Hn/YLgNgsqCc4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:54:05 2026 by rpki-client