Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2dd81f5-9841-31ca-9468-4e4b36480488.roa
File:                     c2dd81f5-9841-31ca-9468-4e4b36480488.roa (raw, json)
Hash identifier:          DyuVLt8XI3X0gy28RVzjDdu1aOFGYX22+kkWu0Bh3oY=
Subject key identifier:   73:B6:53:E7:0F:88:3C:1F:C0:BE:9C:FD:38:CF:A1:EE:FA:68:90:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DFA709EB10F70D8ABA2DBF180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2dd81f5-9841-31ca-9468-4e4b36480488.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     396545
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:9e:b1:0f:70:d8:ab:a2:db:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=79b969f1-4b96-4367-be6c-4e57b9a33e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:43:d3:6b:19:5a:32:72:8c:18:b0:f9:e6:f5:
                    d8:0e:17:a8:02:a1:cd:9e:bc:13:91:d2:98:0f:f4:
                    99:f9:0b:bc:7d:04:94:49:e8:f9:e6:06:49:fa:b9:
                    cc:17:c4:8f:21:8a:f7:79:44:07:db:c0:2b:1f:b7:
                    de:51:03:e1:31:13:1c:23:3f:1a:59:ed:c1:09:eb:
                    b0:d0:6e:41:b8:15:42:0c:c9:c6:70:0d:e1:e3:85:
                    b9:bb:2c:05:52:97:97:16:04:cf:65:2b:26:50:a0:
                    5a:20:37:01:35:7e:68:08:cb:55:2e:44:ff:4c:3b:
                    d0:0a:4a:6c:0e:e1:17:80:fc:6c:13:20:5c:d4:81:
                    fd:54:50:f5:c6:ae:13:73:da:6b:64:64:96:bf:b9:
                    2b:59:36:73:a0:61:53:96:26:1c:eb:20:4a:6b:59:
                    f0:c5:84:13:0d:3a:19:a5:a2:cf:4f:b5:6b:32:b7:
                    18:14:db:d9:91:cc:1c:e4:ad:e6:47:1d:bf:48:6d:
                    7f:30:fa:aa:de:b6:71:f7:2b:15:d9:ae:65:07:9d:
                    74:54:5f:29:d8:95:9f:32:ef:af:6d:5d:28:37:98:
                    8f:d2:2d:04:5a:2d:3e:51:58:9b:bd:fc:17:64:a4:
                    cf:19:84:84:d2:26:7c:f6:e1:5c:c1:29:d5:68:5f:
                    04:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B6:53:E7:0F:88:3C:1F:C0:BE:9C:FD:38:CF:A1:EE:FA:68:90:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2dd81f5-9841-31ca-9468-4e4b36480488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d9:5d:8b:b7:54:0d:82:f5:11:df:93:20:ff:00:e9:a2:52:
         57:e6:28:10:2b:1b:fa:65:1e:d5:c4:a3:d8:30:f1:b2:e8:fd:
         a6:2e:6c:b6:0a:1a:0d:05:21:aa:19:f4:6a:77:0c:14:98:99:
         a5:04:de:88:d1:f8:01:7a:c1:26:cb:9e:ca:fd:ce:dc:94:92:
         f9:94:49:3b:92:19:25:eb:45:6d:0e:ac:61:b0:52:ef:f0:1f:
         a6:2c:a1:e3:de:65:d5:8b:0d:42:ea:38:49:ca:a7:bd:33:88:
         5c:92:7b:84:7f:91:4d:1a:79:75:ba:dc:b0:63:c3:63:85:4b:
         75:14:4d:88:e7:6d:a3:27:6d:3f:68:8c:5d:ae:83:f8:62:67:
         6f:26:e4:a6:c9:db:db:0e:a1:5f:23:50:ee:cd:6a:2c:2d:e1:
         df:ae:c3:64:6c:8f:b1:05:56:13:31:be:d9:2d:ab:df:de:1f:
         aa:93:c7:38:be:42:6f:81:18:36:96:97:e2:05:75:88:45:0e:
         28:e7:54:bd:d3:a8:37:5f:7d:f0:cd:a4:ec:2e:2d:7d:36:85:
         91:2e:d6:35:f0:58:5f:f4:45:25:44:60:a9:f0:c2:10:55:63:
         fc:c9:7b:d6:0c:f5:ac:59:9e:bd:d0:72:41:18:13:8d:18:16:
         f9:ff:f3:27
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE36cJ6xD3DYq6Lb8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk
NzliOTY5ZjEtNGI5Ni00MzY3LWJlNmMtNGU1N2I5YTMzZTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUPTaxlaMnKMGLD55vXYDheoAqHNnrwTkdKY
D/SZ+Qu8fQSUSej55gZJ+rnMF8SPIYr3eUQH28ArH7feUQPhMRMcIz8aWe3BCeuw
0G5BuBVCDMnGcA3h44W5uywFUpeXFgTPZSsmUKBaIDcBNX5oCMtVLkT/TDvQCkps
DuEXgPxsEyBc1IH9VFD1xq4Tc9prZGSWv7krWTZzoGFTliYc6yBKa1nwxYQTDToZ
paLPT7VrMrcYFNvZkcwc5K3mRx2/SG1/MPqq3rZx9ysV2a5lB510VF8p2JWfMu+v
bV0oN5iP0i0EWi0+UVibvfwXZKTPGYSE0iZ89uFcwSnVaF8EuQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHO2U+cPiDwfwL6c/TjPoe76aJA3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzJkZDgxZjUtOTg0MS0z
MWNhLTk0NjgtNGU0YjM2NDgwNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBD2V2Lt1QNgvUR35Mg/wDpolJX5igQKxv6ZR7V
xKPYMPGy6P2mLmy2ChoNBSGqGfRqdwwUmJmlBN6I0fgBesEmy57K/c7clJL5lEk7
khkl60VtDqxhsFLv8B+mLKHj3mXViw1C6jhJyqe9M4hcknuEf5FNGnl1utywY8Nj
hUt1FE2I522jJ20/aIxdroP4YmdvJuSmydvbDqFfI1DuzWosLeHfrsNkbI+xBVYT
Mb7ZLavf3h+qk8c4vkJvgRg2lpfiBXWIRQ4o51S906g3X33wzaTsLi19NoWRLtY1
8Fhf9EUlRGCp8MIQVWP8yXvWDPWsWZ690HJBGBONGBb5//Mn
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:38:14 2026 by rpki-client