Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d408addb-8ee9-36e1-81d1-e115b2c60bdc.roa
File:                     d408addb-8ee9-36e1-81d1-e115b2c60bdc.roa (raw, json)
Hash identifier:          GBrYrHubr5KfHbGSZcO1u6QoyIFiOYg9F0q+4aQX3HM=
Subject key identifier:   31:4D:77:11:DF:C3:1C:93:80:68:E2:D6:A7:0E:D2:02:E6:BA:8C:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DEC7B3BE09EB3E268FA14FEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d408addb-8ee9-36e1-81d1-e115b2c60bdc.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     396609
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:3b:e0:9e:b3:e2:68:fa:14:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=dc84ba21-b026-4495-8818-08b34d9e7739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:90:f4:e9:f8:72:18:78:a0:fd:50:b4:bb:98:
                    91:fc:6e:47:50:da:15:78:2d:74:ba:e7:8d:a3:96:
                    c1:d3:cf:f6:ed:4e:a1:0f:93:38:01:0a:00:c7:ca:
                    4e:24:d1:4a:28:da:f2:98:e5:e9:6f:89:a8:2f:19:
                    95:d5:33:4b:8d:40:da:b1:e6:0c:2b:56:c5:f6:88:
                    7c:fe:1c:1a:2c:da:11:37:10:91:00:42:07:12:88:
                    78:59:b3:f4:f7:c3:6d:5e:7e:b7:84:34:f7:f6:73:
                    70:f6:6e:b8:75:53:08:47:9d:e3:2b:88:a3:92:96:
                    65:80:e2:dd:b1:ff:2b:d9:ed:fa:93:93:d2:d4:fe:
                    97:bd:ed:48:11:f1:40:b5:a1:f2:39:04:23:ba:6f:
                    0c:fb:44:c5:af:3e:dc:34:95:8a:cb:f0:4a:b2:25:
                    fd:ba:47:5c:48:68:6b:97:fd:7b:7b:de:fa:55:93:
                    74:d5:d7:bd:a5:36:77:8a:41:0f:b2:d8:31:f7:36:
                    bd:c2:23:f6:4b:63:4f:b1:04:38:f8:3c:9a:47:55:
                    8e:ac:7a:89:a4:b9:5a:ff:3f:04:7e:cf:3b:f0:dd:
                    3c:66:95:ba:c9:fd:83:cc:44:d4:21:dc:e9:b8:57:
                    66:e6:83:10:bb:e8:3e:fd:f6:55:7e:30:f3:8c:ee:
                    9d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4D:77:11:DF:C3:1C:93:80:68:E2:D6:A7:0E:D2:02:E6:BA:8C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d408addb-8ee9-36e1-81d1-e115b2c60bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:b7:bb:93:f1:0f:f7:fa:91:54:03:df:db:9a:04:b3:c6:79:
         50:3f:df:ac:0b:31:c1:a7:b8:1a:d1:18:a3:19:fb:82:10:c1:
         6a:72:eb:71:46:51:00:6b:c8:39:e7:62:e3:ed:f8:95:c4:86:
         5d:a7:d0:bd:25:f9:16:b8:aa:00:71:f7:6c:e3:78:00:eb:98:
         db:65:69:50:de:f6:1a:0d:54:2f:28:98:02:4f:f9:9f:64:3e:
         d7:18:2c:b4:fc:79:83:d4:30:32:e2:3c:9e:09:d0:85:6f:aa:
         30:50:70:7e:79:ef:75:96:90:e6:f9:c9:9c:00:b7:50:04:ac:
         54:e1:1c:b8:2a:b8:0d:c1:35:ef:e6:36:5f:2e:69:6c:cc:df:
         2f:72:fd:81:43:5a:91:3b:59:0b:44:4a:f5:03:d4:2f:01:88:
         83:e3:25:d4:85:a2:5d:e1:e5:c7:96:85:e2:cb:1d:5a:64:e8:
         5d:9b:dc:0f:e4:d5:19:50:7b:fe:56:db:97:d6:1a:16:6f:af:
         d2:fc:c6:31:a4:41:12:bd:3c:4c:8e:da:09:b5:3b:7c:b5:36:
         25:a2:c9:07:63:07:42:a0:ba:85:ff:a6:ee:54:28:05:85:d3:
         62:86:31:06:82:71:9e:c7:34:50:c6:83:28:9c:96:f4:d1:8e:
         a3:5a:c8:db
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3sezvgnrPiaPoU/sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk
ZGM4NGJhMjEtYjAyNi00NDk1LTg4MTgtMDhiMzRkOWU3NzM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5D06fhyGHig/VC0u5iR/G5HUNoVeC10uueN
o5bB08/27U6hD5M4AQoAx8pOJNFKKNrymOXpb4moLxmV1TNLjUDaseYMK1bF9oh8
/hwaLNoRNxCRAEIHEoh4WbP098NtXn63hDT39nNw9m64dVMIR53jK4ijkpZlgOLd
sf8r2e36k5PS1P6Xve1IEfFAtaHyOQQjum8M+0TFrz7cNJWKy/BKsiX9ukdcSGhr
l/17e976VZN01de9pTZ3ikEPstgx9za9wiP2S2NPsQQ4+DyaR1WOrHqJpLla/z8E
fs878N08ZpW6yf2DzETUIdzpuFdm5oMQu+g+/fZVfjDzjO6dNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDFNdxHfwxyTgGji1qcO0gLmuozmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDQwOGFkZGItOGVlOS0z
NmUxLTgxZDEtZTExNWIyYzYwYmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALu3u5PxD/f6kVQD39uaBLPGeVA/36wLMcGnuBrRGKMZ+4IQwWpy
63FGUQBryDnnYuPt+JXEhl2n0L0l+Ra4qgBx92zjeADrmNtlaVDe9hoNVC8omAJP
+Z9kPtcYLLT8eYPUMDLiPJ4J0IVvqjBQcH5573WWkOb5yZwAt1AErFThHLgquA3B
Ne/mNl8uaWzM3y9y/YFDWpE7WQtESvUD1C8BiIPjJdSFol3h5ceWheLLHVpk6F2b
3A/k1RlQe/5W25fWGhZvr9L8xjGkQRK9PEyO2gm1O3y1NiWiyQdjB0KguoX/pu5U
KAWF02KGMQaCcZ7HNFDGgyiclvTRjqNayNs=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:10:02 2026 by rpki-client