Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da9387f4-b8e0-39ae-bbbb-23ef8dc7d9f2.roa
File:                     da9387f4-b8e0-39ae-bbbb-23ef8dc7d9f2.roa (raw, json)
Hash identifier:          26UOe6PPwOGcbnUZ0WABBqPfZMtn1RzDsHZpFICE3Bw=
Subject key identifier:   BC:D2:CA:48:F4:5D:C8:43:48:68:71:98:F1:D0:F7:22:59:DD:38:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D732BD87C7B83F6BA660ACE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da9387f4-b8e0-39ae-bbbb-23ef8dc7d9f2.roa
Signing time:             Thu 09 Apr 2026 14:07:53 +0000
ROA not before:           Thu 09 Apr 2026 14:07:53 +0000
ROA not after:            Wed 08 Jul 2026 14:07:53 +0000
asID:                     396567
IP address blocks:        2001:500:133::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:2b:d8:7c:7b:83:f6:ba:66:0a:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  9 14:07:53 2026 GMT
            Not After : Jul  8 14:07:53 2026 GMT
        Subject: CN=d5e1dead-4106-4d5c-9390-59648138969c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:65:ac:8e:8c:c5:ec:fa:79:d3:c6:8b:20:be:
                    18:3c:b6:64:db:23:fc:14:27:d0:6f:2d:d0:0a:28:
                    85:ec:38:b0:bf:79:45:49:cb:73:1e:75:f9:60:52:
                    79:e9:44:37:0e:d2:27:6a:3b:f5:a4:5c:a4:82:99:
                    62:d1:da:4e:fc:1e:c7:48:3a:84:fb:da:2c:e2:09:
                    74:df:c4:91:5b:07:9a:31:a5:f5:1c:5c:66:f9:64:
                    df:fb:b7:cf:b6:1f:7c:c8:3c:20:53:6a:db:57:a4:
                    c9:7d:4e:99:c8:92:50:c9:8a:e7:7b:16:87:3e:19:
                    76:dc:8e:00:d5:43:4e:91:af:d9:4d:1a:2c:37:09:
                    4d:eb:70:51:c2:3f:43:3d:e2:04:48:4c:e9:fd:1b:
                    b6:7f:04:10:9d:d2:90:64:14:a3:85:c2:be:52:b5:
                    03:23:c7:13:1c:92:69:f8:24:5f:65:55:1d:aa:b6:
                    27:58:36:fa:52:64:30:fb:5d:de:db:2e:d8:d2:5f:
                    21:00:34:3e:9d:a4:27:33:8a:c7:b3:df:7e:69:f6:
                    ae:e0:56:7e:56:15:8a:ea:3e:e4:0d:a8:5b:d1:18:
                    10:34:9e:6f:6b:b3:a8:8b:25:e6:de:ad:08:0d:c6:
                    0e:be:30:7a:1a:7f:75:a3:c6:c1:8d:5e:dd:a0:5f:
                    90:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D2:CA:48:F4:5D:C8:43:48:68:71:98:F1:D0:F7:22:59:DD:38:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da9387f4-b8e0-39ae-bbbb-23ef8dc7d9f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:2f:81:6c:d2:66:9a:53:ef:6f:3b:c5:9c:d7:6c:e4:67:ce:
         e0:eb:b5:dc:c9:d0:32:b4:78:12:76:48:e7:58:24:d6:24:f9:
         33:df:65:92:a2:90:86:e7:14:a2:5e:7a:a4:12:9f:98:df:d6:
         69:e1:63:aa:5c:96:2c:61:b7:58:d8:29:48:53:de:41:87:f6:
         b7:a8:39:41:15:54:71:c5:ee:89:76:14:12:3f:a7:51:42:e2:
         01:fe:e4:12:42:28:a3:6a:5a:82:87:ac:e4:60:db:ab:a0:6d:
         e8:86:7b:a3:20:a6:25:8e:25:47:50:5c:19:aa:36:94:ac:39:
         77:b3:4e:ee:d1:c3:78:d2:4a:a0:20:74:5e:45:b1:b5:c1:55:
         e0:5a:75:64:1f:2d:43:a1:c6:27:69:3e:e9:60:32:0b:b7:cf:
         e6:c3:aa:be:1f:37:b5:71:81:17:41:e4:f2:01:52:b1:76:bb:
         ca:c1:f4:1f:a3:cf:b3:a7:9a:49:a3:7f:e2:02:d9:c7:de:59:
         b8:f1:be:d5:e5:8d:9a:3a:1c:71:e5:b0:4a:d3:85:76:e7:08:
         4f:a8:48:e2:a1:ab:32:79:7a:91:e8:58:b9:e1:e2:ac:0b:6f:
         dc:e7:eb:05:a1:b8:6e:c3:6a:22:4e:1e:35:c7:ad:5b:cb:39:
         39:3b:96:ae
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zK9h8e4P2umYKzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwOTE0MDc1M1oXDTI2MDcwODE0MDc1M1owLzEtMCsGA1UEAxMk
ZDVlMWRlYWQtNDEwNi00ZDVjLTkzOTAtNTk2NDgxMzg5NjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12WsjozF7Pp508aLIL4YPLZk2yP8FCfQby3Q
CiiF7Diwv3lFSctzHnX5YFJ56UQ3DtInajv1pFykgpli0dpO/B7HSDqE+9os4gl0
38SRWweaMaX1HFxm+WTf+7fPth98yDwgU2rbV6TJfU6ZyJJQyYrnexaHPhl23I4A
1UNOka/ZTRosNwlN63BRwj9DPeIESEzp/Ru2fwQQndKQZBSjhcK+UrUDI8cTHJJp
+CRfZVUdqrYnWDb6UmQw+13e2y7Y0l8hADQ+naQnM4rHs99+afau4FZ+VhWK6j7k
Dahb0RgQNJ5va7OoiyXm3q0IDcYOvjB6Gn91o8bBjV7doF+QdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLzSykj0XchDSGhxmPHQ9yJZ3Ti+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGE5Mzg3ZjQtYjhlMC0z
OWFlLWJiYmItMjNlZjhkYzdkOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB0vgWzSZppT7287xZzXbORnzuDrtdzJ0DK0eBJ2SOdYJNYk+TPf
ZZKikIbnFKJeeqQSn5jf1mnhY6pclixht1jYKUhT3kGH9reoOUEVVHHF7ol2FBI/
p1FC4gH+5BJCKKNqWoKHrORg26ugbeiGe6MgpiWOJUdQXBmqNpSsOXezTu7Rw3jS
SqAgdF5FsbXBVeBadWQfLUOhxidpPulgMgu3z+bDqr4fN7VxgRdB5PIBUrF2u8rB
9B+jz7Onmkmjf+IC2cfeWbjxvtXljZo6HHHlsErThXbnCE+oSOKhqzJ5epHoWLnh
4qwLb9zn6wWhuG7DaiJOHjXHrVvLOTk7lq4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:18:45 2026 by rpki-client