Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dee1d3ce-7393-3800-8689-695c3ea960bb.roa
File:                     dee1d3ce-7393-3800-8689-695c3ea960bb.roa (raw, json)
Hash identifier:          /YVV1mSQKJ4FDnWeMsZJPC3uiPfIhpcT7EfRtkn1hYc=
Subject key identifier:   47:C6:1D:EC:D0:DE:62:15:9E:3B:81:86:84:D3:DA:E3:96:14:2F:3B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DFA709CB03911120D7B408800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dee1d3ce-7393-3800-8689-695c3ea960bb.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     396606
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:9c:b0:39:11:12:0d:7b:40:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=bdf3062f-10d3-442c-b47c-6d28b0f2f096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:5a:55:0c:c4:66:7d:96:ea:0c:3f:91:bb:
                    c3:6f:bc:4a:d2:47:f2:73:72:78:5c:e6:7f:fd:35:
                    2a:38:65:86:a0:bf:99:09:77:da:16:14:ce:38:5f:
                    38:5d:a4:8f:bb:94:75:f3:74:18:76:76:9f:78:e3:
                    c1:02:be:47:3b:bf:86:88:72:2a:e4:5f:d7:ae:c9:
                    29:e0:a8:e4:89:c3:55:75:91:39:f2:91:53:02:f3:
                    c9:41:20:a5:62:42:80:38:1e:fe:d8:c0:73:5a:54:
                    8d:2a:73:d6:48:a4:cd:72:66:92:96:46:17:c5:be:
                    a8:ae:2e:87:ea:58:83:6e:03:70:46:4a:7c:a9:b3:
                    cf:60:73:cc:a4:43:c9:18:0e:4d:23:1c:7c:b6:3d:
                    b9:a3:06:fa:d6:b7:84:39:03:8c:d2:83:47:71:65:
                    11:ed:d8:14:8e:9d:d9:b8:87:d5:8a:c0:39:a6:b3:
                    2a:23:fb:42:69:c2:39:50:8a:4b:c7:da:52:fd:f0:
                    2a:d1:a5:73:05:df:37:15:18:39:d9:1f:0d:59:16:
                    d3:d8:d3:3c:bd:77:45:69:a6:2f:15:02:23:f7:98:
                    67:a9:af:4e:55:6d:e1:1e:7a:8a:1e:69:c5:9c:bd:
                    0b:c6:60:ad:f9:8b:6b:27:6f:e1:2e:8f:41:bd:4a:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C6:1D:EC:D0:DE:62:15:9E:3B:81:86:84:D3:DA:E3:96:14:2F:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dee1d3ce-7393-3800-8689-695c3ea960bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:4b:7a:45:8a:7e:ea:6b:eb:4c:6b:95:86:9d:69:09:30:b7:
         09:30:e5:f8:51:6c:18:47:da:46:30:d4:2c:70:77:50:f9:b4:
         5f:41:f4:48:49:81:47:4a:0a:53:fe:27:2b:1f:da:5e:1d:db:
         2c:c3:68:c2:ba:d0:6b:1b:94:69:83:cc:c2:77:ea:01:a5:b5:
         d6:51:35:29:c7:40:cb:51:9c:64:5f:57:87:98:e8:2f:2e:f8:
         0b:5d:c2:25:68:e1:54:35:79:46:fc:51:f8:95:22:61:9f:32:
         3e:62:62:6e:df:85:a7:fd:f7:a9:72:97:0e:51:7e:22:a8:22:
         ed:b9:96:31:df:43:87:23:d0:3a:f4:e7:ef:47:f5:8e:bf:91:
         e5:21:c0:8b:b3:95:7a:b4:ec:35:96:aa:f3:6a:8d:8a:9a:1f:
         92:32:89:8f:24:73:70:22:db:5a:0a:b5:aa:36:82:76:6b:dd:
         60:b4:c9:1e:99:21:db:08:d0:c0:b3:f2:18:6c:f7:1c:71:72:
         3d:56:7c:1d:84:dc:ab:8e:cc:b1:ea:6e:21:d6:6f:c9:a6:cc:
         7e:15:72:af:7f:e9:9b:8b:09:67:65:b4:94:df:33:b0:73:8b:
         27:cb:a7:e7:52:48:ef:8e:26:e9:1b:58:89:45:6b:4e:91:b1:
         b3:07:7e:2e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE36cJywORESDXtAiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk
YmRmMzA2MmYtMTBkMy00NDJjLWI0N2MtNmQyOGIwZjJmMDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC5aVQzEZn2W6gw/kbvDb7xK0kfyc3J4XOZ/
/TUqOGWGoL+ZCXfaFhTOOF84XaSPu5R183QYdnafeOPBAr5HO7+GiHIq5F/Xrskp
4KjkicNVdZE58pFTAvPJQSClYkKAOB7+2MBzWlSNKnPWSKTNcmaSlkYXxb6ori6H
6liDbgNwRkp8qbPPYHPMpEPJGA5NIxx8tj25owb61reEOQOM0oNHcWUR7dgUjp3Z
uIfVisA5prMqI/tCacI5UIpLx9pS/fAq0aVzBd83FRg52R8NWRbT2NM8vXdFaaYv
FQIj95hnqa9OVW3hHnqKHmnFnL0LxmCt+YtrJ2/hLo9BvUrdVQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEfGHezQ3mIVnjuBhoTT2uOWFC87MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGVlMWQzY2UtNzM5My0z
ODAwLTg2ODktNjk1YzNlYTk2MGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA+S3pFin7qa+tMa5WGnWkJMLcJMOX4UWwYR9pG
MNQscHdQ+bRfQfRISYFHSgpT/icrH9peHdssw2jCutBrG5Rpg8zCd+oBpbXWUTUp
x0DLUZxkX1eHmOgvLvgLXcIlaOFUNXlG/FH4lSJhnzI+YmJu34Wn/fepcpcOUX4i
qCLtuZYx30OHI9A69OfvR/WOv5HlIcCLs5V6tOw1lqrzao2Kmh+SMomPJHNwItta
CrWqNoJ2a91gtMkemSHbCNDAs/IYbPcccXI9VnwdhNyrjsyx6m4h1m/Jpsx+FXKv
f+mbiwlnZbSU3zOwc4sny6fnUkjvjibpG1iJRWtOkbGzB34u
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:33:08 2026 by rpki-client