Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ecfaecbf-cde3-37e4-abfb-6dbb1113e329.roa
File:                     ecfaecbf-cde3-37e4-abfb-6dbb1113e329.roa (raw, json)
Hash identifier:          GlHY5J2VP0Kw5Cq3S2N+SDfzM51Qt3iANHm5NMGHloM=
Subject key identifier:   48:1A:C6:87:87:5A:6A:FE:46:BD:C4:02:6E:AC:99:2B:5F:F1:2A:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDE87FD80089CD60B211478C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ecfaecbf-cde3-37e4-abfb-6dbb1113e329.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     396586
IP address blocks:        2001:503:83eb::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:fd:80:08:9c:d6:0b:21:14:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=bf30237f-f5ec-4bd1-b52d-78a3ff491fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:cf:b1:25:90:1e:37:50:05:1a:77:af:ae:
                    35:6c:f2:b4:05:d6:34:a8:5a:83:70:1a:67:80:c4:
                    19:f7:c0:30:8f:4e:fd:b7:ad:33:4e:85:73:f6:d1:
                    7a:c8:48:23:07:39:a9:ff:4b:6f:d2:14:46:8c:a2:
                    74:d1:e5:3d:c1:02:dd:ba:73:66:aa:3e:e6:3d:31:
                    d6:0c:61:04:cc:9b:09:72:d7:e7:3a:74:6d:87:51:
                    a0:f0:d8:db:b4:71:49:7d:4d:67:53:3b:04:71:61:
                    b1:08:bf:54:7e:d2:68:d9:bb:81:5d:d7:8e:9a:2c:
                    00:66:3c:8a:9d:72:03:17:17:bf:28:bb:f0:dd:ea:
                    11:ed:ce:88:97:2c:86:16:de:bd:c1:54:0d:0c:84:
                    4f:40:e3:54:de:a7:bb:b3:0e:db:4a:1d:d3:37:a0:
                    dc:30:fd:fd:df:50:4c:85:fb:01:f0:76:57:33:be:
                    4f:12:9e:b8:31:66:ab:32:cd:e4:31:73:ab:0c:13:
                    30:ab:47:f2:01:c3:8a:fb:ac:7a:6c:d8:03:bf:3b:
                    8f:aa:66:4d:f6:36:ad:98:ef:b1:6c:5b:cf:cf:db:
                    e6:49:b1:99:92:9a:11:0d:34:b2:ce:d2:5a:d8:bf:
                    e7:34:34:0f:fa:87:eb:38:31:22:da:1c:1b:e5:60:
                    1c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1A:C6:87:87:5A:6A:FE:46:BD:C4:02:6E:AC:99:2B:5F:F1:2A:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ecfaecbf-cde3-37e4-abfb-6dbb1113e329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:83eb:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:51:db:ce:4b:91:d2:32:d4:d6:ec:fb:fe:d3:f4:3c:17:cf:
         a5:9b:aa:15:ca:35:3a:fd:2a:d0:81:aa:e6:68:29:e4:31:64:
         10:82:fe:60:e9:5c:e8:88:c6:3f:8a:d0:fc:e2:d4:f7:ab:e0:
         56:5e:f9:49:0d:46:33:af:68:e7:4e:0c:1d:fc:24:f9:ba:2d:
         a9:7c:c3:ea:b7:1e:62:b1:07:27:98:81:bd:1a:1e:33:3b:6c:
         1b:da:43:8e:54:96:8e:bd:1e:ee:1c:ca:6e:50:e0:70:5a:09:
         7b:70:fd:d5:83:a0:c7:35:aa:59:d2:ae:5d:4b:e0:fe:b3:96:
         cc:ed:bf:3b:c8:b5:a4:3a:48:ff:07:94:15:8f:7d:4e:b2:78:
         8d:e4:9a:89:c4:e3:80:e5:eb:ab:ea:88:38:4e:fb:22:d0:c9:
         6a:41:7d:c6:50:62:dc:52:55:ba:c0:e4:dd:d8:27:04:5e:2b:
         2b:b4:13:86:f6:c8:d2:22:0d:c6:2d:f1:3e:ad:56:7b:b6:50:
         90:aa:19:df:73:e4:9d:dd:fc:29:6c:34:02:a4:56:3b:19:c7:
         94:40:0a:4d:48:05:e9:d5:6a:1d:e0:e5:17:be:93:20:03:ee:
         b9:8d:78:ff:46:df:cf:6f:89:1e:d1:31:5e:43:f0:e8:a2:02:
         cc:94:de:45
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE3eh/2ACJzWCyEUeMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
YmYzMDIzN2YtZjVlYy00YmQxLWI1MmQtNzhhM2ZmNDkxZmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjnPsSWQHjdQBRp3r641bPK0BdY0qFqDcBpn
gMQZ98Awj079t60zToVz9tF6yEgjBzmp/0tv0hRGjKJ00eU9wQLdunNmqj7mPTHW
DGEEzJsJctfnOnRth1Gg8NjbtHFJfU1nUzsEcWGxCL9UftJo2buBXdeOmiwAZjyK
nXIDFxe/KLvw3eoR7c6IlyyGFt69wVQNDIRPQONU3qe7sw7bSh3TN6DcMP3931BM
hfsB8HZXM75PEp64MWarMs3kMXOrDBMwq0fyAcOK+6x6bNgDvzuPqmZN9jatmO+x
bFvPz9vmSbGZkpoRDTSyztJa2L/nNDQP+ofrODEi2hwb5WAcjwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEgaxoeHWmr+Rr3EAm6smStf8SrLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWNmYWVjYmYtY2RlMy0z
N2U0LWFiZmItNmRiYjExMTNlMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA4Pr
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAnUdvOS5HSMtTW7Pv+0/Q8F8+lm6oVyjU6/SrQ
garmaCnkMWQQgv5g6VzoiMY/itD84tT3q+BWXvlJDUYzr2jnTgwd/CT5ui2pfMPq
tx5isQcnmIG9Gh4zO2wb2kOOVJaOvR7uHMpuUOBwWgl7cP3Vg6DHNapZ0q5dS+D+
s5bM7b87yLWkOkj/B5QVj31OsniN5JqJxOOA5eur6og4Tvsi0MlqQX3GUGLcUlW6
wOTd2CcEXisrtBOG9sjSIg3GLfE+rVZ7tlCQqhnfc+Sd3fwpbDQCpFY7GceUQApN
SAXp1Wod4OUXvpMgA+65jXj/Rt/Pb4ke0TFeQ/DoogLMlN5F
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:08:19 2026 by rpki-client