Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f06bac13-c3b7-32b9-b931-63a27bc1efa2.roa
File:                     f06bac13-c3b7-32b9-b931-63a27bc1efa2.roa (raw, json)
Hash identifier:          6P4GQAm7ydnPDutw8k4vhFEhxi5/E4pI8Sl3PFR4Eho=
Subject key identifier:   B5:8C:30:7A:70:70:23:96:15:D7:4A:A5:B7:E7:35:C7:C6:6E:5D:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDE87FCF3A3A6CF88BC90F4C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f06bac13-c3b7-32b9-b931-63a27bc1efa2.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     396593
IP address blocks:        2001:501:8a29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:fc:f3:a3:a6:cf:88:bc:90:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=c63e3141-f1c8-468b-9135-81738f363b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4d:18:dd:cd:70:f2:49:33:77:2a:3f:01:2b:
                    d2:a0:5e:b2:e6:fa:50:5e:db:cf:39:ba:18:cd:87:
                    12:6f:2a:da:6f:0c:7c:77:9b:e9:12:81:93:bc:34:
                    c5:a0:5f:e5:30:79:3f:31:c1:2d:23:d8:7a:7f:8e:
                    70:ba:49:5a:6b:3d:d3:27:d0:ed:cf:bb:15:e0:68:
                    b4:e7:e7:cb:9a:5e:b2:fb:e8:c9:e1:34:17:59:d8:
                    9c:42:f8:ac:dc:a5:df:b5:a4:b3:2b:64:15:c2:71:
                    36:8d:ff:1c:3f:60:51:01:c2:42:f0:b7:cc:ea:95:
                    09:63:54:1b:73:28:9a:4e:1e:c3:63:e4:d4:5b:dc:
                    98:2f:cc:06:d9:46:9e:ce:27:dd:e0:80:f4:b3:7b:
                    c3:b2:c7:f3:f2:15:13:28:68:96:af:e9:62:ef:d3:
                    ec:84:86:29:16:ed:74:ef:3b:74:49:ae:37:0c:9b:
                    47:b3:6b:32:90:5a:6a:cb:b5:78:3a:82:64:26:5e:
                    34:85:df:a8:0d:98:db:fb:21:84:85:2d:6a:b2:e7:
                    7f:3b:f2:31:24:cd:fa:59:df:c3:82:34:ac:71:94:
                    22:60:f7:aa:ce:3c:4a:f6:76:b7:0e:a7:75:d7:a5:
                    24:d3:32:6b:f1:bf:a3:e0:ad:08:82:94:26:0d:9a:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8C:30:7A:70:70:23:96:15:D7:4A:A5:B7:E7:35:C7:C6:6E:5D:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f06bac13-c3b7-32b9-b931-63a27bc1efa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:90:09:f6:d4:82:fd:cd:3f:a0:29:42:03:44:84:84:40:40:
         a4:77:99:5e:93:86:72:62:6c:6b:aa:5e:94:61:bd:5b:1b:5b:
         c5:a7:be:aa:dd:69:79:fa:d8:ce:9e:b0:90:4c:d3:ee:35:30:
         35:1d:a2:35:b4:e8:4d:57:ee:4f:d1:bf:05:90:82:bc:43:2f:
         54:c0:1e:63:90:04:2f:cb:bd:dd:94:b9:63:1b:da:ab:5c:e6:
         4d:e7:f8:d6:0c:39:08:ac:20:7a:a1:8a:e9:e0:50:67:68:52:
         be:4b:e9:6b:02:60:3f:12:d3:4c:c5:08:ea:68:4e:fc:28:5d:
         15:cd:3d:a5:e8:5c:3e:d0:60:29:b5:f9:2e:28:70:aa:55:09:
         b1:b5:33:6e:dc:c2:82:68:5e:07:04:48:dd:9d:02:f1:9b:04:
         24:25:24:33:09:5d:a2:2b:a4:0d:a8:95:5f:d9:ea:fa:6c:00:
         6b:9d:3a:d9:1e:0b:1f:7b:f6:b4:0e:cf:a5:e3:11:3e:e8:67:
         fc:50:2b:e8:d4:45:d9:50:b3:17:bb:ff:b1:05:37:e4:ec:dc:
         a3:bf:78:96:10:fb:65:77:c8:d1:ae:78:bc:34:c6:e1:07:35:
         49:9d:5c:93:d1:66:37:fb:4e:05:9a:b4:83:26:e0:e7:94:3d:
         40:87:91:5a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3eh/zzo6bPiLyQ9MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
YzYzZTMxNDEtZjFjOC00NjhiLTkxMzUtODE3MzhmMzYzYjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE0Y3c1w8kkzdyo/ASvSoF6y5vpQXtvPOboY
zYcSbyrabwx8d5vpEoGTvDTFoF/lMHk/McEtI9h6f45wuklaaz3TJ9Dtz7sV4Gi0
5+fLml6y++jJ4TQXWdicQvis3KXftaSzK2QVwnE2jf8cP2BRAcJC8LfM6pUJY1Qb
cyiaTh7DY+TUW9yYL8wG2Uaezifd4ID0s3vDssfz8hUTKGiWr+li79PshIYpFu10
7zt0Sa43DJtHs2sykFpqy7V4OoJkJl40hd+oDZjb+yGEhS1qsud/O/IxJM36Wd/D
gjSscZQiYPeqzjxK9na3Dqd116Uk0zJr8b+j4K0IgpQmDZojBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLWMMHpwcCOWFddKpbfnNcfGbl3GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjA2YmFjMTMtYzNiNy0z
MmI5LWI5MzEtNjNhMjdiYzFlZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABiQCfbUgv3NP6ApQgNEhIRAQKR3mV6ThnJibGuqXpRhvVsbW8Wn
vqrdaXn62M6esJBM0+41MDUdojW06E1X7k/RvwWQgrxDL1TAHmOQBC/Lvd2UuWMb
2qtc5k3n+NYMOQisIHqhiungUGdoUr5L6WsCYD8S00zFCOpoTvwoXRXNPaXoXD7Q
YCm1+S4ocKpVCbG1M27cwoJoXgcESN2dAvGbBCQlJDMJXaIrpA2olV/Z6vpsAGud
OtkeCx979rQOz6XjET7oZ/xQK+jURdlQsxe7/7EFN+Ts3KO/eJYQ+2V3yNGueLw0
xuEHNUmdXJPRZjf7TgWatIMm4OeUPUCHkVo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:02:17 2026 by rpki-client