Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb4a7363-ce27-3a73-8e07-843508acaea5.roa
File:                     fb4a7363-ce27-3a73-8e07-843508acaea5.roa (raw, json)
Hash identifier:          RTnEg3gSKTSAohs2KSj4xt1u+RiPA1o+AgCY5Ridcuw=
Subject key identifier:   4C:34:64:57:F9:7B:45:25:32:E6:D7:C3:4D:C2:E7:A0:26:44:4C:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDE88039D1D98709EFDC47B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb4a7363-ce27-3a73-8e07-843508acaea5.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     36625
IP address blocks:        2001:501:8a29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:88:03:9d:1d:98:70:9e:fd:c4:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=b8d07680-09c4-4a15-a372-d9336a32aaac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:1d:c2:f2:ef:a9:df:46:ca:fb:72:00:a3:
                    97:f3:17:1d:9a:c1:a7:8c:a2:fb:86:75:45:b6:06:
                    02:88:1a:bf:3b:1f:8e:e6:7a:6a:8d:58:c1:e1:f4:
                    28:96:eb:ec:fc:58:55:b9:40:a4:07:9e:22:19:b7:
                    fe:f7:2f:5d:9a:f0:bb:71:89:d6:c8:23:84:8c:df:
                    3e:bc:00:c5:20:bb:8d:a2:cb:d4:36:04:f1:ca:b1:
                    83:8e:c9:b0:07:06:c6:ff:91:00:d9:19:55:4f:a9:
                    cc:4a:b8:ee:ef:cc:04:0a:88:08:69:46:f2:b8:00:
                    52:56:00:f2:c7:28:56:dc:84:a7:e7:8b:32:81:e1:
                    bb:04:d6:ac:c7:b5:e7:22:23:9f:d5:a1:b9:e6:80:
                    41:de:22:44:c6:78:59:a8:c1:e4:e0:6c:32:fc:e1:
                    26:b3:56:4e:6e:01:57:e5:45:3e:73:53:03:b2:fa:
                    a2:e2:09:ab:e5:6f:9a:ff:a3:ff:d5:e3:31:fa:25:
                    04:4c:5d:39:99:39:fd:62:81:67:ee:0d:6c:e1:96:
                    84:9b:25:e1:6f:e6:31:7b:37:79:ad:ee:b4:af:e0:
                    bd:8e:e9:e2:27:8f:36:94:c7:12:f0:6f:e2:ad:ce:
                    4c:9a:50:3c:c6:bd:9e:2a:b0:dd:d2:d5:ac:c5:fd:
                    14:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:34:64:57:F9:7B:45:25:32:E6:D7:C3:4D:C2:E7:A0:26:44:4C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb4a7363-ce27-3a73-8e07-843508acaea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f0:a5:a4:81:4c:69:5f:8c:a7:56:bf:1c:42:b5:15:7d:e6:
         51:3d:53:50:94:38:58:1d:49:02:50:80:86:69:cd:24:80:9b:
         ff:fd:e9:ed:c7:ba:aa:1c:f4:d5:10:49:db:13:d1:2c:3f:82:
         c0:e0:90:2a:7e:17:0f:3a:d6:f3:fc:48:4b:d4:08:1b:8b:64:
         30:97:8b:8f:8e:be:32:30:83:a2:7a:46:ff:c7:98:a8:e9:f3:
         2d:df:96:6c:da:6b:84:87:a3:ab:07:f5:f0:61:1a:d1:0d:75:
         8e:d3:52:c2:e8:d9:cc:bd:9e:f2:58:6c:43:43:7a:fa:a0:c0:
         c6:12:09:0a:e6:f4:bd:2b:4f:5b:90:b1:05:65:e8:8d:3e:48:
         b8:7d:94:bd:c6:fd:06:fb:e3:3d:13:02:62:90:12:3d:88:c7:
         95:fe:45:36:3e:21:8e:83:ae:94:ec:87:aa:3c:83:05:a6:49:
         c0:59:2d:4e:29:6a:59:70:7a:75:6c:e6:e1:5b:e4:c6:77:29:
         2d:44:cf:ce:15:6c:7e:27:91:9f:7f:e4:ec:9d:7d:f7:4a:c9:
         41:3c:e4:0f:8e:cc:de:f0:9b:cb:d7:99:d8:73:f8:bf:0e:f2:
         51:be:e5:d5:2f:35:97:6e:4a:e1:15:93:85:55:98:fa:8e:cf:
         b3:d8:61:4e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3eiAOdHZhwnv3Ee4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
YjhkMDc2ODAtMDljNC00YTE1LWEzNzItZDkzMzZhMzJhYWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF4dwvLvqd9GyvtyAKOX8xcdmsGnjKL7hnVF
tgYCiBq/Ox+O5npqjVjB4fQoluvs/FhVuUCkB54iGbf+9y9dmvC7cYnWyCOEjN8+
vADFILuNosvUNgTxyrGDjsmwBwbG/5EA2RlVT6nMSrju78wECogIaUbyuABSVgDy
xyhW3ISn54sygeG7BNasx7XnIiOf1aG55oBB3iJExnhZqMHk4Gwy/OEms1ZObgFX
5UU+c1MDsvqi4gmr5W+a/6P/1eMx+iUETF05mTn9YoFn7g1s4ZaEmyXhb+Yxezd5
re60r+C9juniJ482lMcS8G/irc5MmlA8xr2eKrDd0tWsxf0UmwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEw0ZFf5e0UlMubXw03C56AmREzkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmI0YTczNjMtY2UyNy0z
YTczLThlMDctODQzNTA4YWNhZWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACDwpaSBTGlfjKdWvxxCtRV95lE9U1CUOFgdSQJQgIZpzSSAm//9
6e3Huqoc9NUQSdsT0Sw/gsDgkCp+Fw861vP8SEvUCBuLZDCXi4+OvjIwg6J6Rv/H
mKjp8y3flmzaa4SHo6sH9fBhGtENdY7TUsLo2cy9nvJYbENDevqgwMYSCQrm9L0r
T1uQsQVl6I0+SLh9lL3G/Qb74z0TAmKQEj2Ix5X+RTY+IY6DrpTsh6o8gwWmScBZ
LU4pallwenVs5uFb5MZ3KS1Ez84VbH4nkZ9/5OydffdKyUE85A+OzN7wm8vXmdhz
+L8O8lG+5dUvNZduSuEVk4VVmPqOz7PYYU4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:55:26 2026 by rpki-client