Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e237e84-6a61-363f-8f54-18625e8ff8ac.roa
File:                     0e237e84-6a61-363f-8f54-18625e8ff8ac.roa (raw, json)
Hash identifier:          FyI/226Xumpzgpm3Jny3i2aFPA02p6kTTElVwHHp2J4=
Subject key identifier:   E0:1D:91:C0:5D:7F:B7:B6:16:5D:5A:DB:C0:B5:42:D7:E8:A4:57:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79ABED70AD120356FE99600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e237e84-6a61-363f-8f54-18625e8ff8ac.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396552
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:be:d7:0a:d1:20:35:6f:e9:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3d524855-8ebb-4814-ac62-21a7214ccd01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:43:4c:70:80:c2:c7:37:c2:a5:00:6a:67:
                    15:52:64:c0:85:5f:1c:86:1f:b9:cd:2e:90:18:d9:
                    e2:81:49:72:6f:a2:ac:f8:39:7f:41:14:fe:3a:c6:
                    32:59:e7:c9:63:77:9c:a2:49:c1:87:04:42:52:4a:
                    6e:e9:de:56:92:20:3b:69:21:75:f4:dc:71:42:8d:
                    06:b5:48:2a:97:5f:c5:ab:9f:00:cb:56:52:66:fd:
                    4f:73:71:89:c9:03:d7:9b:52:2f:dc:48:93:2e:47:
                    2c:cf:2a:6f:ec:d2:80:e3:c1:e8:3d:d1:77:56:e1:
                    a9:13:ce:88:05:9f:9e:85:f2:a3:1c:f5:2e:48:ae:
                    ae:d6:33:67:75:44:86:23:6d:33:43:49:63:d6:7f:
                    90:63:ae:95:00:7a:b2:fd:e4:6e:88:16:91:07:7d:
                    92:61:de:3a:e3:ef:0f:b0:1d:e3:91:ce:b8:5f:c9:
                    80:4b:ec:a3:fb:f3:b5:d5:3e:98:98:34:50:59:cf:
                    f7:df:42:0d:23:b7:f9:1f:f9:51:8a:30:e2:9d:c3:
                    b7:11:1b:a9:f2:92:a4:2b:3f:e3:1a:4f:95:22:9a:
                    cf:d3:82:ce:da:64:b0:5c:78:84:de:6a:94:94:36:
                    10:d9:b2:0b:44:29:a9:27:3b:aa:c6:3e:5b:e2:6f:
                    96:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1D:91:C0:5D:7F:B7:B6:16:5D:5A:DB:C0:B5:42:D7:E8:A4:57:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e237e84-6a61-363f-8f54-18625e8ff8ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:9d:01:b4:88:90:7e:b5:11:0d:39:ca:9d:41:97:42:69:79:
         ca:a9:c7:f8:05:0a:a5:ed:f2:37:76:87:c5:f4:da:96:30:c1:
         07:12:72:f2:85:ee:14:6d:31:34:72:ab:61:84:aa:8a:1e:e4:
         4c:90:04:6c:ac:dc:21:00:92:43:09:c8:a2:1f:9a:3b:94:91:
         3c:71:f6:67:5c:97:06:8f:6c:fa:7a:2c:e8:eb:c8:95:64:66:
         bb:04:cd:35:f5:32:44:a0:82:f3:d3:e7:00:38:2d:a2:bb:49:
         e2:c7:19:a2:13:ef:e6:06:38:3d:16:a4:c1:bb:29:c5:0b:f3:
         21:3f:ae:54:a2:9b:f9:7f:c3:8f:f2:08:7d:ff:c6:40:7c:dd:
         8d:70:ae:a7:65:66:32:9f:e8:9c:e8:7b:0b:96:40:29:a1:a8:
         15:96:cd:59:a5:39:05:8c:d9:fa:3d:ec:06:50:ac:f6:cf:51:
         c1:8d:c6:46:1c:ee:37:51:f4:61:2a:33:1a:2e:48:78:be:ac:
         08:93:20:03:55:05:59:76:3e:40:ab:50:ff:d7:84:ce:79:92:
         a6:8a:f6:5e:ec:a0:28:85:ef:b4:27:e1:00:2a:9a:bc:15:af:
         66:ac:6b:2f:c5:92:e3:3c:ed:46:a5:9f:fb:fd:ba:93:5c:2a:
         cf:b3:98:24
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6nmr7XCtEgNW/plgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
M2Q1MjQ4NTUtOGViYi00ODE0LWFjNjItMjFhNzIxNGNjZDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqhDTHCAwsc3wqUAamcVUmTAhV8chh+5zS6Q
GNnigUlyb6Ks+Dl/QRT+OsYyWefJY3ecoknBhwRCUkpu6d5WkiA7aSF19NxxQo0G
tUgql1/Fq58Ay1ZSZv1Pc3GJyQPXm1Iv3EiTLkcszypv7NKA48HoPdF3VuGpE86I
BZ+ehfKjHPUuSK6u1jNndUSGI20zQ0lj1n+QY66VAHqy/eRuiBaRB32SYd464+8P
sB3jkc64X8mAS+yj+/O11T6YmDRQWc/330INI7f5H/lRijDincO3ERup8pKkKz/j
Gk+VIprP04LO2mSwXHiE3mqUlDYQ2bILRCmpJzuqxj5b4m+WdwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOAdkcBdf7e2Fl1a28C1QtfopFcSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGUyMzdlODQtNmE2MS0z
NjNmLThmNTQtMTg2MjVlOGZmOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAcnQG0iJB+tRENOcqdQZdCaXnKqcf4BQql7fI3
dofF9NqWMMEHEnLyhe4UbTE0cqthhKqKHuRMkARsrNwhAJJDCciiH5o7lJE8cfZn
XJcGj2z6eizo68iVZGa7BM019TJEoILz0+cAOC2iu0nixxmiE+/mBjg9FqTBuynF
C/MhP65Uopv5f8OP8gh9/8ZAfN2NcK6nZWYyn+ic6HsLlkApoagVls1ZpTkFjNn6
PewGUKz2z1HBjcZGHO43UfRhKjMaLkh4vqwIkyADVQVZdj5Aq1D/14TOeZKmivZe
7KAohe+0J+EAKpq8Fa9mrGsvxZLjPO1GpZ/7/bqTXCrPs5gk
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:06:56 2026 by rpki-client