Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/237a7364-ded3-3b39-8d76-8f15ae1205fc.roa
File:                     237a7364-ded3-3b39-8d76-8f15ae1205fc.roa (raw, json)
Hash identifier:          F8Ug6xFbRLzmRaND5AzTUSfeW9ZGz2WjDgN3i5l73cA=
Subject key identifier:   01:58:7B:3B:E0:33:26:1F:00:82:01:E5:70:F8:00:C3:77:06:EE:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3E5F2E29D3AC7AD780A8BAA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/237a7364-ded3-3b39-8d76-8f15ae1205fc.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     396583
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:2e:29:d3:ac:7a:d7:80:a8:ba:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=06e5460a-d0c4-4f34-8d7f-8dda3146ca19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9b:52:e3:1d:a3:0c:ac:5d:29:a6:7f:52:e9:
                    1a:31:04:44:f0:5e:30:6d:5f:62:3f:83:4a:fc:e7:
                    dc:54:79:49:71:4f:ce:97:8a:e3:65:80:c7:f4:7f:
                    07:bd:d9:66:12:d1:40:05:2b:2b:3a:48:4e:3d:b8:
                    3a:25:69:b9:34:5d:05:ec:2c:26:35:00:18:60:22:
                    59:0c:c4:e4:46:cb:24:c5:cb:dc:5b:8c:bc:11:f2:
                    69:5f:3f:16:fe:c0:29:56:86:7a:cd:e4:24:f7:12:
                    bc:3c:80:00:fb:1e:53:f0:4e:7a:b7:20:d1:72:6e:
                    da:f5:04:39:00:de:e1:ed:e9:38:c2:32:05:3d:c5:
                    76:ff:2d:1c:06:2e:4e:9c:fc:c0:04:f1:cc:9e:56:
                    dc:d9:b2:e5:78:97:8d:c5:6c:60:d2:8a:a3:b6:c1:
                    52:c0:e5:37:c8:a7:c1:96:58:cc:b2:24:05:5a:3d:
                    a3:8e:74:1f:46:9b:4a:73:2c:69:0d:d2:88:db:d3:
                    09:bb:91:b7:47:14:50:f6:5e:40:51:07:86:72:cb:
                    98:2f:38:13:67:62:20:80:80:16:51:c6:5a:9c:d0:
                    6c:58:fa:e7:1d:80:aa:81:64:78:5a:e9:34:bf:63:
                    30:53:4a:64:a6:10:ee:75:b6:1b:39:3f:d2:f7:ec:
                    7c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:58:7B:3B:E0:33:26:1F:00:82:01:E5:70:F8:00:C3:77:06:EE:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/237a7364-ded3-3b39-8d76-8f15ae1205fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:38:2c:e2:75:81:26:12:9a:12:33:74:88:b7:d6:8d:95:c6:
         99:0e:02:24:fc:6a:6f:86:43:f3:be:c5:00:31:ec:43:98:ef:
         50:56:12:53:c5:5b:c9:50:e7:d4:72:96:96:db:12:30:6f:7a:
         91:10:ce:46:38:ab:27:68:94:d1:18:f2:6b:36:36:7b:a5:ad:
         9d:e3:1a:7a:10:7f:39:c4:ea:8d:7e:52:8f:4c:cc:3f:dd:b6:
         e0:5f:6f:04:2e:fe:30:f0:19:27:cc:06:cb:e8:37:49:2d:8c:
         b1:60:c6:6f:42:e8:cf:0c:ea:da:39:11:93:53:b6:e3:d2:7b:
         2f:b9:11:ed:ad:64:d4:34:a7:3b:a7:a9:2a:f5:9e:bf:42:6a:
         32:d8:96:ff:2f:b6:23:c7:51:a2:fb:bc:7d:e9:c0:19:b5:9d:
         cf:44:b1:1e:04:64:d0:ca:4b:c8:84:48:d0:7f:de:07:80:c9:
         8d:6e:9a:21:5b:4b:30:44:7b:bb:fd:1d:30:cf:29:cd:41:f0:
         4f:f5:c6:78:00:c2:54:27:a3:2c:87:3a:ef:f7:f8:0b:52:c7:
         2e:23:c3:d4:4a:2e:ea:b1:f8:28:19:ae:a2:f5:fc:89:f2:bf:
         b1:4c:e0:9a:c6:fe:46:a2:6a:72:e4:2d:c6:4c:49:f8:fe:77:
         73:ed:67:86
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4+Xy4p06x614CouqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
MDZlNTQ2MGEtZDBjNC00ZjM0LThkN2YtOGRkYTMxNDZjYTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhptS4x2jDKxdKaZ/UukaMQRE8F4wbV9iP4NK
/OfcVHlJcU/Ol4rjZYDH9H8HvdlmEtFABSsrOkhOPbg6JWm5NF0F7CwmNQAYYCJZ
DMTkRsskxcvcW4y8EfJpXz8W/sApVoZ6zeQk9xK8PIAA+x5T8E56tyDRcm7a9QQ5
AN7h7ek4wjIFPcV2/y0cBi5OnPzABPHMnlbc2bLleJeNxWxg0oqjtsFSwOU3yKfB
lljMsiQFWj2jjnQfRptKcyxpDdKI29MJu5G3RxRQ9l5AUQeGcsuYLzgTZ2IggIAW
UcZanNBsWPrnHYCqgWR4Wuk0v2MwU0pkphDudbYbOT/S9+x8ewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAFYezvgMyYfAIIB5XD4AMN3Bu7BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjM3YTczNjQtZGVkMy0z
YjM5LThkNzYtOGYxNWFlMTIwNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJw4LOJ1gSYSmhIzdIi31o2VxpkOAiT8am+GQ/O+xQAx7EOY71BW
ElPFW8lQ59RylpbbEjBvepEQzkY4qydolNEY8ms2NnulrZ3jGnoQfznE6o1+Uo9M
zD/dtuBfbwQu/jDwGSfMBsvoN0ktjLFgxm9C6M8M6to5EZNTtuPSey+5Ee2tZNQ0
pzunqSr1nr9CajLYlv8vtiPHUaL7vH3pwBm1nc9EsR4EZNDKS8iESNB/3geAyY1u
miFbSzBEe7v9HTDPKc1B8E/1xngAwlQnoyyHOu/3+AtSxy4jw9RKLuqx+CgZrqL1
/Inyv7FM4JrG/kaianLkLcZMSfj+d3PtZ4Y=
-----END CERTIFICATE-----
Generated at Sun Jun 28 19:36:01 2026 by rpki-client