Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3de381e6-d189-3990-b58f-a1b9f57a9f6b.roa
File:                     3de381e6-d189-3990-b58f-a1b9f57a9f6b.roa (raw, json)
Hash identifier:          SRuC8LHsBpwy38jD3z/1yazDBSj/tgp6SHffxGNVA3Q=
Subject key identifier:   CA:CC:81:54:C8:B2:C2:5F:0F:9E:E3:DF:04:2C:76:33:C5:3F:D5:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA8EC4C4812C5CB6145363000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3de381e6-d189-3990-b58f-a1b9f57a9f6b.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     36629
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:4c:48:12:c5:cb:61:45:36:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=ed79ed78-c155-4f71-a493-ffc5d70d0290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6d:b3:a2:90:c8:95:70:93:a7:c7:ca:e3:bf:
                    c6:8b:0d:19:f6:69:4d:ef:1f:71:f3:cc:b4:75:53:
                    7b:d2:82:45:28:b5:9e:ed:4d:95:79:0f:10:ad:d7:
                    67:f9:45:76:f2:fb:92:5b:2a:29:63:56:85:01:1e:
                    15:db:05:d5:2d:77:05:4d:00:f9:89:3b:bd:df:85:
                    30:46:82:6c:f3:5e:b4:0f:b0:7d:9b:0f:db:bf:ea:
                    3d:1e:91:67:d4:98:36:c4:24:b7:0a:b4:af:5c:b4:
                    d9:48:fa:12:14:0c:82:8e:d6:f6:9d:43:21:f0:3a:
                    3d:0b:0a:72:e3:6d:17:19:f7:af:7c:87:59:2d:0a:
                    21:30:62:49:d3:0c:66:5b:1f:dd:63:ce:0b:c8:40:
                    0b:b9:84:69:f8:8b:59:e1:e4:5f:e6:b1:be:ca:36:
                    07:d5:40:3a:3a:dd:18:4f:a0:9c:07:81:75:19:ad:
                    88:50:e5:f0:55:4d:07:97:81:d1:14:ec:e9:bd:ea:
                    44:3e:84:94:d1:21:9c:58:2c:cf:3f:8e:59:8f:9b:
                    c3:3e:99:fa:b4:b4:2f:b7:c9:47:24:02:b8:f4:97:
                    07:18:5c:6f:17:82:0c:46:ea:d6:39:61:4d:cc:35:
                    88:43:46:d8:cd:18:53:b5:79:3b:c1:84:e8:b8:45:
                    7c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CC:81:54:C8:B2:C2:5F:0F:9E:E3:DF:04:2C:76:33:C5:3F:D5:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3de381e6-d189-3990-b58f-a1b9f57a9f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:2a:bc:00:15:7c:17:77:24:57:a1:cf:e6:44:3f:ff:15:a0:
         e9:ff:4e:c6:c0:41:45:ec:b2:34:af:ac:41:fc:90:d9:6f:a6:
         c1:dc:3c:fb:cd:74:6d:55:86:f9:65:c3:cb:c7:85:cb:af:00:
         39:0d:4b:40:c4:3d:f7:e1:67:70:40:03:bd:35:fc:d3:1f:36:
         3a:b1:11:b9:45:b6:f6:00:f8:32:ab:d0:65:dd:6c:83:1b:bb:
         2d:fd:e7:b7:8b:ad:e9:4a:91:a9:20:dd:59:7b:45:c4:8f:a7:
         b8:0a:3f:b7:23:9d:c2:4a:b2:c0:07:cc:9d:1e:cc:e7:a3:3a:
         65:fd:af:ee:b4:79:d6:a0:05:0c:06:48:f4:63:e6:bf:3c:8b:
         8c:1a:66:2c:0d:47:00:b1:fd:27:69:c1:29:4a:8f:42:d6:66:
         47:d8:3b:7f:3f:a7:57:8f:ef:6b:70:bb:24:18:b9:51:12:e3:
         55:0a:4c:9e:ef:c6:b2:b1:88:16:f9:5c:0b:ce:72:93:3c:9b:
         88:8b:f5:26:42:2b:9e:7d:b6:17:d0:50:1c:a5:f9:81:d5:e3:
         0d:1a:e9:bb:46:7f:0b:66:ea:78:76:bc:61:6b:23:0b:18:50:
         6e:72:59:d4:77:a4:b1:39:1d:4a:d2:98:84:bb:ac:58:c6:49:
         1c:df:cd:c2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6o7ExIEsXLYUU2MAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk
ZWQ3OWVkNzgtYzE1NS00ZjcxLWE0OTMtZmZjNWQ3MGQwMjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW2zopDIlXCTp8fK47/Giw0Z9mlN7x9x88y0
dVN70oJFKLWe7U2VeQ8Qrddn+UV28vuSWyopY1aFAR4V2wXVLXcFTQD5iTu934Uw
RoJs8160D7B9mw/bv+o9HpFn1Jg2xCS3CrSvXLTZSPoSFAyCjtb2nUMh8Do9Cwpy
420XGfevfIdZLQohMGJJ0wxmWx/dY84LyEALuYRp+ItZ4eRf5rG+yjYH1UA6Ot0Y
T6CcB4F1Ga2IUOXwVU0Hl4HRFOzpvepEPoSU0SGcWCzPP45Zj5vDPpn6tLQvt8lH
JAK49JcHGFxvF4IMRurWOWFNzDWIQ0bYzRhTtXk7wYTouEV8lwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMrMgVTIssJfD57j3wQsdjPFP9X0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2RlMzgxZTYtZDE4OS0z
OTkwLWI1OGYtYTFiOWY1N2E5ZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJAqvAAVfBd3JFehz+ZEP/8VoOn/TsbAQUXssjSvrEH8kNlvpsHc
PPvNdG1Vhvllw8vHhcuvADkNS0DEPffhZ3BAA701/NMfNjqxEblFtvYA+DKr0GXd
bIMbuy3957eLrelKkakg3Vl7RcSPp7gKP7cjncJKssAHzJ0ezOejOmX9r+60edag
BQwGSPRj5r88i4waZiwNRwCx/SdpwSlKj0LWZkfYO38/p1eP72twuyQYuVES41UK
TJ7vxrKxiBb5XAvOcpM8m4iL9SZCK559thfQUByl+YHV4w0a6btGfwtm6nh2vGFr
IwsYUG5yWdR3pLE5HUrSmIS7rFjGSRzfzcI=
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:08:49 2026 by rpki-client