Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/468d217f-eb78-30ce-b922-9629a6fa3426.roa
File:                     468d217f-eb78-30ce-b922-9629a6fa3426.roa (raw, json)
Hash identifier:          guesEBPlME34L1ALGLrdtZJd/MA6GjfIJfXGWhzEqV8=
Subject key identifier:   63:01:51:8D:E3:88:7F:A7:80:7E:F0:57:EC:F9:BA:CE:62:CA:E8:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79D022FEFC077CCE44E7480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/468d217f-eb78-30ce-b922-9629a6fa3426.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397196
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:02:2f:ef:c0:77:cc:e4:4e:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2ae07c73-33b8-4fbb-8ee3-f81abee84d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2b:52:50:4f:be:0c:60:1b:75:25:2c:c7:50:
                    1c:fc:88:48:77:6c:43:89:53:ed:70:80:28:16:96:
                    3e:6a:05:3b:f8:fb:e9:54:67:e0:19:35:95:f4:7c:
                    a4:91:f5:64:9f:79:49:22:39:c0:62:eb:ae:7a:0d:
                    2c:f0:0c:43:be:49:ec:36:b2:09:51:86:dc:4b:07:
                    92:9c:b0:7e:a9:5e:de:ae:62:4d:77:6a:08:79:10:
                    f4:bb:4f:b7:24:80:7a:cc:76:a1:89:50:72:1c:05:
                    f7:31:a0:18:a8:80:61:a4:9d:55:c0:cf:28:ac:6c:
                    c2:79:fd:dc:15:60:82:3e:39:4f:f2:a3:42:e5:cd:
                    25:38:d9:7a:86:c8:59:5a:37:cd:bd:5f:08:21:b2:
                    e2:93:95:db:2b:f3:da:11:69:e9:7b:b7:b2:36:46:
                    8d:25:ed:b9:16:48:82:8b:b7:72:a4:71:2d:9c:44:
                    1b:41:9e:fc:5f:70:0c:13:98:00:94:44:b7:bc:7b:
                    6b:55:78:03:99:24:e5:45:f7:bb:54:a2:8d:a3:09:
                    6b:a3:a0:19:3a:4d:a0:e8:8d:94:62:db:f1:00:6c:
                    8a:23:27:a1:e5:05:9b:d6:5a:ba:02:e6:66:55:86:
                    ad:f6:13:ab:0a:53:9a:79:6d:79:60:00:84:62:63:
                    bd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:01:51:8D:E3:88:7F:A7:80:7E:F0:57:EC:F9:BA:CE:62:CA:E8:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/468d217f-eb78-30ce-b922-9629a6fa3426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:e8:fa:d3:31:08:89:8c:2e:a5:cd:c1:c5:b0:a8:81:9f:72:
         5e:17:cd:6e:17:8b:ae:b0:e8:b8:bc:13:10:06:26:6b:a8:1f:
         55:46:72:b5:5c:94:0a:65:76:04:e9:fb:1d:f2:ab:89:76:6a:
         b0:9f:dd:3f:fb:de:cc:1a:50:ec:d2:94:b6:66:31:40:93:12:
         bb:0b:00:82:05:28:86:40:67:57:66:95:24:d5:0a:c7:cc:64:
         6c:71:78:79:2c:a6:42:e5:e1:d3:ee:37:82:c1:92:36:a8:0e:
         2e:7d:03:1a:ff:1f:b0:18:8a:bf:71:85:e6:df:67:a7:e5:f6:
         d2:9d:e2:f4:6d:be:69:f9:a2:b3:eb:d4:35:c4:32:78:f0:f8:
         f9:49:a1:d7:cd:1b:b6:56:71:8c:92:fc:e1:ee:20:1f:16:b6:
         c1:28:4f:b8:b7:96:30:53:d5:f9:e1:68:67:1b:5b:08:85:55:
         7f:05:42:11:e3:58:1d:09:58:b5:02:86:4e:58:4f:ba:be:10:
         57:a5:a6:d4:73:77:a2:5a:e5:55:c8:fd:e0:f2:d8:0a:f3:d7:
         99:ef:b2:51:d3:71:54:11:7a:26:22:06:3e:b9:af:df:49:97:
         41:79:78:5d:14:ea:65:82:83:f2:02:00:2a:13:d7:dc:8d:91:
         5c:53:7f:c3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnQIv78B3zOROdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MmFlMDdjNzMtMzNiOC00ZmJiLThlZTMtZjgxYWJlZTg0ZDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCtSUE++DGAbdSUsx1Ac/IhId2xDiVPtcIAo
FpY+agU7+PvpVGfgGTWV9HykkfVkn3lJIjnAYuuueg0s8AxDvknsNrIJUYbcSweS
nLB+qV7ermJNd2oIeRD0u0+3JIB6zHahiVByHAX3MaAYqIBhpJ1VwM8orGzCef3c
FWCCPjlP8qNC5c0lONl6hshZWjfNvV8IIbLik5XbK/PaEWnpe7eyNkaNJe25FkiC
i7dypHEtnEQbQZ78X3AME5gAlES3vHtrVXgDmSTlRfe7VKKNowlro6AZOk2g6I2U
YtvxAGyKIyeh5QWb1lq6AuZmVYat9hOrClOaeW15YACEYmO9AQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGMBUY3jiH+ngH7wV+z5us5iyujPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDY4ZDIxN2YtZWI3OC0z
MGNlLWI5MjItOTYyOWE2ZmEzNDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKLo+tMxCImMLqXNwcWwqIGfcl4XzW4Xi66w6Li8ExAGJmuoH1VG
crVclApldgTp+x3yq4l2arCf3T/73swaUOzSlLZmMUCTErsLAIIFKIZAZ1dmlSTV
CsfMZGxxeHkspkLl4dPuN4LBkjaoDi59Axr/H7AYir9xhebfZ6fl9tKd4vRtvmn5
orPr1DXEMnjw+PlJodfNG7ZWcYyS/OHuIB8WtsEoT7i3ljBT1fnhaGcbWwiFVX8F
QhHjWB0JWLUChk5YT7q+EFelptRzd6Ja5VXI/eDy2Arz15nvslHTcVQReiYiBj65
r99Jl0F5eF0U6mWCg/ICACoT19yNkVxTf8M=
-----END CERTIFICATE-----
Generated at Wed Aug 19 19:35:12 2026 by rpki-client