Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4da4a6ce-3d3d-3e24-a8fd-4df43964c6ef.roa
File:                     4da4a6ce-3d3d-3e24-a8fd-4df43964c6ef.roa (raw, json)
Hash identifier:          AQTGHQDQOxjVy+el2aLlzD8l/7dGCySiRVDsgZ/+GeA=
Subject key identifier:   2C:D1:E1:6B:60:79:58:1E:E5:3C:CC:06:97:1A:01:96:2B:0E:F7:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4F1F4D0DC9A36F1563271880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4da4a6ce-3d3d-3e24-a8fd-4df43964c6ef.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     20172
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:4d:0d:c9:a3:6f:15:63:27:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=220802b3-00cd-4169-919d-d686b6ec66f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:33:38:4b:dd:49:9f:b0:70:9f:61:a2:1e:
                    d9:3a:11:0c:f9:01:16:cc:0f:b3:b4:96:98:38:b4:
                    45:d5:c5:77:e0:f2:c0:36:32:6e:20:84:b9:7f:f8:
                    27:54:a8:5d:ef:eb:bb:17:cc:f5:80:ac:3a:7a:ba:
                    65:21:ca:19:dd:ac:33:e5:29:3d:be:ed:a7:4d:04:
                    c7:08:76:7c:ac:74:c9:b5:c0:ca:5f:59:12:d9:02:
                    67:74:a3:22:66:73:03:36:74:a6:e8:37:aa:f1:6f:
                    db:70:0c:8a:05:d2:12:de:c4:81:ff:af:67:76:b9:
                    e0:6c:92:84:0c:40:c4:71:f8:db:ed:81:0f:56:d9:
                    1e:48:f3:ef:81:77:8d:59:fc:5b:e4:fd:bc:ee:0c:
                    1c:42:f4:64:bf:d2:37:75:59:0c:b8:5e:85:e7:24:
                    5d:de:de:13:16:c9:59:c2:54:13:c8:e8:20:77:08:
                    15:c3:cf:18:02:55:eb:72:4c:8c:76:04:bf:56:fc:
                    ff:b4:46:ee:5a:30:0a:94:c5:9f:95:59:37:6a:b4:
                    9c:72:b0:64:ac:5d:4b:e0:3b:46:8c:4e:09:bb:a9:
                    5d:56:67:0d:50:4a:b5:57:05:40:e2:8c:b0:98:75:
                    dc:f6:36:3a:e4:fe:6c:93:74:cf:1e:77:55:db:2b:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D1:E1:6B:60:79:58:1E:E5:3C:CC:06:97:1A:01:96:2B:0E:F7:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4da4a6ce-3d3d-3e24-a8fd-4df43964c6ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:de:86:70:b5:d6:e0:49:93:51:bf:f3:20:25:66:7b:37:a4:
         09:3a:97:dc:19:3e:72:42:a9:e8:87:84:ed:97:09:23:e9:fc:
         73:0a:bf:d3:81:b9:24:92:fd:ee:63:61:f8:b9:2f:9b:5d:e2:
         12:3d:56:70:15:89:52:d8:5f:2c:87:7d:f6:41:49:61:1f:68:
         dd:cd:14:18:6a:c7:ca:77:98:f5:e8:02:56:ca:93:0f:eb:90:
         34:52:bf:d5:34:9c:b0:13:92:ef:97:5f:4e:e7:93:26:ed:e2:
         db:69:cb:78:f1:ab:9b:89:71:25:53:d6:64:11:7a:dc:80:cf:
         d3:37:62:4b:c9:4d:e1:36:ea:01:39:dd:8a:86:f0:8f:cb:50:
         be:2e:7c:19:3d:58:86:61:ca:12:5c:0c:4b:38:26:d2:9e:59:
         fb:8e:bc:cc:42:3c:0f:cf:c2:df:6d:32:3d:d1:60:1e:91:46:
         bb:56:48:c8:07:63:aa:23:db:4e:d6:f9:2d:f6:32:fd:4f:25:
         48:4d:96:f6:6a:aa:b6:9c:dc:e2:b6:e9:f9:f8:9a:37:02:91:
         2c:18:e4:86:00:b3:ab:45:64:0b:d5:22:1b:ab:c8:66:0f:0c:
         20:d8:60:6b:3c:8b:34:b2:57:90:57:e1:79:7e:01:56:c6:26:
         59:0d:aa:6b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5PH00NyaNvFWMnGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk
MjIwODAyYjMtMDBjZC00MTY5LTkxOWQtZDY4NmI2ZWM2NmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBYzOEvdSZ+wcJ9hoh7ZOhEM+QEWzA+ztJaY
OLRF1cV34PLANjJuIIS5f/gnVKhd7+u7F8z1gKw6erplIcoZ3awz5Sk9vu2nTQTH
CHZ8rHTJtcDKX1kS2QJndKMiZnMDNnSm6Deq8W/bcAyKBdIS3sSB/69ndrngbJKE
DEDEcfjb7YEPVtkeSPPvgXeNWfxb5P287gwcQvRkv9I3dVkMuF6F5yRd3t4TFslZ
wlQTyOggdwgVw88YAlXrckyMdgS/Vvz/tEbuWjAKlMWflVk3arSccrBkrF1L4DtG
jE4Ju6ldVmcNUEq1VwVA4oywmHXc9jY65P5sk3TPHndV2ytz6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCzR4WtgeVge5TzMBpcaAZYrDvclMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGRhNGE2Y2UtM2QzZC0z
ZTI0LWE4ZmQtNGRmNDM5NjRjNmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD/ehnC11uBJk1G/8yAlZns3pAk6l9wZPnJCqeiHhO2XCSPp/HMK
v9OBuSSS/e5jYfi5L5td4hI9VnAViVLYXyyHffZBSWEfaN3NFBhqx8p3mPXoAlbK
kw/rkDRSv9U0nLATku+XX07nkybt4ttpy3jxq5uJcSVT1mQRetyAz9M3YkvJTeE2
6gE53YqG8I/LUL4ufBk9WIZhyhJcDEs4JtKeWfuOvMxCPA/Pwt9tMj3RYB6RRrtW
SMgHY6oj207W+S32Mv1PJUhNlvZqqrac3OK26fn4mjcCkSwY5IYAs6tFZAvVIhur
yGYPDCDYYGs8izSyV5BX4Xl+AVbGJlkNqms=
-----END CERTIFICATE-----
Generated at Sun Jun 28 20:36:11 2026 by rpki-client