Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7e75c31-bd8e-3ca3-bbef-8f0416a87c6b.roa
File:                     b7e75c31-bd8e-3ca3-bbef-8f0416a87c6b.roa (raw, json)
Hash identifier:          ugPEkuQ5nrdOqy52znpaKnjjPIhuoo9/Vi1tjpSjECI=
Subject key identifier:   6B:BC:23:AC:C2:61:D1:F7:3F:11:41:00:50:0B:E0:6B:BF:12:5F:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9EEC6342A3CDCF22F4DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7e75c31-bd8e-3ca3-bbef-8f0416a87c6b.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     36632
IP address blocks:        2001:500:13f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:ee:c6:34:2a:3c:dc:f2:2f:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=0551dfe4-655e-447f-8003-51bb3730a14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:68:64:d9:1a:f5:8c:95:a8:dd:e9:2f:2e:
                    f1:d9:73:50:d5:0b:98:a1:ef:84:c5:98:dc:36:0a:
                    57:1d:e5:94:04:76:cd:a3:2a:03:25:c4:5d:6e:79:
                    e0:60:71:2b:bd:00:7b:70:02:b2:19:9d:51:09:ec:
                    27:c2:b9:d2:56:5f:42:7c:1c:ce:01:fe:3c:6a:d2:
                    37:28:04:54:58:06:96:12:f5:8a:52:93:70:17:46:
                    a5:0d:c9:8c:e3:59:db:9a:d8:05:45:bf:32:e3:68:
                    d5:de:5d:d8:d4:a1:5e:ea:b7:ee:8f:e0:6f:1e:90:
                    a5:58:bb:f4:a4:fe:d6:79:1f:b7:62:47:74:a4:46:
                    36:85:59:6e:a2:a6:ac:b7:c3:1f:4d:04:bf:36:29:
                    12:31:9d:98:f3:ca:24:41:1c:1a:90:d9:f9:7d:4a:
                    da:84:81:47:35:4f:75:2a:eb:4a:60:e0:ff:e6:41:
                    ce:6a:1d:4d:1c:d6:9b:fe:42:c4:b3:9e:73:7a:4b:
                    25:ca:9d:51:67:29:87:75:12:3f:ce:45:ad:25:2b:
                    a8:4c:66:29:87:65:b5:4b:60:f2:17:75:69:ce:2a:
                    0a:ed:e1:7d:a8:6b:5a:d9:4b:bb:cc:91:7b:ee:0a:
                    0b:13:e7:ef:9e:b1:ec:9c:bf:04:77:52:68:2e:18:
                    78:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BC:23:AC:C2:61:D1:F7:3F:11:41:00:50:0B:E0:6B:BF:12:5F:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7e75c31-bd8e-3ca3-bbef-8f0416a87c6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:40:b1:54:94:57:01:c1:67:fb:c3:7b:cc:00:08:6d:37:d3:
         8b:91:42:58:1e:05:1c:9b:67:33:e2:20:0d:9d:f5:c5:57:fe:
         f5:8a:0b:15:71:b2:f4:23:e3:92:e4:85:d2:fd:f6:cd:2e:73:
         55:fd:a3:da:5d:a0:f4:21:a5:2f:b2:88:af:fe:00:67:63:37:
         4d:53:af:95:fd:42:a5:8a:fe:7b:ef:f6:a6:d1:f3:f6:0d:89:
         33:d5:4d:82:22:cc:42:e3:07:47:e4:61:c0:73:fe:28:0b:8b:
         5d:ed:c2:87:7d:d0:5c:04:b2:c6:b8:a8:0d:7b:f4:12:49:50:
         9b:3e:87:ee:af:77:d6:3b:d5:83:1a:8c:12:d9:9b:21:c1:09:
         e1:11:a0:48:e7:9d:6d:66:0d:db:5d:9c:92:2d:63:94:30:b5:
         d2:68:7a:6f:7e:55:9d:3f:ca:ab:31:6f:de:0e:a3:53:ef:a8:
         32:8d:88:01:13:5c:9b:a3:ef:c2:78:e7:bc:be:6b:6c:17:15:
         3c:d4:59:bf:19:40:a0:ac:cf:2a:5c:05:2e:18:04:76:96:5d:
         49:f9:6b:4a:03:d0:47:e7:9c:f4:cf:b3:bc:34:d4:c7:4d:58:
         24:60:5f:fb:fb:2d:6b:bc:96:7e:3e:3f:92:89:24:ff:36:62:
         14:75:53:0e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5Nue7GNCo83PIvTcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk
MDU1MWRmZTQtNjU1ZS00NDdmLTgwMDMtNTFiYjM3MzBhMTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqahoZNka9YyVqN3pLy7x2XNQ1QuYoe+ExZjc
NgpXHeWUBHbNoyoDJcRdbnngYHErvQB7cAKyGZ1RCewnwrnSVl9CfBzOAf48atI3
KARUWAaWEvWKUpNwF0alDcmM41nbmtgFRb8y42jV3l3Y1KFe6rfuj+BvHpClWLv0
pP7WeR+3Ykd0pEY2hVluoqast8MfTQS/NikSMZ2Y88okQRwakNn5fUrahIFHNU91
KutKYOD/5kHOah1NHNab/kLEs55zekslyp1RZymHdRI/zkWtJSuoTGYph2W1S2Dy
F3VpzioK7eF9qGta2Uu7zJF77goLE+fvnrHsnL8Ed1JoLhh43QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGu8I6zCYdH3PxFBAFAL4Gu/El+rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjdlNzVjMzEtYmQ4ZS0z
Y2EzLWJiZWYtOGYwNDE2YTg3YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJNAsVSUVwHBZ/vDe8wACG0304uRQlgeBRybZzPiIA2d9cVX/vWK
CxVxsvQj45LkhdL99s0uc1X9o9pdoPQhpS+yiK/+AGdjN01Tr5X9QqWK/nvv9qbR
8/YNiTPVTYIizELjB0fkYcBz/igLi13twod90FwEssa4qA179BJJUJs+h+6vd9Y7
1YMajBLZmyHBCeERoEjnnW1mDdtdnJItY5QwtdJoem9+VZ0/yqsxb94Oo1PvqDKN
iAETXJuj78J457y+a2wXFTzUWb8ZQKCszypcBS4YBHaWXUn5a0oD0EfnnPTPs7w0
1MdNWCRgX/v7LWu8ln4+P5KJJP82YhR1Uw4=
-----END CERTIFICATE-----
Generated at Sun Jun 28 20:36:34 2026 by rpki-client