Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0034a422-13f9-3ae6-89da-a80f9a5ad2c2.roa
File:                     0034a422-13f9-3ae6-89da-a80f9a5ad2c2.roa (raw, json)
Hash identifier:          8tx9hdG2Ql6+p7GeES+BweBoxWanfSi8SSrbzs8zbsg=
Subject key identifier:   88:BF:9F:0B:54:74:27:AB:42:65:00:1B:E0:3E:CC:6B:6F:93:D6:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D32F5A72CB6A8F88F12FD8F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0034a422-13f9-3ae6-89da-a80f9a5ad2c2.roa
Signing time:             Tue 17 Mar 2026 14:06:57 +0000
ROA not before:           Tue 17 Mar 2026 14:06:57 +0000
ROA not after:            Mon 15 Jun 2026 14:06:57 +0000
asID:                     396565
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:f5:a7:2c:b6:a8:f8:8f:12:fd:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 17 14:06:57 2026 GMT
            Not After : Jun 15 14:06:57 2026 GMT
        Subject: CN=377281fd-31ab-43df-8f5e-6833ecf50304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d1:5f:92:9b:f5:05:36:d9:87:57:f3:41:da:
                    0b:0a:21:d7:d1:4f:f6:f1:77:06:26:10:b6:ca:c6:
                    a3:3a:b1:6d:73:86:eb:44:cb:88:6b:1b:b4:6c:c6:
                    90:c0:57:77:f5:6a:94:04:cd:76:f6:2d:4a:23:01:
                    1a:ac:60:40:29:53:05:da:1e:a6:01:91:bd:b4:41:
                    eb:cc:fc:be:85:85:e3:52:2c:32:01:7e:f1:57:b3:
                    d6:f4:42:f0:c1:4a:3c:94:1b:64:80:32:f5:4d:3a:
                    66:e0:88:a0:5a:87:c3:02:20:1a:61:fd:6d:37:91:
                    0c:af:01:22:53:83:00:40:52:db:6a:fc:c8:39:3a:
                    df:61:9c:92:7b:ee:40:40:20:3a:8f:e2:90:c5:d1:
                    52:b8:23:f9:b2:66:eb:30:c8:9b:39:01:5e:e1:eb:
                    95:46:e7:e3:e5:d6:e8:c2:98:eb:56:ed:2f:71:5f:
                    83:45:db:80:9a:90:59:48:40:b9:be:7e:0b:e1:a5:
                    b3:51:60:d8:39:29:f9:75:77:4b:a3:fa:84:ad:92:
                    20:ee:5b:87:da:2b:7d:cd:6e:bd:2c:65:96:67:6f:
                    c8:26:63:90:8d:5e:c8:82:3d:31:2f:f8:45:f1:db:
                    00:a6:50:95:9c:9e:e0:eb:a3:bb:3e:9e:e5:03:a9:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BF:9F:0B:54:74:27:AB:42:65:00:1B:E0:3E:CC:6B:6F:93:D6:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0034a422-13f9-3ae6-89da-a80f9a5ad2c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:75:f9:0d:c7:61:43:87:0d:58:20:9d:ae:54:44:8f:2d:1a:
         6d:47:61:43:82:85:ba:9c:ec:2d:81:71:c1:4f:89:5d:c1:f7:
         45:02:98:d7:62:74:42:c7:7f:bd:a0:79:7b:c4:52:16:9f:89:
         45:b0:22:99:ed:aa:17:ad:f0:44:8a:2b:26:cd:61:ff:75:a6:
         42:88:62:ec:7f:80:36:d5:7e:1d:49:fd:49:1a:d8:66:1a:17:
         bc:70:28:4b:3e:03:ae:87:23:40:6d:98:1a:e1:58:79:32:8d:
         c0:4f:e0:eb:cc:ac:8d:a2:32:82:be:16:e2:43:eb:e0:94:c6:
         54:21:1b:85:9c:f2:23:0d:24:2a:98:96:4a:c7:a4:d9:b7:74:
         85:75:ed:f9:a4:51:d5:e9:a8:7f:2e:34:f9:9c:1c:9e:dc:42:
         01:be:af:2f:70:f9:54:3b:1f:4c:64:19:91:d2:fa:3b:74:54:
         96:80:cf:87:44:12:58:68:3b:ad:33:e3:78:f5:c4:5d:0b:6d:
         c0:c7:ad:99:63:81:8e:45:c6:57:3e:6b:c6:c1:da:00:c3:4f:
         1f:0b:db:ed:17:ee:2d:10:ed:12:4d:86:09:5b:cd:6e:4e:a2:
         88:d5:8d:49:1d:71:26:b7:70:b0:a8:d0:48:89:38:09:b7:3f:
         4e:cb:b0:ab
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0y9acstqj4jxL9jwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxNzE0MDY1N1oXDTI2MDYxNTE0MDY1N1owLzEtMCsGA1UEAxMk
Mzc3MjgxZmQtMzFhYi00M2RmLThmNWUtNjgzM2VjZjUwMzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktFfkpv1BTbZh1fzQdoLCiHX0U/28XcGJhC2
ysajOrFtc4brRMuIaxu0bMaQwFd39WqUBM129i1KIwEarGBAKVMF2h6mAZG9tEHr
zPy+hYXjUiwyAX7xV7PW9ELwwUo8lBtkgDL1TTpm4IigWofDAiAaYf1tN5EMrwEi
U4MAQFLbavzIOTrfYZySe+5AQCA6j+KQxdFSuCP5smbrMMibOQFe4euVRufj5dbo
wpjrVu0vcV+DRduAmpBZSEC5vn4L4aWzUWDYOSn5dXdLo/qErZIg7luH2it9zW69
LGWWZ2/IJmOQjV7Igj0xL/hF8dsAplCVnJ7g66O7Pp7lA6m2JwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFIi/nwtUdCerQmUAG+A+zGtvk9b+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDAzNGE0MjItMTNmOS0z
YWU2LTg5ZGEtYTgwZjlhNWFkMmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAIVu
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCvdfkNx2FDhw1YIJ2uVESPLRptR2FDgoW6nOwt
gXHBT4ldwfdFApjXYnRCx3+9oHl7xFIWn4lFsCKZ7aoXrfBEiismzWH/daZCiGLs
f4A21X4dSf1JGthmGhe8cChLPgOuhyNAbZga4Vh5Mo3AT+DrzKyNojKCvhbiQ+vg
lMZUIRuFnPIjDSQqmJZKx6TZt3SFde35pFHV6ah/LjT5nBye3EIBvq8vcPlUOx9M
ZBmR0vo7dFSWgM+HRBJYaDutM+N49cRdC23Ax62ZY4GORcZXPmvGwdoAw08fC9vt
F+4tEO0STYYJW81uTqKI1Y1JHXEmt3CwqNBIiTgJtz9Oy7Cr
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:03:49 2026 by rpki-client