Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3459d99b-238e-33f0-80af-37f38e16942a.roa
File:                     3459d99b-238e-33f0-80af-37f38e16942a.roa (raw, json)
Hash identifier:          MB0GtHNNUfEhr5H//FbNW03tZEODZsnpSFgY5vzLa34=
Subject key identifier:   91:37:A9:81:79:34:35:44:47:73:ED:1A:36:E1:1F:EA:D1:5A:A1:85
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F759C401663CA79474FDA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3459d99b-238e-33f0-80af-37f38e16942a.roa
Signing time:             Tue 10 Mar 2026 14:28:36 +0000
ROA not before:           Tue 10 Mar 2026 14:28:36 +0000
ROA not after:            Mon 08 Jun 2026 14:28:36 +0000
asID:                     396580
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:75:9c:40:16:63:ca:79:47:4f:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 14:28:36 2026 GMT
            Not After : Jun  8 14:28:36 2026 GMT
        Subject: CN=000b5969-151f-4ce2-b8bb-26d177a13476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c2:07:c3:c4:2d:64:a7:c8:aa:92:0b:fa:de:
                    12:9b:89:36:bb:8c:6e:ce:02:83:e5:03:e8:86:77:
                    ed:7a:85:7a:a1:d8:8d:91:23:6c:4c:d9:b1:62:ef:
                    3c:41:4b:f2:00:63:d6:3b:07:2f:a8:67:95:9b:56:
                    40:68:f4:f2:86:e4:ac:c2:fb:c6:78:34:ad:7a:b4:
                    bc:4b:54:ee:fa:8a:4f:fb:08:2a:52:de:75:40:86:
                    4e:5e:1b:bd:39:2a:24:e2:11:a5:d5:8d:11:44:38:
                    88:06:be:1c:42:49:74:4d:8c:07:8f:a6:a0:bb:d2:
                    25:41:07:c1:6a:28:4a:82:66:c0:63:f3:64:cf:ef:
                    85:df:3c:88:d2:5b:d0:3c:6b:54:04:b8:72:da:4a:
                    73:c0:ff:88:21:9d:de:c4:c8:72:c9:a6:9d:1c:ee:
                    df:67:15:a5:27:3e:0b:47:b8:10:22:2a:f9:60:46:
                    65:98:89:a9:ff:9e:6a:0c:10:88:03:a6:a4:93:58:
                    31:14:5b:ae:9f:f0:9a:95:7d:20:4a:22:41:37:63:
                    b0:c2:13:c3:5b:8c:37:06:91:54:19:7e:19:d5:7c:
                    c9:d4:10:0d:bc:3c:e0:01:8f:19:f8:6a:c3:69:3c:
                    38:f8:e4:51:47:ca:f8:f0:06:54:5a:40:d7:b4:23:
                    6d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:37:A9:81:79:34:35:44:47:73:ED:1A:36:E1:1F:EA:D1:5A:A1:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3459d99b-238e-33f0-80af-37f38e16942a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:9a:8a:6a:2f:f3:2e:c5:10:b8:a0:81:29:e2:39:b6:7f:4d:
         a0:bf:f1:7e:67:49:a2:97:b4:f3:a4:0e:08:fe:ea:42:09:c3:
         0b:94:14:cd:40:44:f6:f3:54:a9:0e:cb:19:c3:5d:57:17:ab:
         88:0e:8a:1a:a1:5b:8e:19:4c:88:8c:fc:10:42:8f:e8:bf:41:
         d3:41:fa:97:dc:e4:c9:21:cc:64:35:61:d1:63:71:ab:1a:db:
         29:58:12:a8:3e:9e:5e:01:57:b5:ba:64:d0:4e:c0:eb:1b:b3:
         4a:1c:02:55:94:fd:66:48:a2:a8:80:5a:d4:98:8f:5b:cf:c7:
         9d:4a:f5:3d:48:94:38:dc:9f:66:10:64:cf:ef:cb:dd:5f:df:
         b5:a4:f4:a3:6a:cb:c3:43:55:03:85:d2:6b:d6:f1:37:6a:8a:
         15:f0:dc:cc:70:06:35:22:24:4a:6c:be:88:e4:40:db:43:ba:
         f6:a2:92:6d:2c:1c:41:fb:ce:1b:38:6b:90:be:5f:6c:c5:94:
         f9:39:d9:e8:03:ec:58:f0:93:01:08:ec:bc:0a:f2:f9:e3:e0:
         01:e8:cb:6f:45:46:85:55:3c:14:86:f2:2c:19:f6:a8:f6:99:
         a0:68:0d:83:2e:61:3d:c1:fc:ff:60:f2:ad:98:f2:fe:54:65:
         30:9f:e3:91
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fdZxAFmPKeUdP2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxMDE0MjgzNloXDTI2MDYwODE0MjgzNlowLzEtMCsGA1UEAxMk
MDAwYjU5NjktMTUxZi00Y2UyLWI4YmItMjZkMTc3YTEzNDc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8IHw8QtZKfIqpIL+t4Sm4k2u4xuzgKD5QPo
hnfteoV6odiNkSNsTNmxYu88QUvyAGPWOwcvqGeVm1ZAaPTyhuSswvvGeDSterS8
S1Tu+opP+wgqUt51QIZOXhu9OSok4hGl1Y0RRDiIBr4cQkl0TYwHj6agu9IlQQfB
aihKgmbAY/Nkz++F3zyI0lvQPGtUBLhy2kpzwP+IIZ3exMhyyaadHO7fZxWlJz4L
R7gQIir5YEZlmImp/55qDBCIA6akk1gxFFuun/CalX0gSiJBN2OwwhPDW4w3BpFU
GX4Z1XzJ1BANvDzgAY8Z+GrDaTw4+ORRR8r48AZUWkDXtCNtlwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJE3qYF5NDVER3PtGjbhH+rRWqGFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzQ1OWQ5OWItMjM4ZS0z
M2YwLTgwYWYtMzdmMzhlMTY5NDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA9QU
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBZmopqL/MuxRC4oIEp4jm2f02gv/F+Z0mil7Tz
pA4I/upCCcMLlBTNQET281SpDssZw11XF6uIDooaoVuOGUyIjPwQQo/ov0HTQfqX
3OTJIcxkNWHRY3GrGtspWBKoPp5eAVe1umTQTsDrG7NKHAJVlP1mSKKogFrUmI9b
z8edSvU9SJQ43J9mEGTP78vdX9+1pPSjasvDQ1UDhdJr1vE3aooV8NzMcAY1IiRK
bL6I5EDbQ7r2opJtLBxB+84bOGuQvl9sxZT5OdnoA+xY8JMBCOy8CvL54+AB6Mtv
RUaFVTwUhvIsGfao9pmgaA2DLmE9wfz/YPKtmPL+VGUwn+OR
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:03:41 2026 by rpki-client