Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/385e8303-4165-33a7-91c8-24689d3c77b0.roa
File:                     385e8303-4165-33a7-91c8-24689d3c77b0.roa (raw, json)
Hash identifier:          Ho2Sf+Jv75JCxHgk3zSuIuUJtPk9QK0uo+MNgVahY80=
Subject key identifier:   21:89:4A:9A:82:43:FC:CE:24:D5:AC:6B:AF:1A:40:15:45:FE:31:2D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D250C30D48091CFBF5D48B840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/385e8303-4165-33a7-91c8-24689d3c77b0.roa
Signing time:             Thu 12 Mar 2026 14:31:03 +0000
ROA not before:           Thu 12 Mar 2026 14:31:03 +0000
ROA not after:            Wed 10 Jun 2026 14:31:03 +0000
asID:                     396597
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:0c:30:d4:80:91:cf:bf:5d:48:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 14:31:03 2026 GMT
            Not After : Jun 10 14:31:03 2026 GMT
        Subject: CN=0136435e-4d13-4d17-8735-7ca7652b3eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:61:8f:5a:37:c5:c5:8b:a4:fb:cd:64:de:ad:
                    56:b0:dc:9b:2a:36:04:54:3b:7e:1c:51:bd:a9:b7:
                    2b:34:43:07:45:82:20:15:a3:7a:8c:e6:f1:47:1c:
                    cf:2e:60:6a:c5:83:88:bb:63:30:77:56:f1:8c:77:
                    19:be:ab:b9:27:f6:76:47:f6:29:d4:54:c1:0b:88:
                    74:a9:d4:74:87:95:81:df:6e:1a:8c:9b:13:dd:9c:
                    24:0f:21:93:c2:0a:aa:0f:87:72:9c:f5:3e:4b:91:
                    57:80:db:e7:26:39:eb:1f:4d:9d:3d:89:7a:15:a2:
                    b9:22:11:0f:3d:4a:2d:40:d0:5b:87:4f:ff:61:59:
                    df:f9:f6:18:7a:65:a6:b0:b7:10:33:a6:7f:1f:40:
                    2a:ed:b0:db:cc:9b:89:ef:75:33:d1:89:d1:f2:22:
                    20:13:9e:d4:88:d4:0e:75:85:78:cd:f2:89:8a:93:
                    7a:72:b7:cb:17:d0:67:7c:f6:bd:0d:d6:46:04:ed:
                    6f:d9:71:45:30:91:72:fd:22:30:6a:84:db:28:74:
                    dc:99:24:a7:84:c0:01:3c:e2:c6:e5:ac:0d:5a:44:
                    1a:3e:fa:f6:c2:ef:a3:e1:aa:d7:8d:9a:63:6b:b4:
                    1b:38:67:58:be:cb:aa:6a:b5:3f:45:15:50:b0:f3:
                    80:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:89:4A:9A:82:43:FC:CE:24:D5:AC:6B:AF:1A:40:15:45:FE:31:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/385e8303-4165-33a7-91c8-24689d3c77b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:fa:1f:c4:ca:a5:35:64:1e:3e:b4:5d:91:c4:67:10:49:48:
         f9:fe:8e:a8:ff:02:71:03:82:82:c4:d0:a4:9a:21:e9:ce:99:
         69:c7:07:cd:21:c5:3e:38:8e:1b:30:db:00:5e:a1:df:76:55:
         13:3f:84:2a:0f:14:09:58:56:ac:f1:5f:66:dc:9c:15:97:8e:
         61:b0:27:bf:17:a7:b2:78:82:fd:ce:cb:f9:7e:00:bb:ec:0a:
         9c:dc:dd:48:40:68:b6:84:95:a1:ef:06:0a:99:e9:de:14:01:
         13:1a:f4:ce:28:94:d8:eb:07:c5:93:7e:37:a3:c4:65:a0:c2:
         d0:bf:fe:4d:57:eb:33:ef:36:cc:67:ef:b5:45:ea:24:ac:66:
         83:40:d6:45:e0:9e:ec:6b:c0:68:9e:d4:8b:51:f3:5b:b8:55:
         aa:0b:0e:ab:83:60:9a:b5:18:bd:48:a4:22:55:ca:28:9c:19:
         ad:e4:b4:93:e9:e3:82:e5:9e:d8:a5:7f:55:1c:0c:9f:bf:4b:
         ed:a7:32:d8:42:cf:9e:be:00:69:da:10:e7:a7:c1:8d:61:b8:
         3d:5b:a7:f6:9b:28:10:de:5b:2f:17:22:98:65:be:ba:42:c0:
         72:7e:c4:f6:3b:77:ba:ba:2c:5c:0b:55:08:08:5a:15:aa:a1:
         26:00:38:fc
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0lDDDUgJHPv11IuEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxMjE0MzEwM1oXDTI2MDYxMDE0MzEwM1owLzEtMCsGA1UEAxMk
MDEzNjQzNWUtNGQxMy00ZDE3LTg3MzUtN2NhNzY1MmIzZWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mGPWjfFxYuk+81k3q1WsNybKjYEVDt+HFG9
qbcrNEMHRYIgFaN6jObxRxzPLmBqxYOIu2Mwd1bxjHcZvqu5J/Z2R/Yp1FTBC4h0
qdR0h5WB324ajJsT3ZwkDyGTwgqqD4dynPU+S5FXgNvnJjnrH02dPYl6FaK5IhEP
PUotQNBbh0//YVnf+fYYemWmsLcQM6Z/H0Aq7bDbzJuJ73Uz0YnR8iIgE57UiNQO
dYV4zfKJipN6crfLF9BnfPa9DdZGBO1v2XFFMJFy/SIwaoTbKHTcmSSnhMABPOLG
5awNWkQaPvr2wu+j4arXjZpja7QbOGdYvsuqarU/RRVQsPOA/wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCGJSpqCQ/zOJNWsa68aQBVF/jEtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzg1ZTgzMDMtNDE2NS0z
M2E3LTkxYzgtMjQ2ODlkM2M3N2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFANk3
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCk+h/EyqU1ZB4+tF2RxGcQSUj5/o6o/wJxA4KC
xNCkmiHpzplpxwfNIcU+OI4bMNsAXqHfdlUTP4QqDxQJWFas8V9m3JwVl45hsCe/
F6eyeIL9zsv5fgC77Aqc3N1IQGi2hJWh7wYKmeneFAETGvTOKJTY6wfFk343o8Rl
oMLQv/5NV+sz7zbMZ++1ReokrGaDQNZF4J7sa8BontSLUfNbuFWqCw6rg2CatRi9
SKQiVcoonBmt5LST6eOC5Z7YpX9VHAyfv0vtpzLYQs+evgBp2hDnp8GNYbg9W6f2
mygQ3lsvFyKYZb66QsByfsT2O3e6uixcC1UICFoVqqEmADj8
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:12 2026 by rpki-client