Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/670856e2-d534-3ac1-b662-21150a987896.roa
File:                     670856e2-d534-3ac1-b662-21150a987896.roa (raw, json)
Hash identifier:          JeqyaRPnlmsFgrwpRwM5LOu0HwdI+/lLIcmVQjxQMSo=
Subject key identifier:   26:BA:A0:66:CC:6E:C7:C6:C7:35:33:EB:A1:84:C6:0E:D2:7D:C6:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD090717AF7A01F3D50E6A300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/670856e2-d534-3ac1-b662-21150a987896.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     396580
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:71:7a:f7:a0:1f:3d:50:e6:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=dd6b58a7-acdf-4a98-a138-efb741352e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:b1:c9:40:d6:05:3c:bd:79:2d:4f:36:4a:
                    f6:89:1a:ec:ab:d8:ff:18:bb:6c:50:db:9a:79:1c:
                    a5:7c:95:96:04:c2:3d:fe:c2:30:9f:1f:fd:a2:f6:
                    2b:04:b2:9b:45:af:3b:dd:85:40:9a:37:94:ba:96:
                    ce:e3:9a:d3:42:1e:6b:16:21:e0:45:ef:bf:5a:77:
                    dd:0d:91:40:78:21:92:ff:98:f3:a5:2f:e6:f4:47:
                    e4:50:28:1f:36:86:42:66:26:16:58:44:74:c4:82:
                    83:b2:8f:dc:4b:0e:68:cb:d2:87:47:f4:c2:e0:15:
                    6b:22:49:6e:6b:00:45:04:90:52:f2:1f:d7:4b:e6:
                    29:0b:f5:72:f3:c9:f0:03:00:49:42:9d:69:63:c3:
                    61:45:1f:18:ad:5a:37:4e:eb:de:0b:3a:1f:84:2a:
                    29:45:19:9a:43:9f:6e:5e:3c:17:2a:87:dc:30:86:
                    9e:d1:ff:9b:61:2f:b2:8e:4b:05:be:3d:db:a7:4e:
                    e9:ce:c0:a0:12:2d:27:dd:c4:67:c5:1c:bd:ac:e4:
                    b0:e9:6a:36:83:07:76:f4:07:39:e8:33:7b:1f:5a:
                    d6:60:b8:5c:e0:bd:12:b5:72:18:7d:f0:2c:1c:84:
                    ad:1f:75:67:03:30:89:87:01:e4:ca:ce:af:64:79:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BA:A0:66:CC:6E:C7:C6:C7:35:33:EB:A1:84:C6:0E:D2:7D:C6:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/670856e2-d534-3ac1-b662-21150a987896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ef:1c:06:96:76:13:35:c6:f4:c6:9b:6a:bd:04:c3:77:39:
         15:25:45:00:2d:5c:f2:d3:e8:f5:fb:9a:9f:d9:2c:f3:38:26:
         23:b4:c8:6c:7d:f6:89:4f:82:11:8f:9f:bc:79:a2:e1:d9:e8:
         c2:cb:89:69:2a:52:22:b8:a7:21:1a:f3:9e:54:46:4d:12:7b:
         7d:a2:4b:82:db:bd:d3:97:01:be:eb:c5:ef:94:7e:2c:89:6a:
         62:1a:70:3e:a1:f1:51:7f:d7:19:bc:be:d9:df:db:e3:b9:9e:
         ea:be:b3:ac:b3:a8:d5:f6:79:9f:b4:54:ff:f5:3b:2e:78:ae:
         1e:87:30:a2:b6:de:69:f9:6b:5f:d6:95:15:1c:5f:03:d5:5f:
         35:bc:61:56:8b:30:c5:0c:57:bf:8e:f5:2b:eb:d3:80:a5:7a:
         c9:d5:a3:9c:22:41:b6:55:23:9f:0d:75:60:68:54:61:2d:ad:
         1f:23:18:61:00:ac:2f:65:44:80:6f:9d:a2:a2:ca:2b:df:1b:
         d4:d3:94:d5:f9:b0:08:14:d9:c9:55:f5:e6:3a:99:9e:52:b3:
         86:ba:0a:57:1c:13:8f:a8:26:53:10:0b:fe:ba:1a:35:16:7f:
         c9:da:f7:e2:4b:65:df:16:e1:e6:51:c8:7d:14:9a:9e:7f:df:
         60:64:72:a6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE3QkHF696AfPVDmowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk
ZGQ2YjU4YTctYWNkZi00YTk4LWExMzgtZWZiNzQxMzUyZTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0KxyUDWBTy9eS1PNkr2iRrsq9j/GLtsUNua
eRylfJWWBMI9/sIwnx/9ovYrBLKbRa873YVAmjeUupbO45rTQh5rFiHgRe+/Wnfd
DZFAeCGS/5jzpS/m9EfkUCgfNoZCZiYWWER0xIKDso/cSw5oy9KHR/TC4BVrIklu
awBFBJBS8h/XS+YpC/Vy88nwAwBJQp1pY8NhRR8YrVo3TuveCzofhCopRRmaQ59u
XjwXKofcMIae0f+bYS+yjksFvj3bp07pzsCgEi0n3cRnxRy9rOSw6Wo2gwd29Ac5
6DN7H1rWYLhc4L0StXIYffAsHIStH3VnAzCJhwHkys6vZHkHVQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCa6oGbMbsfGxzUz66GExg7SfcbwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjcwODU2ZTItZDUzNC0z
YWMxLWI2NjItMjExNTBhOTg3ODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAD7xwGlnYTNcb0xptqvQTDdzkVJUUALVzy0+j1
+5qf2SzzOCYjtMhsffaJT4IRj5+8eaLh2ejCy4lpKlIiuKchGvOeVEZNEnt9okuC
273TlwG+68XvlH4siWpiGnA+ofFRf9cZvL7Z39vjuZ7qvrOss6jV9nmftFT/9Tsu
eK4ehzCitt5p+Wtf1pUVHF8D1V81vGFWizDFDFe/jvUr69OApXrJ1aOcIkG2VSOf
DXVgaFRhLa0fIxhhAKwvZUSAb52iosor3xvU05TV+bAIFNnJVfXmOpmeUrOGugpX
HBOPqCZTEAv+uho1Fn/J2vfiS2XfFuHmUch9FJqef99gZHKm
-----END CERTIFICATE-----
Generated at Wed May 13 13:10:49 2026 by rpki-client