Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ce50421-3fd3-3186-a4f2-3da6194682c2.roa
File:                     6ce50421-3fd3-3186-a4f2-3da6194682c2.roa (raw, json)
Hash identifier:          hUFTlwAGCzBT4UNEZCoiyghwtcq96YgIRvhAD3zTJig=
Subject key identifier:   99:A6:22:F0:3B:F4:C6:C8:EB:3D:76:86:F5:CF:AF:F0:E1:B3:1B:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F75A5622AEF012040AEE880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ce50421-3fd3-3186-a4f2-3da6194682c2.roa
Signing time:             Tue 10 Mar 2026 14:28:41 +0000
ROA not before:           Tue 10 Mar 2026 14:28:41 +0000
ROA not after:            Mon 08 Jun 2026 14:28:41 +0000
asID:                     397207
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:75:a5:62:2a:ef:01:20:40:ae:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 14:28:41 2026 GMT
            Not After : Jun  8 14:28:41 2026 GMT
        Subject: CN=0a1a9995-fb9f-42af-9f1a-bd43d8071b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:98:78:f5:19:4d:ce:30:59:07:4b:cb:04:34:
                    e9:c7:4f:f4:58:84:8f:42:60:a8:b5:89:19:37:e8:
                    fc:e1:a2:e5:82:a3:a4:f1:8f:28:38:4f:2f:b7:4a:
                    61:8b:8f:54:65:a5:43:d4:4d:1b:99:ef:46:a6:21:
                    62:60:0d:4d:a3:08:63:e5:68:cb:88:d3:1c:c0:93:
                    44:f8:2b:98:8b:a8:cc:9a:8d:2b:2e:67:ed:27:e5:
                    ed:c4:86:2d:87:d0:db:d3:64:ce:17:a8:42:69:26:
                    1a:9f:43:04:3f:f6:26:d1:e7:ac:32:33:99:e9:a4:
                    a7:12:eb:20:a2:0e:ca:68:64:32:09:41:b9:c7:57:
                    06:20:81:49:b0:fb:6e:6e:36:02:97:16:da:b1:ec:
                    c1:41:3f:15:24:ce:73:ee:42:9b:21:11:da:7a:24:
                    d4:5c:ea:bd:49:7a:27:ca:f9:f1:30:48:5c:60:1c:
                    ba:bc:73:ca:a1:5b:b9:f7:75:57:4b:9c:8e:39:6c:
                    fc:3c:92:76:a8:c8:92:69:33:f6:1d:f8:c8:e6:45:
                    d3:5d:39:9b:56:47:a5:5f:da:26:e5:3b:8d:ca:6c:
                    2f:47:63:b9:7b:ae:1b:5f:42:30:04:d4:5f:dd:14:
                    74:6c:f0:a4:70:cb:59:f8:ab:89:65:87:58:8b:eb:
                    e7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A6:22:F0:3B:F4:C6:C8:EB:3D:76:86:F5:CF:AF:F0:E1:B3:1B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ce50421-3fd3-3186-a4f2-3da6194682c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:16:f1:ad:04:f0:96:60:69:1a:84:c3:cd:e4:24:b4:50:c2:
         c4:fd:4f:eb:19:b3:08:29:6a:83:3f:a2:3c:43:d5:d8:eb:a7:
         18:88:2c:c7:1d:72:60:07:89:e7:d8:66:99:eb:b7:11:b7:94:
         6c:3b:43:f4:d9:da:a2:f3:95:36:a5:e0:1c:7b:2c:5f:9c:8b:
         2e:9a:99:ec:30:c2:c2:a2:fd:bb:36:b8:bc:ae:e3:80:78:c9:
         7b:82:9d:92:61:37:9c:bd:fb:8d:57:53:5e:de:b5:f2:41:a6:
         71:cf:92:8c:af:db:f8:a2:99:77:1c:fd:e0:8c:36:03:b6:c5:
         e0:29:bb:f1:35:a2:92:3d:a6:58:8c:35:69:9b:b0:78:30:91:
         0f:35:6f:35:d5:81:3e:15:0e:e1:ab:fd:af:25:e5:ac:c3:cf:
         a7:23:d0:62:ba:2b:09:d9:f0:8c:34:35:84:e5:0f:8b:f7:77:
         a5:59:09:de:2f:b2:3c:ad:17:f8:a4:d2:ea:f8:28:e2:5a:ad:
         da:dc:ce:87:40:86:3b:ee:17:31:98:22:e1:4e:bd:e3:01:47:
         4e:6e:5f:02:d8:43:34:98:1e:07:40:47:87:06:88:c6:6b:a5:
         e6:93:62:8f:cc:cc:33:1a:bd:83:36:43:61:a1:79:2b:e0:60:
         8d:31:06:e9
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fdaViKu8BIECu6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxMDE0Mjg0MVoXDTI2MDYwODE0Mjg0MVowLzEtMCsGA1UEAxMk
MGExYTk5OTUtZmI5Zi00MmFmLTlmMWEtYmQ0M2Q4MDcxYjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgph49RlNzjBZB0vLBDTpx0/0WISPQmCotYkZ
N+j84aLlgqOk8Y8oOE8vt0phi49UZaVD1E0bme9GpiFiYA1Nowhj5WjLiNMcwJNE
+CuYi6jMmo0rLmftJ+XtxIYth9Db02TOF6hCaSYan0MEP/Ym0eesMjOZ6aSnEusg
og7KaGQyCUG5x1cGIIFJsPtubjYClxbasezBQT8VJM5z7kKbIRHaeiTUXOq9SXon
yvnxMEhcYBy6vHPKoVu593VXS5yOOWz8PJJ2qMiSaTP2HfjI5kXTXTmbVkelX9om
5TuNymwvR2O5e64bX0IwBNRf3RR0bPCkcMtZ+KuJZYdYi+vnywIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJmmIvA79MbI6z12hvXPr/DhsxtmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmNlNTA0MjEtM2ZkMy0z
MTg2LWE0ZjItM2RhNjE5NDY4MmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA9QU
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCQFvGtBPCWYGkahMPN5CS0UMLE/U/rGbMIKWqD
P6I8Q9XY66cYiCzHHXJgB4nn2GaZ67cRt5RsO0P02dqi85U2peAceyxfnIsumpns
MMLCov27Nri8ruOAeMl7gp2SYTecvfuNV1Ne3rXyQaZxz5KMr9v4opl3HP3gjDYD
tsXgKbvxNaKSPaZYjDVpm7B4MJEPNW811YE+FQ7hq/2vJeWsw8+nI9BiuisJ2fCM
NDWE5Q+L93elWQneL7I8rRf4pNLq+CjiWq3a3M6HQIY77hcxmCLhTr3jAUdObl8C
2EM0mB4HQEeHBojGa6Xmk2KPzMwzGr2DNkNhoXkr4GCNMQbp
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:53:57 2026 by rpki-client