Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a299b466-1d31-3e09-8b30-d6e652e23b9b.roa
File:                     a299b466-1d31-3e09-8b30-d6e652e23b9b.roa (raw, json)
Hash identifier:          1UkO1uSpLH6RDGCw6kVGG6bHmWotlnqlXg6eyzC8W3k=
Subject key identifier:   BF:86:27:DB:4A:3B:1D:19:67:60:88:D3:57:8A:60:BC:F0:47:3C:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D932556C8C91986A258D39760
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a299b466-1d31-3e09-8b30-d6e652e23b9b.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     36618
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:56:c8:c9:19:86:a2:58:d3:97:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=a9e07663-b992-449d-b22b-c451eeef9248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:49:b1:19:67:28:ba:c2:95:e6:f1:28:79:
                    87:52:78:0c:57:24:3e:f9:36:7b:3d:5f:8c:36:e2:
                    30:9a:98:69:c6:c0:6f:4c:0f:2b:54:e3:ea:21:0b:
                    63:66:e8:f7:91:4f:01:60:03:3b:ba:92:7d:2e:f8:
                    17:9a:05:2a:61:44:0f:79:d2:bc:f2:d7:4d:a6:8b:
                    c1:5b:05:a5:f9:aa:d2:5e:24:50:a5:ab:97:fb:88:
                    d7:94:2c:fd:6b:39:ec:20:87:78:42:3d:cf:1e:e8:
                    f0:f3:c9:df:0a:9c:d2:d6:3a:b9:fb:12:b6:e9:69:
                    c4:f7:2f:d2:74:6b:a5:46:e7:be:a2:fc:bc:7c:7a:
                    06:ca:fa:3e:9d:21:01:88:2a:b7:d5:84:fb:6e:6b:
                    04:99:34:c0:f9:43:85:f6:82:85:c8:e5:b3:2b:c6:
                    55:0f:1c:f7:18:2a:42:ac:0b:3b:e1:a3:cc:2a:92:
                    fe:25:32:fa:b0:77:50:9a:a4:3a:bc:1b:30:32:dd:
                    41:84:13:1f:87:c0:6e:72:4f:15:81:6a:9e:92:2d:
                    71:1d:79:ac:a2:03:f2:27:74:98:92:63:d0:4f:f2:
                    49:46:a4:b0:8e:77:a7:e4:8d:d9:4a:91:ce:f9:1a:
                    cb:01:1f:89:ec:57:4f:84:ad:94:f7:0c:f9:a4:98:
                    55:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:86:27:DB:4A:3B:1D:19:67:60:88:D3:57:8A:60:BC:F0:47:3C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a299b466-1d31-3e09-8b30-d6e652e23b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:01:f4:ff:7b:2f:3c:ce:1e:06:7f:29:ca:6b:5c:3d:7f:9e:
         0d:39:7d:81:25:7c:93:b3:c6:a2:87:57:ba:f0:a9:d2:72:9d:
         d5:65:ad:b8:99:81:88:89:ac:9d:bd:8f:e2:6a:fb:e0:06:11:
         d6:1f:a7:9c:cf:80:29:aa:7e:71:42:c2:fa:13:b4:d7:6b:ab:
         5a:65:55:36:04:94:1a:3b:5a:1a:04:c9:5b:6b:3a:c3:29:76:
         d1:55:82:ee:04:a6:fe:fc:3d:9b:91:3d:d8:69:b6:92:14:ec:
         16:33:77:9c:5b:4b:09:bf:4c:f9:51:42:dc:92:f8:ad:c8:2d:
         fb:85:22:ef:96:81:18:68:b3:2d:47:f8:1a:6e:12:e3:7a:d7:
         cb:4c:ca:10:81:35:43:56:d8:70:f3:c1:07:9f:37:74:77:d9:
         84:ae:c0:86:3d:42:34:3d:77:47:5b:82:e6:95:f7:c0:02:10:
         3e:e3:4e:0d:8b:0c:c3:f4:da:58:93:8e:51:26:d6:52:21:e5:
         ac:7d:00:dc:23:40:d4:19:44:e1:a3:93:b7:75:27:2f:41:69:
         f7:39:8b:08:ef:e6:7b:81:62:f0:ea:5b:90:2d:81:43:4a:60:
         5a:ff:6e:e1:99:12:41:52:52:a4:d7:7f:2a:8a:7a:0c:d7:45:
         6e:5a:77:28
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2TJVbIyRmGoljTl2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk
YTllMDc2NjMtYjk5Mi00NDlkLWIyMmItYzQ1MWVlZWY5MjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwlJsRlnKLrClebxKHmHUngMVyQ++TZ7PV+M
NuIwmphpxsBvTA8rVOPqIQtjZuj3kU8BYAM7upJ9LvgXmgUqYUQPedK88tdNpovB
WwWl+arSXiRQpauX+4jXlCz9aznsIId4Qj3PHujw88nfCpzS1jq5+xK26WnE9y/S
dGulRue+ovy8fHoGyvo+nSEBiCq31YT7bmsEmTTA+UOF9oKFyOWzK8ZVDxz3GCpC
rAs74aPMKpL+JTL6sHdQmqQ6vBswMt1BhBMfh8Buck8VgWqeki1xHXmsogPyJ3SY
kmPQT/JJRqSwjnen5I3ZSpHO+RrLAR+J7FdPhK2U9wz5pJhVwwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFL+GJ9tKOx0ZZ2CI01eKYLzwRzzbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTI5OWI0NjYtMWQzMS0z
ZTA5LThiMzAtZDZlNjUyZTIzYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQChAfT/ey88zh4GfynKa1w9f54NOX2BJXyTs8ai
h1e68KnScp3VZa24mYGIiaydvY/iavvgBhHWH6ecz4Apqn5xQsL6E7TXa6taZVU2
BJQaO1oaBMlbazrDKXbRVYLuBKb+/D2bkT3YabaSFOwWM3ecW0sJv0z5UULckvit
yC37hSLvloEYaLMtR/gabhLjetfLTMoQgTVDVthw88EHnzd0d9mErsCGPUI0PXdH
W4LmlffAAhA+404NiwzD9NpYk45RJtZSIeWsfQDcI0DUGUTho5O3dScvQWn3OYsI
7+Z7gWLw6luQLYFDSmBa/27hmRJBUlKk138qinoM10VuWnco
-----END CERTIFICATE-----
Generated at Wed May 13 10:05:39 2026 by rpki-client