Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9b8d098-aa96-381a-aeea-72fdd3ec78dd.roa
File:                     b9b8d098-aa96-381a-aeea-72fdd3ec78dd.roa (raw, json)
Hash identifier:          IOkv1e53sxI/m6mImLa36/WjFxYWgtBZg0TiWnrslP4=
Subject key identifier:   22:2A:33:5B:40:7F:DC:7E:D0:CB:D8:1E:4E:9E:7C:5F:01:DB:F5:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A202A7735FA7002BD39AD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9b8d098-aa96-381a-aeea-72fdd3ec78dd.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     396544
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:2a:77:35:fa:70:02:bd:39:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=c79e2ecc-7306-46e3-89e0-1e0d9d5fb7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f2:84:33:b7:09:b8:80:2d:29:4a:f4:c3:ab:
                    3d:34:e8:a5:fc:3d:3c:cf:45:e8:8a:13:3f:91:0d:
                    7d:bd:24:47:fa:f8:8d:e3:9e:41:48:7e:da:c3:9b:
                    db:8e:a0:2c:18:43:90:4f:89:2e:f1:0d:44:82:1d:
                    b1:05:4e:50:67:9e:d7:0b:02:2b:4f:bb:a1:20:28:
                    33:0f:af:48:11:fd:7f:1e:0f:98:67:92:4e:df:e7:
                    76:50:8b:23:6e:bc:03:c2:e0:6f:7a:fa:dd:12:aa:
                    01:4c:e3:cd:bf:6d:98:a5:4f:4d:a0:b0:a8:b2:2f:
                    b4:6f:be:41:a6:cf:28:11:50:5a:79:12:00:70:27:
                    cd:ea:e4:bf:42:bb:f4:84:d4:73:6b:ad:d9:16:a4:
                    ac:da:8c:11:9a:54:4d:ed:f7:6a:e9:43:eb:e3:d7:
                    db:29:d4:3e:48:54:2c:c4:87:a9:41:fa:c4:3f:27:
                    6b:cb:7f:b4:7e:32:48:0a:2c:d8:7c:dc:37:4e:11:
                    74:6e:31:bb:fa:1c:d0:a5:7c:19:ce:31:a8:47:fe:
                    c6:b8:a2:3f:50:58:35:a2:24:a8:a5:db:85:4c:f9:
                    85:5c:cc:cc:03:5f:fc:58:c8:de:1b:f4:93:e5:d4:
                    0c:3a:8e:0c:a1:db:9c:16:50:22:1c:84:92:5f:fa:
                    e4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2A:33:5B:40:7F:DC:7E:D0:CB:D8:1E:4E:9E:7C:5F:01:DB:F5:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9b8d098-aa96-381a-aeea-72fdd3ec78dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:8e:38:e6:68:9b:da:88:aa:29:b3:bd:06:d6:6d:17:42:e8:
         fb:9b:27:d3:6a:ae:4c:d2:39:5d:14:46:cf:74:74:17:75:96:
         cd:73:71:3f:fa:e4:50:02:49:22:39:b4:b9:04:d9:1f:fe:45:
         fe:ce:a8:df:d3:a9:c8:d9:d3:f3:34:34:15:59:56:f2:e5:d8:
         4e:9a:d9:fb:6b:8e:4d:7d:bb:64:2f:f5:a4:d6:c2:f9:ad:c0:
         b2:ce:6b:4c:72:da:7e:c0:4f:a6:aa:02:17:63:61:c0:42:f4:
         c4:73:3f:7c:2a:63:72:db:c7:6d:c5:b8:2b:a5:40:16:12:f4:
         f0:4a:63:fa:b4:1b:16:9e:cc:d4:d9:c9:67:16:1b:52:47:6a:
         9e:44:f7:d8:37:40:f1:a8:5e:83:f4:53:fd:96:95:33:67:11:
         c1:00:b5:3f:1f:91:21:4f:6f:98:35:ac:a5:36:00:3b:53:c9:
         c8:e6:81:88:33:f0:7f:38:ef:66:76:c3:2f:32:b3:43:ee:3f:
         ac:1c:d5:95:f6:41:38:57:cc:bf:77:c1:06:6a:41:5e:22:ba:
         39:e6:a8:93:41:ea:a0:b1:e5:28:ea:01:e5:96:14:86:3d:ef:
         75:d8:77:29:ae:94:a8:6b:df:37:1c:e5:df:33:56:87:cc:15:
         2c:44:80:78
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2aICp3NfpwAr05rQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk
Yzc5ZTJlY2MtNzMwNi00NmUzLTg5ZTAtMWUwZDlkNWZiN2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PKEM7cJuIAtKUr0w6s9NOil/D08z0XoihM/
kQ19vSRH+viN455BSH7aw5vbjqAsGEOQT4ku8Q1Egh2xBU5QZ57XCwIrT7uhICgz
D69IEf1/Hg+YZ5JO3+d2UIsjbrwDwuBvevrdEqoBTOPNv22YpU9NoLCosi+0b75B
ps8oEVBaeRIAcCfN6uS/Qrv0hNRza63ZFqSs2owRmlRN7fdq6UPr49fbKdQ+SFQs
xIepQfrEPydry3+0fjJICizYfNw3ThF0bjG7+hzQpXwZzjGoR/7GuKI/UFg1oiSo
pduFTPmFXMzMA1/8WMjeG/ST5dQMOo4ModucFlAiHISSX/rkFQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCIqM1tAf9x+0MvYHk6efF8B2/XJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjliOGQwOTgtYWE5Ni0z
ODFhLWFlZWEtNzJmZGQzZWM3OGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBUjjjmaJvaiKops70G1m0XQuj7myfTaq5M0jld
FEbPdHQXdZbNc3E/+uRQAkkiObS5BNkf/kX+zqjf06nI2dPzNDQVWVby5dhOmtn7
a45NfbtkL/Wk1sL5rcCyzmtMctp+wE+mqgIXY2HAQvTEcz98KmNy28dtxbgrpUAW
EvTwSmP6tBsWnszU2clnFhtSR2qeRPfYN0DxqF6D9FP9lpUzZxHBALU/H5EhT2+Y
NaylNgA7U8nI5oGIM/B/OO9mdsMvMrND7j+sHNWV9kE4V8y/d8EGakFeIro55qiT
QeqgseUo6gHllhSGPe912HcprpSoa983HOXfM1aHzBUsRIB4
-----END CERTIFICATE-----
Generated at Wed May 13 05:22:18 2026 by rpki-client