Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d95fed36-8502-3fa9-b78d-7b5b7c9ccbd2.roa
File:                     d95fed36-8502-3fa9-b78d-7b5b7c9ccbd2.roa (raw, json)
Hash identifier:          BAC/Tcjpz94+55wQE5ngGvEzuYuE2ulHKoN73AzQ/Zk=
Subject key identifier:   95:44:41:DB:A1:BA:9A:D7:2F:30:05:E0:92:90:FC:FE:41:3F:C4:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D143D42CCDD5E10CD3ECC93C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d95fed36-8502-3fa9-b78d-7b5b7c9ccbd2.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     396589
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:42:cc:dd:5e:10:cd:3e:cc:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=1f26c0e8-9e6e-4a7c-b248-0e61be8a09c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:56:f6:ad:88:e9:9c:a8:25:bb:1c:88:f6:
                    35:3d:7e:16:44:7a:3d:f6:cb:25:a8:b6:f0:8a:9c:
                    bb:23:66:b8:0e:50:70:96:3d:94:45:97:d0:5f:3e:
                    04:a2:b1:0b:8b:13:df:34:8c:d5:20:ff:b9:56:16:
                    21:8b:8e:f0:6e:37:27:a7:03:94:a8:23:5d:60:95:
                    4e:23:e1:77:f6:0e:a1:c9:c7:97:79:d9:1d:cd:77:
                    cf:90:11:b6:5c:05:40:b6:ba:84:d0:78:c6:d7:c1:
                    96:94:ff:2b:8b:69:d1:97:17:fe:63:48:7c:dd:95:
                    37:b9:a2:07:2a:f8:0f:e6:32:77:92:62:67:5a:90:
                    c0:7c:4e:e9:d7:46:ad:d7:e1:a3:e6:02:e4:08:6e:
                    27:09:c4:ce:15:c3:83:e4:1c:41:58:e3:7a:64:81:
                    82:2a:4a:27:46:4a:63:d1:c5:13:1e:21:32:ea:c2:
                    b5:a0:52:9d:04:11:0a:ce:8f:ed:30:24:72:b3:ba:
                    51:31:92:e2:16:56:c8:31:5e:26:a7:e7:91:d7:a7:
                    43:48:01:f4:8b:d9:46:b2:93:c1:0c:58:bb:ea:22:
                    5b:81:55:61:9f:31:bc:f4:32:82:0b:f4:61:05:09:
                    68:1e:6e:1b:c4:67:c8:0c:40:aa:13:33:75:a8:52:
                    07:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:44:41:DB:A1:BA:9A:D7:2F:30:05:E0:92:90:FC:FE:41:3F:C4:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d95fed36-8502-3fa9-b78d-7b5b7c9ccbd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:81:3d:35:b9:b5:fc:56:98:86:95:90:78:39:72:21:a6:98:
         34:47:08:45:cb:64:ad:c6:fe:0a:e7:51:f8:b9:55:72:51:df:
         ff:28:ec:26:b4:f4:09:7e:69:9b:f4:2b:e1:79:43:b3:88:31:
         2e:cb:7b:f4:03:94:6a:6f:49:5a:c8:2c:df:e2:6a:0c:7b:74:
         d5:74:87:9d:45:39:43:a3:be:da:25:91:cb:29:e8:69:ed:58:
         6f:60:b6:09:0e:2c:98:ab:f5:49:0f:3a:cc:a9:ba:2a:4a:b7:
         73:77:ac:d8:13:d3:38:58:dc:27:6f:7e:4d:51:a6:af:41:10:
         72:d0:48:50:69:79:fb:e5:46:f7:c9:d6:46:e6:d6:cc:ef:90:
         5f:d1:bd:57:73:b9:7a:f8:a5:7d:dc:76:b6:26:a8:fe:d7:68:
         66:07:25:86:71:df:0a:62:29:fa:d5:14:d6:f1:b1:2d:81:20:
         48:01:a3:5c:14:a1:84:9c:7d:b8:36:0e:64:35:a3:2f:78:a3:
         29:14:d6:3b:ea:80:5f:12:ae:19:f8:20:ee:b6:91:ab:33:6e:
         e3:ba:66:e2:64:6a:e6:74:83:b2:2c:bf:9b:f8:b7:43:68:df:
         9c:59:23:3e:05:fe:cf:71:1c:d8:a0:0f:05:11:04:22:08:93:
         c0:92:5d:c1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UPULM3V4QzT7Mk8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
MWYyNmMwZTgtOWU2ZS00YTdjLWIyNDgtMGU2MWJlOGEwOWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/VW9q2I6ZyoJbsciPY1PX4WRHo99sslqLbw
ipy7I2a4DlBwlj2URZfQXz4EorELixPfNIzVIP+5VhYhi47wbjcnpwOUqCNdYJVO
I+F39g6hyceXedkdzXfPkBG2XAVAtrqE0HjG18GWlP8ri2nRlxf+Y0h83ZU3uaIH
KvgP5jJ3kmJnWpDAfE7p10at1+Gj5gLkCG4nCcTOFcOD5BxBWON6ZIGCKkonRkpj
0cUTHiEy6sK1oFKdBBEKzo/tMCRys7pRMZLiFlbIMV4mp+eR16dDSAH0i9lGspPB
DFi76iJbgVVhnzG89DKCC/RhBQloHm4bxGfIDECqEzN1qFIHKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJVEQduhuprXLzAF4JKQ/P5BP8QpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDk1ZmVkMzYtODUwMi0z
ZmE5LWI3OGQtN2I1YjdjOWNjYmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE+BPTW5tfxWmIaVkHg5ciGmmDRHCEXLZK3G/grnUfi5VXJR3/8o
7Ca09Al+aZv0K+F5Q7OIMS7Le/QDlGpvSVrILN/iagx7dNV0h51FOUOjvtolkcsp
6GntWG9gtgkOLJir9UkPOsypuipKt3N3rNgT0zhY3Cdvfk1Rpq9BEHLQSFBpefvl
RvfJ1kbm1szvkF/RvVdzuXr4pX3cdrYmqP7XaGYHJYZx3wpiKfrVFNbxsS2BIEgB
o1wUoYScfbg2DmQ1oy94oykU1jvqgF8Srhn4IO62kaszbuO6ZuJkauZ0g7Isv5v4
t0No35xZIz4F/s9xHNigDwURBCIIk8CSXcE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:25:36 2026 by rpki-client