Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3887704-5373-32f9-a1ea-296f5f56b845.roa
File:                     e3887704-5373-32f9-a1ea-296f5f56b845.roa (raw, json)
Hash identifier:          5UOQYwFC+/BRLthLMQVEVeacz5r3+sYc0wT/ziG+WiA=
Subject key identifier:   DC:52:7F:B9:C1:A2:66:08:68:B0:50:11:CB:D9:99:FD:13:24:35:A8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD09071BB79A0F7EE3847CE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3887704-5373-32f9-a1ea-296f5f56b845.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     397202
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:71:bb:79:a0:f7:ee:38:47:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=b1ac73eb-bec9-4386-9121-2127ca7e6353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:84:a7:20:b2:7d:fa:d7:44:b8:e5:20:e7:5a:
                    5e:44:ab:12:48:96:1f:f9:72:e5:2e:fd:fb:27:03:
                    e6:3a:8b:d1:77:15:55:33:53:30:d7:f5:b5:17:21:
                    c5:39:bc:da:fb:bb:29:ec:73:18:da:aa:0d:81:0d:
                    d9:08:52:43:f8:21:4a:43:77:59:a0:13:8f:21:4d:
                    b3:2f:94:21:c1:dc:32:04:83:5d:50:e6:5c:f3:34:
                    38:d9:2c:4d:3b:4a:b5:b3:14:70:7d:af:c3:bf:d3:
                    5b:9a:d3:0c:8a:70:47:d6:9f:69:05:f8:bb:40:82:
                    15:fe:95:c5:3e:92:08:9d:76:d4:3d:fe:17:1b:82:
                    fa:2b:3f:73:a2:08:89:8b:eb:20:ce:67:d8:86:9e:
                    26:86:61:ab:9e:f9:57:51:16:19:3c:44:b7:f0:c0:
                    cc:19:3e:93:e6:e7:37:0b:7b:c4:fb:f7:c8:c2:3d:
                    55:25:3c:65:3e:db:e2:dc:08:77:05:e8:b2:29:a1:
                    06:0b:93:4b:a4:62:19:c7:8c:62:c2:a9:da:1d:59:
                    6b:07:76:e1:11:0f:0b:2c:d6:de:22:59:94:ce:0d:
                    06:f8:75:54:db:f8:12:aa:49:85:0b:b2:28:6a:cf:
                    0e:0c:c2:0e:ae:6b:6f:6a:37:2a:06:bb:09:8d:fa:
                    ce:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:52:7F:B9:C1:A2:66:08:68:B0:50:11:CB:D9:99:FD:13:24:35:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3887704-5373-32f9-a1ea-296f5f56b845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:71:9d:35:33:b0:01:cb:bd:b6:84:3a:1b:43:53:1e:fc:d6:
         bd:3a:7e:6f:23:2d:2f:4d:1a:45:c1:0c:4b:50:1c:80:40:41:
         8b:b2:ed:c1:73:40:0a:a3:c3:c4:f7:a7:f2:49:40:89:1b:cd:
         cd:30:6f:79:ab:a0:33:bd:74:f6:71:b1:0b:e0:8f:7e:b2:be:
         d2:bc:e0:1e:0c:99:62:da:21:fe:6b:8d:b9:53:2c:fa:e3:c5:
         89:90:bd:e2:e0:72:13:09:d8:d9:60:67:54:23:65:96:c0:43:
         6b:a4:3d:c7:6e:06:2c:d9:f5:57:af:03:c7:77:21:6f:37:a8:
         ff:c1:bf:19:f2:aa:f8:2e:ea:ac:b4:20:81:05:eb:12:24:fe:
         47:42:19:99:fa:5d:53:91:0a:28:47:8a:a6:a6:b6:72:d2:8d:
         9f:83:3a:1b:10:22:f1:39:e5:58:79:0b:c9:ea:52:55:75:49:
         f8:0e:da:eb:fd:98:89:e5:f6:0c:8d:b3:8b:e1:cb:aa:16:73:
         df:3a:e4:a3:cd:3f:00:66:d0:8b:9e:7c:5d:03:bf:9d:2a:98:
         35:91:10:a1:9a:32:94:0d:90:c8:56:6b:bd:6d:66:f1:9b:7e:
         6a:8f:b8:b6:97:17:68:8e:aa:20:52:37:16:34:75:e7:30:1a:
         07:ab:7d:b2
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE3QkHG7eaD37jhHzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk
YjFhYzczZWItYmVjOS00Mzg2LTkxMjEtMjEyN2NhN2U2MzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4SnILJ9+tdEuOUg51peRKsSSJYf+XLlLv37
JwPmOovRdxVVM1Mw1/W1FyHFObza+7sp7HMY2qoNgQ3ZCFJD+CFKQ3dZoBOPIU2z
L5QhwdwyBINdUOZc8zQ42SxNO0q1sxRwfa/Dv9NbmtMMinBH1p9pBfi7QIIV/pXF
PpIInXbUPf4XG4L6Kz9zogiJi+sgzmfYhp4mhmGrnvlXURYZPES38MDMGT6T5uc3
C3vE+/fIwj1VJTxlPtvi3Ah3BeiyKaEGC5NLpGIZx4xiwqnaHVlrB3bhEQ8LLNbe
IlmUzg0G+HVU2/gSqkmFC7Ioas8ODMIOrmtvajcqBrsJjfrOrQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNxSf7nBomYIaLBQEcvZmf0TJDWoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTM4ODc3MDQtNTM3My0z
MmY5LWExZWEtMjk2ZjVmNTZiODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCccZ01M7ABy722hDobQ1Me/Na9On5vIy0vTRpF
wQxLUByAQEGLsu3Bc0AKo8PE96fySUCJG83NMG95q6AzvXT2cbEL4I9+sr7SvOAe
DJli2iH+a425Uyz648WJkL3i4HITCdjZYGdUI2WWwENrpD3HbgYs2fVXrwPHdyFv
N6j/wb8Z8qr4LuqstCCBBesSJP5HQhmZ+l1TkQooR4qmprZy0o2fgzobECLxOeVY
eQvJ6lJVdUn4Dtrr/ZiJ5fYMjbOL4cuqFnPfOuSjzT8AZtCLnnxdA7+dKpg1kRCh
mjKUDZDIVmu9bWbxm35qj7i2lxdojqogUjcWNHXnMBoHq32y
-----END CERTIFICATE-----
Generated at Wed May 13 19:04:12 2026 by rpki-client