Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f554a176-f300-32de-8e8b-5da652774614.roa
File:                     f554a176-f300-32de-8e8b-5da652774614.roa (raw, json)
Hash identifier:          Sm4BiucnT5zN8YayGSstqMtxRwy126Z+RUzpJv/qQ5I=
Subject key identifier:   5F:AF:2D:F0:C8:D4:A8:FD:CE:AC:DE:88:77:D6:54:0D:35:16:0B:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D24E115802D9F1504120B5A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f554a176-f300-32de-8e8b-5da652774614.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     397203
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:15:80:2d:9f:15:04:12:0b:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=776f4713-dfc0-48e6-a76b-084e5de8ce69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:94:f5:cb:43:dc:01:36:05:1b:89:5a:c4:cb:
                    8a:08:f5:86:c5:38:58:3c:60:4b:fc:89:05:27:9a:
                    1a:de:93:40:59:3b:10:10:33:65:1c:96:bb:aa:fb:
                    73:ea:65:35:8e:8c:39:73:31:8c:67:2a:cb:85:f8:
                    98:cd:59:1d:da:47:ce:e6:96:48:17:d9:c3:4b:cc:
                    b4:bb:11:3e:5e:24:41:fc:42:d8:76:70:02:22:b0:
                    05:5d:c6:88:cb:76:03:35:68:7a:97:3d:a0:6a:e9:
                    3e:6f:d7:36:30:1e:09:e8:1d:d4:fc:94:84:59:83:
                    fe:ff:06:3e:10:c6:76:bc:b9:69:0d:f9:02:b2:3b:
                    5c:51:2a:12:ea:67:9a:0b:dc:bb:70:b6:61:c1:2d:
                    e0:8b:54:b3:6d:03:4a:f5:a9:f1:9f:2f:df:7b:02:
                    bf:69:21:18:1c:35:af:01:f8:6b:c3:b1:28:0a:ec:
                    06:62:a6:8f:c3:fb:ab:04:8c:b2:7e:40:32:77:2a:
                    bc:c4:58:d7:3e:75:be:c1:3d:5e:ff:7b:90:14:7d:
                    95:7b:51:07:03:40:9a:10:f0:71:f8:88:01:d6:9c:
                    49:db:21:6b:8f:67:00:48:5c:aa:19:eb:48:e7:ba:
                    be:dd:3e:22:dc:c3:eb:45:e1:c1:98:a4:b4:c7:bf:
                    28:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AF:2D:F0:C8:D4:A8:FD:CE:AC:DE:88:77:D6:54:0D:35:16:0B:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f554a176-f300-32de-8e8b-5da652774614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:31:9a:8d:fa:c5:69:60:0e:9e:0c:49:23:11:1e:17:03:25:
         3b:dd:f7:95:1d:d0:ba:fd:31:97:a4:34:79:08:41:9f:47:7c:
         b4:b6:81:69:93:65:ac:fa:43:45:3a:14:d3:74:30:9b:e6:a0:
         de:16:89:6e:f0:5b:cd:12:26:98:61:e3:15:3e:64:f4:f6:97:
         65:30:c9:fb:17:75:52:66:d3:43:ce:ee:67:b8:ad:4d:c3:48:
         73:b0:a9:67:e6:e2:fe:d2:c4:33:d8:1c:72:2b:ee:7b:0d:0f:
         1f:ac:d9:72:4c:44:f1:16:a8:5b:12:a4:71:16:51:03:62:8e:
         1c:63:33:48:d2:41:51:4b:1e:ac:96:e6:2c:e7:ae:5d:6b:f5:
         28:b8:50:d6:74:43:0d:78:69:e0:2f:fa:b1:d3:b6:69:8a:6d:
         98:82:6a:77:2b:a1:74:ea:18:56:21:d0:00:d9:8d:ac:43:43:
         a4:82:6d:ed:75:97:55:f1:ef:fa:c9:94:b8:87:4f:22:79:64:
         f1:3d:47:16:51:23:c9:fa:63:33:97:af:12:73:87:ec:ee:f4:
         9d:64:7e:d8:aa:91:ff:b5:39:a1:a4:bd:be:55:bc:a1:7f:f1:
         fc:73:47:7c:54:02:78:c9:21:08:7a:8d:c8:c7:a0:a2:3d:f3:
         8b:e2:d7:d1
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0k4RWALZ8VBBILWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
Nzc2ZjQ3MTMtZGZjMC00OGU2LWE3NmItMDg0ZTVkZThjZTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZT1y0PcATYFG4laxMuKCPWGxThYPGBL/IkF
J5oa3pNAWTsQEDNlHJa7qvtz6mU1jow5czGMZyrLhfiYzVkd2kfO5pZIF9nDS8y0
uxE+XiRB/ELYdnACIrAFXcaIy3YDNWh6lz2gauk+b9c2MB4J6B3U/JSEWYP+/wY+
EMZ2vLlpDfkCsjtcUSoS6meaC9y7cLZhwS3gi1SzbQNK9anxny/fewK/aSEYHDWv
Afhrw7EoCuwGYqaPw/urBIyyfkAydyq8xFjXPnW+wT1e/3uQFH2Ve1EHA0CaEPBx
+IgB1pxJ2yFrj2cASFyqGetI57q+3T4i3MPrReHBmKS0x78ojwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFF+vLfDI1Kj9zqzeiHfWVA01FgvAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjU1NGExNzYtZjMwMC0z
MmRlLThlOGItNWRhNjUyNzc0NjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAjMZqN+sVpYA6eDEkjER4XAyU73feVHdC6/TGX
pDR5CEGfR3y0toFpk2Ws+kNFOhTTdDCb5qDeFolu8FvNEiaYYeMVPmT09pdlMMn7
F3VSZtNDzu5nuK1Nw0hzsKln5uL+0sQz2BxyK+57DQ8frNlyTETxFqhbEqRxFlED
Yo4cYzNI0kFRSx6sluYs565da/UouFDWdEMNeGngL/qx07Zpim2Ygmp3K6F06hhW
IdAA2Y2sQ0Okgm3tdZdV8e/6yZS4h08ieWTxPUcWUSPJ+mMzl68Sc4fs7vSdZH7Y
qpH/tTmhpL2+Vbyhf/H8c0d8VAJ4ySEIeo3Ix6CiPfOL4tfR
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:43:49 2026 by rpki-client