Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0098229e-1ef4-3ab0-86e2-4a49739bf496.roa
File:                     0098229e-1ef4-3ab0-86e2-4a49739bf496.roa (raw, json)
Hash identifier:          JYFgntBvEFoQIIsrrU7hs0TBr+XsnoQ9S5DkZ5pUZ2c=
Subject key identifier:   98:95:DB:03:33:63:20:7B:D5:AF:F9:89:3A:C2:A1:40:10:70:85:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D87FA90DCF0337C7A085E6280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0098229e-1ef4-3ab0-86e2-4a49739bf496.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     396572
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:90:dc:f0:33:7c:7a:08:5e:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=8b72eeed-f891-4758-b3fd-eaaf5222e35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:a1:6d:36:08:78:e5:7b:19:79:bd:34:91:
                    2e:3e:ae:c7:32:8f:77:64:73:2d:1c:fb:71:21:89:
                    9e:b7:dd:ba:26:a0:78:99:35:5e:4a:84:a8:d8:34:
                    98:e0:bb:76:03:b1:42:aa:2d:ec:6f:56:d4:42:22:
                    ba:0c:57:a4:e4:83:21:15:e6:92:ca:24:0f:cb:0f:
                    77:6f:b8:a0:5e:73:7a:ee:46:33:6c:3c:2c:c1:e9:
                    a8:71:4b:5a:a9:54:92:06:be:11:2b:03:f2:30:ae:
                    6a:dc:d3:f7:0c:5a:db:d7:17:38:71:38:cf:36:36:
                    b4:02:a0:3d:85:e7:6b:75:1f:02:a5:84:ab:65:f5:
                    7f:e3:9e:c3:38:4d:44:89:0b:ec:4f:d4:88:ec:ec:
                    31:70:8b:df:27:cf:d4:67:aa:78:35:a9:51:f8:8c:
                    28:12:7f:7f:51:f0:74:87:de:a0:9c:8b:1d:a2:84:
                    b9:4f:fc:2c:a3:29:f7:01:64:f6:ef:aa:0d:b6:44:
                    2d:d1:1b:e6:02:3b:30:22:f6:33:54:26:65:66:52:
                    1f:cd:f5:e6:25:41:d5:7c:cc:c1:cf:e2:63:27:c7:
                    c9:62:64:f2:60:78:05:f5:f6:76:89:c6:7d:91:83:
                    46:8c:2b:e8:cc:d2:45:73:f6:80:2e:a5:06:8c:63:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:95:DB:03:33:63:20:7B:D5:AF:F9:89:3A:C2:A1:40:10:70:85:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0098229e-1ef4-3ab0-86e2-4a49739bf496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:dc:ca:f9:16:df:f1:cb:9b:29:97:6a:fa:25:59:96:70:cb:
         a5:b8:46:a7:0f:db:f4:8f:51:1c:32:3d:c1:87:08:db:35:66:
         77:56:c8:5e:fc:de:f2:96:80:8b:f8:cb:a9:cc:93:8d:ca:46:
         5a:19:97:fb:ac:3d:2f:f3:10:b5:75:9a:fe:e9:ee:91:58:2d:
         3d:bb:51:27:20:d6:af:5b:50:29:dc:97:48:bb:c0:37:15:0d:
         6f:89:2c:ad:0d:0f:3d:16:9e:2b:84:20:06:4e:52:a7:96:0b:
         2d:38:f4:29:2a:ba:3b:47:d1:ae:dd:c4:01:98:10:ae:71:2e:
         01:5d:b7:d9:ac:ea:26:fe:c8:53:0a:78:59:65:70:df:2d:be:
         fd:c5:f3:80:ed:a6:ca:f8:14:57:3c:c4:15:ff:57:fc:89:40:
         23:35:ab:b0:3c:6b:84:00:1b:6a:37:09:b2:4d:dc:24:29:1e:
         cd:8f:ba:66:f5:fc:95:d6:97:60:db:ba:6b:45:da:e3:dc:39:
         e7:39:b6:7e:cd:1d:d5:8e:0a:cf:69:49:ab:81:9f:cc:0f:93:
         f0:7c:a3:9f:e5:e3:0b:5e:b3:e0:9a:8a:d0:a5:f7:ec:57:36:
         8d:52:6c:ed:f5:97:09:37:fa:18:00:88:20:1a:0b:7a:bd:a4:
         a7:47:dc:4a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2H+pDc8DN8egheYoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk
OGI3MmVlZWQtZjg5MS00NzU4LWIzZmQtZWFhZjUyMjJlMzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFChbTYIeOV7GXm9NJEuPq7HMo93ZHMtHPtx
IYmet926JqB4mTVeSoSo2DSY4Lt2A7FCqi3sb1bUQiK6DFek5IMhFeaSyiQPyw93
b7igXnN67kYzbDwswemocUtaqVSSBr4RKwPyMK5q3NP3DFrb1xc4cTjPNja0AqA9
hedrdR8CpYSrZfV/457DOE1EiQvsT9SI7OwxcIvfJ8/UZ6p4NalR+IwoEn9/UfB0
h96gnIsdooS5T/wsoyn3AWT276oNtkQt0RvmAjswIvYzVCZlZlIfzfXmJUHVfMzB
z+JjJ8fJYmTyYHgF9fZ2icZ9kYNGjCvozNJFc/aALqUGjGNDwQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJiV2wMzYyB71a/5iTrCoUAQcIU3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDA5ODIyOWUtMWVmNC0z
YWIwLTg2ZTItNGE0OTczOWJmNDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBm3Mr5Ft/xy5spl2r6JVmWcMuluEanD9v0j1Ec
Mj3BhwjbNWZ3Vshe/N7yloCL+MupzJONykZaGZf7rD0v8xC1dZr+6e6RWC09u1En
INavW1Ap3JdIu8A3FQ1viSytDQ89Fp4rhCAGTlKnlgstOPQpKro7R9Gu3cQBmBCu
cS4BXbfZrOom/shTCnhZZXDfLb79xfOA7abK+BRXPMQV/1f8iUAjNauwPGuEABtq
NwmyTdwkKR7Nj7pm9fyV1pdg27prRdrj3DnnObZ+zR3VjgrPaUmrgZ/MD5PwfKOf
5eMLXrPgmorQpffsVzaNUmzt9ZcJN/oYAIggGgt6vaSnR9xK
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:02:38 2026 by rpki-client