Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c179530-f3a8-3d3d-bad9-036f1b74e354.roa
File:                     0c179530-f3a8-3d3d-bad9-036f1b74e354.roa (raw, json)
Hash identifier:          BBBr/jUlgnvkzw8mupYL4F0U8QmIl4Dp43GNhzLVaZs=
Subject key identifier:   56:CD:6F:F6:E3:DC:21:42:1E:B7:6E:7A:0B:43:38:DA:31:2C:43:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5FA8685E4C0BD9C3DDF6D5B8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c179530-f3a8-3d3d-bad9-036f1b74e354.roa
Signing time:             Thu 02 Apr 2026 14:22:41 +0000
ROA not before:           Thu 02 Apr 2026 14:22:41 +0000
ROA not after:            Wed 01 Jul 2026 14:22:41 +0000
asID:                     397209
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:a8:68:5e:4c:0b:d9:c3:dd:f6:d5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 14:22:41 2026 GMT
            Not After : Jul  1 14:22:41 2026 GMT
        Subject: CN=40e6f126-c157-444a-9c43-f1e51190d207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e5:e8:a5:58:7d:61:f0:6f:c9:c8:77:6d:09:
                    aa:be:c6:60:31:68:a9:16:7b:c1:fc:89:2d:89:82:
                    91:6f:7a:a5:05:55:24:84:3c:6c:fd:d0:2e:1c:12:
                    92:5a:82:69:bc:c3:83:fe:1e:15:7b:71:c0:2c:ef:
                    4f:c8:95:ae:46:c9:74:ca:89:4c:ae:2f:93:de:ed:
                    fc:e3:76:a9:23:5b:39:35:ef:cb:27:fb:02:30:8d:
                    40:b7:ee:19:64:17:00:e5:cf:54:0c:da:35:4d:14:
                    71:5c:35:99:31:a2:c0:b4:0e:d6:96:17:78:14:c4:
                    94:1f:ac:3b:5b:f5:eb:cf:2b:66:8e:71:50:24:93:
                    5f:2e:05:05:1b:08:1a:8f:0f:e0:79:39:11:8f:20:
                    56:93:fb:40:8f:06:56:0e:3b:1a:24:1c:24:f4:6e:
                    eb:05:b1:9a:7b:a9:bb:81:20:6a:99:53:6b:27:f4:
                    55:90:6f:82:22:96:17:c5:01:c3:a5:4f:65:ec:05:
                    cd:a8:34:fd:57:cd:8e:86:38:1c:e8:9c:f9:a0:4a:
                    91:0a:82:8c:be:e2:ef:c2:34:e4:2a:0c:a1:a3:59:
                    bb:d0:c5:a0:4b:46:c6:15:40:9c:d5:8a:ed:f7:cc:
                    7d:db:62:f8:91:71:ad:22:a0:71:5d:90:52:39:a2:
                    f2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CD:6F:F6:E3:DC:21:42:1E:B7:6E:7A:0B:43:38:DA:31:2C:43:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c179530-f3a8-3d3d-bad9-036f1b74e354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:12:bd:ed:0d:66:59:7b:a2:d1:a8:3d:23:bf:52:f5:b0:10:
         bb:8c:e3:ec:0e:88:05:ab:ae:15:89:2a:dc:54:3e:98:f7:2b:
         56:bc:f9:d7:19:bb:16:bf:fb:4a:ef:e2:57:ff:32:71:25:a8:
         f9:52:d7:bd:10:17:f2:7c:7a:3b:21:ea:b7:d9:de:9a:36:86:
         d7:7d:95:b0:4d:e6:cb:66:ed:ae:be:52:a6:22:97:b9:be:6e:
         f6:84:30:6e:d0:04:88:d8:87:a5:5b:eb:55:1a:54:9a:d8:7e:
         73:4e:e3:cb:3b:33:65:fb:5f:0a:79:de:93:ea:6e:8c:41:f1:
         b7:d8:1f:dc:3e:c7:a3:14:a4:99:78:39:c6:08:97:dd:48:a0:
         e1:db:a7:4b:da:ce:91:9f:ed:56:56:bc:7f:72:a8:d1:8a:43:
         3c:14:9c:9a:b7:08:d4:02:77:9f:a7:7c:fc:d4:6c:dd:1c:3d:
         c4:f1:4b:e3:04:87:3a:de:a9:29:ba:df:b9:6b:f8:65:f0:71:
         42:d7:1d:6c:5a:c8:2d:55:84:8f:ed:74:72:ee:d3:30:9a:87:
         97:db:40:07:66:c7:65:7b:e2:2d:df:7c:79:2b:e5:39:7d:76:
         ba:99:5f:83:4b:31:7a:1b:f6:6a:d7:0d:ea:29:81:c0:33:3b:
         90:86:4c:42
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1fqGheTAvZw9321bgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwMjE0MjI0MVoXDTI2MDcwMTE0MjI0MVowLzEtMCsGA1UEAxMk
NDBlNmYxMjYtYzE1Ny00NDRhLTljNDMtZjFlNTExOTBkMjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouXopVh9YfBvych3bQmqvsZgMWipFnvB/Ikt
iYKRb3qlBVUkhDxs/dAuHBKSWoJpvMOD/h4Ve3HALO9PyJWuRsl0yolMri+T3u38
43apI1s5Ne/LJ/sCMI1At+4ZZBcA5c9UDNo1TRRxXDWZMaLAtA7Wlhd4FMSUH6w7
W/XrzytmjnFQJJNfLgUFGwgajw/geTkRjyBWk/tAjwZWDjsaJBwk9G7rBbGae6m7
gSBqmVNrJ/RVkG+CIpYXxQHDpU9l7AXNqDT9V82Ohjgc6Jz5oEqRCoKMvuLvwjTk
Kgyho1m70MWgS0bGFUCc1Yrt98x922L4kXGtIqBxXZBSOaLyewIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFbNb/bj3CFCHrduegtDONoxLEOmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGMxNzk1MzAtZjNhOC0z
ZDNkLWJhZDktMDM2ZjFiNzRlMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAyMd
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBwEr3tDWZZe6LRqD0jv1L1sBC7jOPsDogFq64V
iSrcVD6Y9ytWvPnXGbsWv/tK7+JX/zJxJaj5Ute9EBfyfHo7Ieq32d6aNobXfZWw
TebLZu2uvlKmIpe5vm72hDBu0ASI2IelW+tVGlSa2H5zTuPLOzNl+18Ked6T6m6M
QfG32B/cPsejFKSZeDnGCJfdSKDh26dL2s6Rn+1WVrx/cqjRikM8FJyatwjUAnef
p3z81GzdHD3E8UvjBIc63qkput+5a/hl8HFC1x1sWsgtVYSP7XRy7tMwmoeX20AH
Zsdle+It33x5K+U5fXa6mV+DSzF6G/Zq1w3qKYHAMzuQhkxC
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:19:05 2026 by rpki-client