Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13b8ad8d-76a2-3c1a-96ea-567e852bdabd.roa
File:                     13b8ad8d-76a2-3c1a-96ea-567e852bdabd.roa (raw, json)
Hash identifier:          IQc1NiDqGp4TlbsbxnF8flJcD7NKtLnu3aLT+qnxH9I=
Subject key identifier:   66:2A:3D:F0:23:28:53:E2:DB:21:9A:E5:2C:D4:A4:99:F6:A6:5B:1E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CDB023E330E2EF87A14D02640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13b8ad8d-76a2-3c1a-96ea-567e852bdabd.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     396553
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:3e:33:0e:2e:f8:7a:14:d0:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=f6286152-1767-4762-8457-7e243207b449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:05:cd:f4:ae:66:07:8f:ea:36:cf:50:ff:a1:
                    45:57:b0:e2:2d:94:df:91:78:7e:8d:5b:70:71:d7:
                    17:16:39:36:34:cb:6b:c1:fd:03:a5:7a:fa:89:18:
                    3d:db:48:df:6c:6b:4b:28:68:b8:b4:b9:5b:d1:5f:
                    fe:53:d1:76:7c:42:ce:2f:cd:e9:59:dd:43:98:ad:
                    ff:c5:7b:32:2c:28:dd:1e:2e:fa:c3:44:59:ac:79:
                    14:79:d0:00:6f:55:5f:6e:26:8a:23:58:f5:8b:47:
                    91:fc:46:40:ea:e0:da:52:3d:1a:49:09:d0:82:e3:
                    5b:e0:12:85:6f:c1:7e:f4:f4:d1:69:d7:70:fe:96:
                    db:a3:90:4d:95:8b:26:43:ca:ec:14:06:8e:81:aa:
                    6a:30:bc:7c:0f:65:99:70:94:f1:6e:05:2a:85:5f:
                    7d:80:ed:84:c4:40:4b:78:89:41:bc:d4:f6:6a:21:
                    07:5d:54:c0:e6:46:d0:d0:13:3e:9e:5f:67:f8:ca:
                    48:1d:3f:2f:17:22:46:b8:3d:67:91:ed:90:a8:a2:
                    b8:14:57:9e:08:b9:a3:9e:dc:14:4b:dd:09:fa:35:
                    c9:49:a9:1e:2f:4c:5a:21:f8:9e:ba:d1:6e:ac:00:
                    84:fd:b6:98:39:40:d0:51:33:a2:5d:a3:8c:88:50:
                    e6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2A:3D:F0:23:28:53:E2:DB:21:9A:E5:2C:D4:A4:99:F6:A6:5B:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13b8ad8d-76a2-3c1a-96ea-567e852bdabd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:d3:3b:f6:ad:77:a9:1d:e1:b1:00:d4:93:f3:62:28:aa:ca:
         5e:1e:2d:08:0f:fb:54:ed:3d:3c:dd:5c:d8:fc:d1:51:0c:a9:
         b0:d4:bd:ed:42:b6:bd:16:9e:6f:d9:df:dd:a9:7f:8e:ea:d7:
         70:c1:8a:52:b3:cc:24:27:15:fc:10:19:56:7a:d1:98:cb:31:
         9f:c7:1c:10:9c:4b:cb:7e:fb:22:1a:80:c2:95:42:b4:b2:09:
         7e:dd:30:3b:a1:37:eb:20:29:44:22:c5:67:28:d2:6b:37:9d:
         91:88:66:9a:9a:c9:02:f4:97:59:bd:05:e7:b9:24:a0:d4:b1:
         e6:84:ee:3b:c2:59:2a:fb:ad:cd:64:cd:34:7c:8e:71:48:32:
         ea:7e:de:f7:5d:87:ac:4d:1f:f8:35:95:b2:fd:4b:7e:28:42:
         2a:f8:33:65:12:b7:d2:9a:88:49:9d:e8:db:89:b0:30:79:08:
         ee:6c:93:51:c3:b5:f4:a1:ea:e3:79:ae:cd:3e:c8:c9:2d:f4:
         ca:5a:21:32:a6:1c:f3:55:cd:70:68:e5:b8:fc:91:a4:58:0f:
         7e:2a:a6:40:98:5e:bc:90:fc:4d:02:18:7b:5d:fe:46:1a:95:
         3b:f6:3c:e5:f8:c0:1b:4e:7f:67:3b:bb:5b:09:6c:36:5e:bd:
         f3:44:e0:04
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzbAj4zDi74ehTQJkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk
ZjYyODYxNTItMTc2Ny00NzYyLTg0NTctN2UyNDMyMDdiNDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QXN9K5mB4/qNs9Q/6FFV7DiLZTfkXh+jVtw
cdcXFjk2NMtrwf0DpXr6iRg920jfbGtLKGi4tLlb0V/+U9F2fELOL83pWd1DmK3/
xXsyLCjdHi76w0RZrHkUedAAb1VfbiaKI1j1i0eR/EZA6uDaUj0aSQnQguNb4BKF
b8F+9PTRaddw/pbbo5BNlYsmQ8rsFAaOgapqMLx8D2WZcJTxbgUqhV99gO2ExEBL
eIlBvNT2aiEHXVTA5kbQ0BM+nl9n+MpIHT8vFyJGuD1nke2QqKK4FFeeCLmjntwU
S90J+jXJSakeL0xaIfieutFurACE/baYOUDQUTOiXaOMiFDmFwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGYqPfAjKFPi2yGa5SzUpJn2plseMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTNiOGFkOGQtNzZhMi0z
YzFhLTk2ZWEtNTY3ZTg1MmJkYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI7TO/atd6kd4bEA1JPzYiiqyl4eLQgP+1TtPTzdXNj80VEMqbDU
ve1Ctr0Wnm/Z392pf47q13DBilKzzCQnFfwQGVZ60ZjLMZ/HHBCcS8t++yIagMKV
QrSyCX7dMDuhN+sgKUQixWco0ms3nZGIZpqayQL0l1m9Bee5JKDUseaE7jvCWSr7
rc1kzTR8jnFIMup+3vddh6xNH/g1lbL9S34oQir4M2USt9KaiEmd6NuJsDB5CO5s
k1HDtfSh6uN5rs0+yMkt9MpaITKmHPNVzXBo5bj8kaRYD34qpkCYXryQ/E0CGHtd
/kYalTv2POX4wBtOf2c7u1sJbDZevfNE4AQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:11:29 2026 by rpki-client