Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ffbcd7a-3e01-31b1-ad41-cc7e170e82d6.roa
File:                     1ffbcd7a-3e01-31b1-ad41-cc7e170e82d6.roa (raw, json)
Hash identifier:          yFH69l+gQAOgH/+8OnpNUtuEZBdqTSU65tB+140XrVE=
Subject key identifier:   D2:D9:05:95:BA:F5:6D:F7:33:E6:29:F1:58:06:DD:D4:12:29:80:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA192CDAC28525AEFBD6C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ffbcd7a-3e01-31b1-ad41-cc7e170e82d6.roa
Signing time:             Tue 07 Apr 2026 14:30:14 +0000
ROA not before:           Tue 07 Apr 2026 14:30:14 +0000
ROA not after:            Mon 06 Jul 2026 14:30:14 +0000
asID:                     396613
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:92:cd:ac:28:52:5a:ef:bd:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:14 2026 GMT
            Not After : Jul  6 14:30:14 2026 GMT
        Subject: CN=b1ce49b6-2b9d-43a3-9da0-b1b7943527ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:44:ea:76:39:91:ea:a3:20:9f:8b:95:7d:8f:
                    c6:1e:d1:08:4b:6d:07:96:d7:77:6a:5b:b5:0a:20:
                    28:11:3b:4f:5c:8a:b3:47:c3:ef:a7:86:61:a3:24:
                    d2:67:a3:dc:9e:9d:08:de:1c:66:f0:41:b5:21:f8:
                    e1:67:d7:02:8b:87:8b:a4:13:54:77:4a:27:2b:55:
                    de:7e:10:26:88:bd:2e:8e:57:0f:7a:6d:0e:92:e9:
                    93:24:93:28:92:e1:9b:7b:a2:c5:fb:49:28:c7:eb:
                    5b:de:e6:af:99:86:5e:72:a2:b8:34:77:78:17:59:
                    59:a4:4d:3c:1a:fc:39:10:c5:dd:05:24:1d:6d:8c:
                    4a:7d:de:e9:c8:ca:36:70:20:3b:1e:29:f0:36:8e:
                    4f:f1:b7:6a:b1:dd:88:4c:1d:4d:d5:cb:55:75:91:
                    11:34:2f:3d:cb:be:6b:32:71:1d:91:f0:89:48:ce:
                    36:59:b2:f5:cb:b7:ad:a4:82:dc:a5:9c:ca:24:6d:
                    99:bb:14:a9:0a:74:4a:83:73:d6:6e:5e:be:f9:41:
                    74:ed:d6:0d:5f:7d:56:30:dc:a3:df:0a:53:17:23:
                    bb:15:c5:e4:58:be:ea:25:bf:e3:4e:5a:34:b7:e2:
                    26:e0:4c:08:da:c8:ff:4b:cd:4e:c6:b8:31:46:62:
                    80:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D9:05:95:BA:F5:6D:F7:33:E6:29:F1:58:06:DD:D4:12:29:80:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ffbcd7a-3e01-31b1-ad41-cc7e170e82d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:5b:2b:e8:20:86:4d:69:9b:cc:bf:bf:02:e4:11:9b:60:2a:
         8d:f6:31:ee:55:98:8d:ad:77:0e:3e:7f:e2:e2:02:9e:17:5a:
         23:0d:8c:53:22:f3:f9:0e:fc:53:5e:5e:58:e6:7c:d2:96:89:
         55:1e:e8:7f:66:3b:e2:65:3d:9c:e0:0d:a8:e2:64:82:30:dd:
         4c:d9:1f:95:ff:cf:f6:b1:08:aa:e3:3f:ca:8a:6a:19:7e:74:
         88:2e:1f:2d:30:3b:01:06:e9:b0:5a:69:e2:f6:4e:b0:24:fd:
         67:e7:c4:99:46:1c:a7:e7:5d:13:ed:d5:1f:f9:d9:c6:f2:d4:
         f9:1b:0c:b3:8d:a7:6c:29:70:69:9e:77:09:f6:13:b7:bb:f1:
         58:ac:35:0f:62:6e:09:a1:fd:18:f6:fe:3b:b6:54:57:91:77:
         a2:31:3f:b2:e8:db:14:a2:02:f1:65:89:1d:67:5e:33:27:be:
         4d:75:a9:a4:8e:e5:70:e0:c4:b4:74:79:1b:58:a6:34:83:e5:
         d9:7d:05:c4:55:27:76:b3:ce:0f:f0:9e:58:76:7d:f7:8e:77:
         a3:d6:75:71:8d:5f:87:c9:de:98:f2:ed:74:e5:ce:32:0a:1c:
         fd:18:7f:76:9c:fd:10:ce:cb:ef:c6:9d:26:da:89:2f:24:66:
         a8:9f:f6:16
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1toZLNrChSWu+9bAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwNzE0MzAxNFoXDTI2MDcwNjE0MzAxNFowLzEtMCsGA1UEAxMk
YjFjZTQ5YjYtMmI5ZC00M2EzLTlkYTAtYjFiNzk0MzUyN2FjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kTqdjmR6qMgn4uVfY/GHtEIS20Hltd3alu1
CiAoETtPXIqzR8Pvp4ZhoyTSZ6Pcnp0I3hxm8EG1IfjhZ9cCi4eLpBNUd0onK1Xe
fhAmiL0ujlcPem0OkumTJJMokuGbe6LF+0kox+tb3uavmYZecqK4NHd4F1lZpE08
Gvw5EMXdBSQdbYxKfd7pyMo2cCA7HinwNo5P8bdqsd2ITB1N1ctVdZERNC89y75r
MnEdkfCJSM42WbL1y7etpILcpZzKJG2ZuxSpCnRKg3PWbl6++UF07dYNX31WMNyj
3wpTFyO7FcXkWL7qJb/jTlo0t+Im4EwI2sj/S81OxrgxRmKATwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNLZBZW69W33M+Yp8VgG3dQSKYBGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWZmYmNkN2EtM2UwMS0z
MWIxLWFkNDEtY2M3ZTE3MGU4MmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA+6j
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAoWyvoIIZNaZvMv78C5BGbYCqN9jHuVZiNrXcO
Pn/i4gKeF1ojDYxTIvP5DvxTXl5Y5nzSlolVHuh/ZjviZT2c4A2o4mSCMN1M2R+V
/8/2sQiq4z/KimoZfnSILh8tMDsBBumwWmni9k6wJP1n58SZRhyn510T7dUf+dnG
8tT5GwyzjadsKXBpnncJ9hO3u/FYrDUPYm4Jof0Y9v47tlRXkXeiMT+y6NsUogLx
ZYkdZ14zJ75NdamkjuVw4MS0dHkbWKY0g+XZfQXEVSd2s84P8J5Ydn33jnej1nVx
jV+Hyd6Y8u105c4yChz9GH92nP0Qzsvvxp0m2okvJGaon/YW
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:24 2026 by rpki-client