Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24256054-778d-3186-b57e-c234a809e03d.roa
File:                     24256054-778d-3186-b57e-c234a809e03d.roa (raw, json)
Hash identifier:          FkyLDXYCkQiai/bNC5rhcR7MYc0w3WWSE3HgERZYnKY=
Subject key identifier:   32:8E:2A:D1:73:AC:C7:24:50:30:13:BC:F4:F2:50:D4:F8:CD:C0:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D732BD8B21B39BAE86828E8A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24256054-778d-3186-b57e-c234a809e03d.roa
Signing time:             Thu 09 Apr 2026 14:07:53 +0000
ROA not before:           Thu 09 Apr 2026 14:07:53 +0000
ROA not after:            Wed 08 Jul 2026 14:07:53 +0000
asID:                     396565
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:2b:d8:b2:1b:39:ba:e8:68:28:e8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  9 14:07:53 2026 GMT
            Not After : Jul  8 14:07:53 2026 GMT
        Subject: CN=2186a8f6-735a-4530-a117-81618a6af5a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:93:5f:04:55:ff:f8:68:1b:9c:cc:3c:2e:62:
                    d2:73:fa:02:c5:ef:10:28:55:d3:d3:94:53:f0:c2:
                    8a:36:d8:c6:ae:60:bf:be:0b:d0:af:2e:60:a2:72:
                    37:ce:eb:a5:2c:77:b9:ec:0b:a3:78:8c:4c:56:02:
                    55:24:1e:50:4c:a7:b9:75:28:88:78:00:b0:7d:a1:
                    73:56:02:c7:84:f1:a6:8b:10:05:8f:35:d5:cb:e5:
                    26:6c:f7:18:d2:c2:27:ea:63:50:d8:30:6c:ba:3a:
                    a9:6a:e6:3f:1a:9b:1f:25:66:44:5d:ff:9d:b2:5b:
                    16:37:4b:8d:5d:50:a0:e3:34:5d:67:ff:c1:1e:25:
                    54:58:9c:01:d9:60:a3:06:95:4e:b5:52:d5:8f:57:
                    19:c0:b0:cf:fb:9d:f2:62:a0:12:24:72:b3:6b:40:
                    12:a1:00:61:7c:91:e6:87:b1:c5:59:94:29:d2:31:
                    93:57:8b:68:d0:47:7a:ca:fd:7b:c4:c2:37:f9:c7:
                    6d:5d:a3:6f:6e:52:61:2c:d9:31:22:56:42:e3:a8:
                    39:e6:5e:c8:32:73:ff:1e:5c:ed:84:ff:5d:b2:52:
                    fb:47:8d:c4:3e:d6:c9:5e:d0:59:ea:02:89:64:ef:
                    b5:8c:96:ff:9b:40:4d:f9:03:aa:cd:e9:98:1b:01:
                    5c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8E:2A:D1:73:AC:C7:24:50:30:13:BC:F4:F2:50:D4:F8:CD:C0:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24256054-778d-3186-b57e-c234a809e03d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e5:5f:f4:4c:c5:5d:d7:7a:e9:50:54:30:dc:48:ac:f4:c4:
         61:fb:0e:91:38:b3:22:58:d1:68:05:fc:76:cd:17:d2:53:f5:
         d4:d6:50:76:b3:a1:35:2b:9d:88:27:05:1b:49:3d:92:f5:7e:
         1e:d3:e6:54:68:5c:47:39:6f:42:69:84:39:ca:ad:32:ba:96:
         c2:6b:29:b6:68:12:9b:cc:5b:01:9c:a3:23:57:fe:03:42:1b:
         4a:98:ad:0d:0b:62:f5:0d:9c:8c:12:5a:01:63:bc:1f:de:b4:
         ad:7c:20:fb:da:6c:fb:a7:0f:91:e1:7f:93:8c:ec:8c:29:7e:
         77:f3:59:c2:aa:61:db:74:5e:e8:2a:bf:8c:a0:a3:f4:33:d3:
         90:05:a1:83:2d:db:75:60:22:fc:7a:c8:d6:05:d2:c6:b8:27:
         54:9d:4e:1d:ef:bf:a0:b7:2b:09:22:3e:13:3f:26:c7:68:0d:
         3c:90:3f:7f:80:82:85:43:cf:ab:88:45:6f:be:18:1b:b8:b7:
         ef:72:87:e6:be:47:f7:a8:f4:f1:74:24:28:00:52:bf:e6:0a:
         dc:8c:e3:b9:0e:fd:02:aa:d5:f3:0c:12:78:36:01:26:4e:55:
         e1:fa:9a:ea:18:f1:a4:5c:ec:2f:31:fe:15:a2:9e:4c:c1:06:
         58:69:29:86
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1zK9iyGzm66Ggo6KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwOTE0MDc1M1oXDTI2MDcwODE0MDc1M1owLzEtMCsGA1UEAxMk
MjE4NmE4ZjYtNzM1YS00NTMwLWExMTctODE2MThhNmFmNWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJNfBFX/+GgbnMw8LmLSc/oCxe8QKFXT05RT
8MKKNtjGrmC/vgvQry5gonI3zuulLHe57AujeIxMVgJVJB5QTKe5dSiIeACwfaFz
VgLHhPGmixAFjzXVy+UmbPcY0sIn6mNQ2DBsujqpauY/GpsfJWZEXf+dslsWN0uN
XVCg4zRdZ//BHiVUWJwB2WCjBpVOtVLVj1cZwLDP+53yYqASJHKza0ASoQBhfJHm
h7HFWZQp0jGTV4to0Ed6yv17xMI3+cdtXaNvblJhLNkxIlZC46g55l7IMnP/Hlzt
hP9dslL7R43EPtbJXtBZ6gKJZO+1jJb/m0BN+QOqzemYGwFcfwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDKOKtFzrMckUDATvPTyUNT4zcCvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjQyNTYwNTQtNzc4ZC0z
MTg2LWI1N2UtYzIzNGE4MDllMDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAw0t
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCg5V/0TMVd13rpUFQw3Eis9MRh+w6ROLMiWNFo
Bfx2zRfSU/XU1lB2s6E1K52IJwUbST2S9X4e0+ZUaFxHOW9CaYQ5yq0yupbCaym2
aBKbzFsBnKMjV/4DQhtKmK0NC2L1DZyMEloBY7wf3rStfCD72mz7pw+R4X+TjOyM
KX5381nCqmHbdF7oKr+MoKP0M9OQBaGDLdt1YCL8esjWBdLGuCdUnU4d77+gtysJ
Ij4TPybHaA08kD9/gIKFQ8+riEVvvhgbuLfvcofmvkf3qPTxdCQoAFK/5grcjOO5
Dv0CqtXzDBJ4NgEmTlXh+prqGPGkXOwvMf4Vop5MwQZYaSmG
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:14:57 2026 by rpki-client