Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31b4544b-d62c-341f-823f-2ba43c88d956.roa
File:                     31b4544b-d62c-341f-823f-2ba43c88d956.roa (raw, json)
Hash identifier:          Ad9xGY+WcWfVtJMd6R6DoD0gZe7fW6mBYyxBzYYxUj8=
Subject key identifier:   C4:9B:31:F3:0E:8D:E8:A5:7D:6A:93:E2:87:92:A2:F4:80:4F:CF:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CED27B3C2C5B794180D5FCE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31b4544b-d62c-341f-823f-2ba43c88d956.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     36626
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:b3:c2:c5:b7:94:18:0d:5f:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=210920b2-8e7b-435b-aad2-ecca31e51173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:79:22:4e:49:44:cf:4c:5d:f7:85:5c:21:af:
                    93:a7:ad:ca:6c:88:03:f0:03:e2:b1:ec:50:43:87:
                    d4:91:0b:e0:0d:db:91:62:64:53:c1:8d:92:5d:cf:
                    57:7d:65:91:2c:77:fc:83:d5:8b:36:54:a1:d1:84:
                    22:aa:23:d0:69:0d:f9:4c:14:c6:fc:28:3a:4a:03:
                    9b:0a:da:df:31:57:82:4a:f3:7c:86:5d:34:f3:53:
                    a7:2e:92:c6:f7:a0:11:24:c5:f5:c2:55:89:f6:4e:
                    6c:61:eb:51:c9:d8:02:d2:79:c8:88:38:e1:81:cb:
                    70:6f:70:d4:d0:b1:63:13:56:d2:6c:81:ef:8a:70:
                    0a:81:16:55:9d:d6:10:bc:97:5e:39:de:73:2e:e1:
                    1a:73:ac:eb:07:c0:85:45:c0:7a:7c:29:8d:81:85:
                    f8:95:d1:91:27:e8:70:85:02:9e:2e:8f:75:59:25:
                    fb:0d:5a:8b:48:b2:63:58:43:51:db:4b:2f:78:4a:
                    dd:52:d1:3f:66:3c:9e:df:e3:e3:f6:06:22:05:94:
                    5d:5d:30:ef:e4:ad:36:ed:43:58:c7:27:6c:4f:b4:
                    da:06:7d:e5:51:25:6a:ae:f3:6e:29:dc:89:fd:7a:
                    24:04:31:b5:c8:31:44:4d:6e:43:98:ac:87:62:1a:
                    10:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9B:31:F3:0E:8D:E8:A5:7D:6A:93:E2:87:92:A2:F4:80:4F:CF:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31b4544b-d62c-341f-823f-2ba43c88d956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:7c:49:93:fc:8d:9d:0c:c9:12:b7:43:b8:16:99:67:d0:5b:
         19:ad:9c:e3:aa:34:c9:1a:78:cc:54:b1:bc:f7:d8:78:c7:45:
         23:ce:b5:f4:eb:7f:85:a1:81:f2:a3:28:e8:cb:73:ff:a9:a6:
         67:ac:c8:1f:19:e4:69:74:a9:df:97:b2:c1:f3:7c:18:71:be:
         fa:b0:16:0c:3c:16:8d:15:e9:6c:99:20:90:e5:2c:75:da:58:
         01:b4:64:0a:28:8e:9b:52:67:01:00:51:66:f2:58:6b:ac:8e:
         6d:63:b5:de:a6:c8:f6:03:5e:3b:05:12:b3:71:84:eb:c4:7f:
         74:12:87:ac:2b:94:cb:68:5b:ad:82:75:88:33:eb:de:1f:1a:
         cb:d2:c6:a7:e8:66:f3:6e:be:f4:61:59:12:b7:fd:2b:b3:92:
         ea:12:3e:9e:a7:8d:01:64:d7:54:ab:fc:5c:60:d7:39:ef:48:
         ac:c9:ad:a2:3e:e3:7e:be:02:8d:cf:7c:4b:31:b1:7f:71:1c:
         c3:b2:07:b9:f6:9b:f8:60:c4:ce:16:6b:37:e0:86:ed:ef:dc:
         a6:8c:28:f2:30:13:9a:38:e9:3c:a6:b3:d8:95:6f:b2:75:8c:
         90:22:71:25:4f:60:86:ec:9d:8d:b0:49:92:16:e9:be:c0:56:
         db:19:51:cc
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEztJ7PCxbeUGA1fzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk
MjEwOTIwYjItOGU3Yi00MzViLWFhZDItZWNjYTMxZTUxMTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3kiTklEz0xd94VcIa+Tp63KbIgD8APisexQ
Q4fUkQvgDduRYmRTwY2SXc9XfWWRLHf8g9WLNlSh0YQiqiPQaQ35TBTG/Cg6SgOb
CtrfMVeCSvN8hl0081OnLpLG96ARJMX1wlWJ9k5sYetRydgC0nnIiDjhgctwb3DU
0LFjE1bSbIHvinAKgRZVndYQvJdeOd5zLuEac6zrB8CFRcB6fCmNgYX4ldGRJ+hw
hQKeLo91WSX7DVqLSLJjWENR20sveErdUtE/Zjye3+Pj9gYiBZRdXTDv5K027UNY
xydsT7TaBn3lUSVqrvNuKdyJ/XokBDG1yDFETW5DmKyHYhoQRQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMSbMfMOjeilfWqT4oeSovSAT8+uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzFiNDU0NGItZDYyYy0z
NDFmLTgyM2YtMmJhNDNjODhkOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB0fEmT/I2dDMkSt0O4Fpln0FsZrZzjqjTJGnjM
VLG899h4x0UjzrX063+FoYHyoyjoy3P/qaZnrMgfGeRpdKnfl7LB83wYcb76sBYM
PBaNFelsmSCQ5Sx12lgBtGQKKI6bUmcBAFFm8lhrrI5tY7Xepsj2A147BRKzcYTr
xH90EoesK5TLaFutgnWIM+veHxrL0san6Gbzbr70YVkSt/0rs5LqEj6ep40BZNdU
q/xcYNc570isya2iPuN+vgKNz3xLMbF/cRzDsge59pv4YMTOFms34Ibt79ymjCjy
MBOaOOk8prPYlW+ydYyQInElT2CG7J2NsEmSFum+wFbbGVHM
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:26 2026 by rpki-client