Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3282e4aa-7935-3850-87f0-1035a8809d22.roa
File:                     3282e4aa-7935-3850-87f0-1035a8809d22.roa (raw, json)
Hash identifier:          kN60x3P9CcdRzvVmzRponyEfsVS09znK7hL0t0OeqzY=
Subject key identifier:   B1:58:E6:9A:E6:5A:08:9D:31:FD:CA:59:3E:3C:78:04:82:BA:19:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D732BDC1578E31C9B217933A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3282e4aa-7935-3850-87f0-1035a8809d22.roa
Signing time:             Thu 09 Apr 2026 14:07:54 +0000
ROA not before:           Thu 09 Apr 2026 14:07:54 +0000
ROA not after:            Wed 08 Jul 2026 14:07:54 +0000
asID:                     36625
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:2b:dc:15:78:e3:1c:9b:21:79:33:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  9 14:07:54 2026 GMT
            Not After : Jul  8 14:07:54 2026 GMT
        Subject: CN=c5d3fe39-6b13-44dd-ae34-f631b4a60e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:78:12:f1:a5:69:dc:2c:73:ea:23:51:7c:
                    28:d6:c8:1f:ef:97:0d:f2:25:39:af:3c:19:b9:a8:
                    28:e1:8d:8c:59:ae:5c:bf:4a:c8:cd:18:ba:82:33:
                    26:ee:87:a4:e3:d6:67:a8:51:d7:8e:1f:31:86:c0:
                    56:7d:23:00:e5:26:fe:b4:2a:a6:b6:17:5c:2a:df:
                    e5:cd:f6:fd:80:de:7b:5b:17:c9:9a:4f:f1:82:59:
                    e5:c9:54:6a:81:91:ce:b7:a5:5f:ef:12:a7:c0:15:
                    43:9d:32:f1:a5:f6:78:f6:93:6f:0a:16:cf:1d:5d:
                    e4:d8:5f:50:81:92:49:b4:72:c2:6a:db:bd:d2:7f:
                    2e:6b:52:e5:de:a0:15:b2:af:f2:b6:85:b4:f1:ea:
                    8d:82:ed:06:5a:5f:4d:7c:97:07:87:c4:c0:0c:8a:
                    dc:02:f3:2e:87:7a:4b:de:82:e4:c7:a2:ca:86:51:
                    7f:7e:ad:a7:49:ca:01:59:a0:9a:74:fa:d3:97:8e:
                    3c:49:77:4b:46:61:a8:09:e2:ae:6d:5a:cb:46:bc:
                    0c:f0:65:e6:d2:ca:41:0a:28:f6:0e:95:34:16:17:
                    0b:bf:c1:fb:11:61:37:ac:82:4e:da:5b:6c:d1:fc:
                    a0:43:e2:01:c1:a3:95:40:a9:50:4f:a5:2a:1e:89:
                    6f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:58:E6:9A:E6:5A:08:9D:31:FD:CA:59:3E:3C:78:04:82:BA:19:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3282e4aa-7935-3850-87f0-1035a8809d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b6:25:57:d9:65:8c:0b:f6:f7:3e:c5:26:89:d3:ed:3f:d4:
         40:b5:53:41:38:2c:09:d7:59:65:ff:fb:b6:04:c6:87:cd:f3:
         74:0d:72:cc:08:92:0d:3b:cc:74:39:c2:c5:7a:95:7d:40:4b:
         53:c6:b1:62:8c:78:79:fb:f1:66:23:34:59:86:5f:c1:b7:c4:
         ae:72:a7:24:62:fd:46:59:6e:71:fe:a3:11:8a:9f:2a:09:a8:
         cd:4c:4f:dd:2b:0c:72:da:59:09:c8:44:df:39:98:0c:19:be:
         63:fd:e2:07:6f:ea:ed:7f:c6:39:1c:79:9f:ba:cc:ba:86:0f:
         64:88:22:9b:ba:fc:41:8a:75:d4:06:5c:01:87:f2:08:41:0d:
         dc:1d:b6:4c:0a:ca:8b:4a:ed:d0:5c:f9:f8:a6:b3:24:8a:04:
         29:fe:55:02:cc:ab:5d:93:0e:83:cb:1c:47:88:1f:9a:49:cf:
         fa:f2:89:d6:dd:5b:e9:d7:76:eb:75:e8:2f:ed:e1:2f:4b:dd:
         88:c0:e4:97:ed:8f:b3:ae:d7:0d:2d:dc:30:e2:72:25:b9:7f:
         ef:97:ae:cf:54:64:c9:be:30:13:16:64:6c:82:fc:86:14:16:
         2e:38:e9:99:e2:b5:33:de:13:f2:3b:3c:22:2f:be:3b:f4:cf:
         49:05:06:9d
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1zK9wVeOMcmyF5M6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwOTE0MDc1NFoXDTI2MDcwODE0MDc1NFowLzEtMCsGA1UEAxMk
YzVkM2ZlMzktNmIxMy00NGRkLWFlMzQtZjYzMWI0YTYwZTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7t4EvGladwsc+ojUXwo1sgf75cN8iU5rzwZ
uago4Y2MWa5cv0rIzRi6gjMm7oek49ZnqFHXjh8xhsBWfSMA5Sb+tCqmthdcKt/l
zfb9gN57WxfJmk/xglnlyVRqgZHOt6Vf7xKnwBVDnTLxpfZ49pNvChbPHV3k2F9Q
gZJJtHLCatu90n8ua1Ll3qAVsq/ytoW08eqNgu0GWl9NfJcHh8TADIrcAvMuh3pL
3oLkx6LKhlF/fq2nScoBWaCadPrTl448SXdLRmGoCeKubVrLRrwM8GXm0spBCij2
DpU0FhcLv8H7EWE3rIJO2lts0fygQ+IBwaOVQKlQT6UqHolvAwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLFY5prmWgidMf3KWT48eASCuhmxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzI4MmU0YWEtNzkzNS0z
ODUwLTg3ZjAtMTAzNWE4ODA5ZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAw0t
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAUtiVX2WWMC/b3PsUmidPtP9RAtVNBOCwJ11ll
//u2BMaHzfN0DXLMCJINO8x0OcLFepV9QEtTxrFijHh5+/FmIzRZhl/Bt8Sucqck
Yv1GWW5x/qMRip8qCajNTE/dKwxy2lkJyETfOZgMGb5j/eIHb+rtf8Y5HHmfusy6
hg9kiCKbuvxBinXUBlwBh/IIQQ3cHbZMCsqLSu3QXPn4prMkigQp/lUCzKtdkw6D
yxxHiB+aSc/68onW3Vvp13brdegv7eEvS92IwOSX7Y+zrtcNLdww4nIluX/vl67P
VGTJvjATFmRsgvyGFBYuOOmZ4rUz3hPyOzwiL7479M9JBQad
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:39 2026 by rpki-client