Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41db38cf-0df2-3e17-a674-fc5e071aeec9.roa
File:                     41db38cf-0df2-3e17-a674-fc5e071aeec9.roa (raw, json)
Hash identifier:          uYQg8HRppbZiddAwFCJPWWpFst4o6Wr/9oN5kMtcPpE=
Subject key identifier:   B8:7F:55:66:CE:34:D2:09:02:EE:33:B4:90:FF:5C:B5:42:2D:CA:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D037D147D6301D2A0F8A93700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41db38cf-0df2-3e17-a674-fc5e071aeec9.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     396585
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:14:7d:63:01:d2:a0:f8:a9:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=73b92804-d3f9-43f2-be78-5d66d7af8839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:ff:e7:81:05:f4:c5:50:2b:2b:35:6d:1f:
                    07:0e:51:71:f0:17:c3:b4:0e:d9:05:80:99:1b:d1:
                    62:36:a7:dd:ee:a4:8b:13:3c:44:11:b9:4f:80:99:
                    59:29:61:17:26:9d:93:92:90:b1:6f:5f:3d:71:25:
                    00:a7:00:dc:cd:33:6f:fb:9b:26:91:9c:1b:72:3d:
                    c0:42:a3:03:68:c2:0a:85:24:bd:0a:b2:47:95:81:
                    c9:ff:7b:81:0f:6e:18:9f:5a:cc:21:9f:76:a8:0b:
                    8e:50:77:77:cf:ce:bd:4f:75:88:55:fa:9c:88:e1:
                    db:c5:e0:0f:a0:49:04:50:5c:a8:4c:89:95:d4:29:
                    55:b0:d4:6c:09:46:42:03:79:a5:27:85:2d:bc:17:
                    b0:dd:00:7e:59:56:4d:28:5e:d3:f0:80:5b:c8:fd:
                    98:15:d6:5b:2a:6d:9b:66:3b:21:66:68:e7:40:52:
                    f1:a8:0e:13:da:68:cc:ad:ef:05:ef:66:48:10:d5:
                    28:58:3f:73:03:15:91:6e:f5:49:ff:0a:78:61:30:
                    2b:ab:fb:26:f1:f2:69:d8:44:02:8d:69:12:29:3b:
                    3f:b2:b8:17:61:6a:d4:48:a1:46:8e:63:db:98:ac:
                    d4:1e:41:f8:de:48:d3:33:43:49:72:75:12:30:00:
                    09:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7F:55:66:CE:34:D2:09:02:EE:33:B4:90:FF:5C:B5:42:2D:CA:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41db38cf-0df2-3e17-a674-fc5e071aeec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:0e:16:b1:f6:d6:02:47:6e:b9:c0:53:1f:da:79:54:ff:f0:
         f6:7e:52:63:3e:fb:75:75:c2:f3:f5:15:7e:ff:eb:69:38:5c:
         0e:fc:47:09:93:2c:f2:e0:87:ac:bc:7e:f0:1f:a0:74:06:bb:
         38:1d:cf:40:db:19:1c:5f:f6:c8:b3:69:25:79:fe:39:ce:09:
         04:d9:05:61:f7:da:e1:ea:aa:1b:e5:a5:54:ff:c3:37:cb:22:
         3b:57:d2:3a:06:05:2d:a6:c3:28:24:91:6c:a7:73:8c:0e:d2:
         1c:8f:45:16:47:da:e3:87:e4:68:9b:40:95:c8:cf:58:17:45:
         12:e6:0a:87:9f:50:1e:77:f1:af:de:76:c7:1c:b4:b7:e6:fe:
         54:c9:20:4f:7e:04:96:64:17:e6:c9:30:54:3d:ff:59:a9:5f:
         c1:f6:ee:b8:19:22:c9:42:40:37:40:dc:32:b4:15:47:0b:17:
         cf:2c:eb:04:42:66:09:33:3c:c2:95:d0:a1:1d:e3:1b:b0:47:
         cd:17:2e:d4:ba:0e:c4:35:46:9c:28:6c:04:d3:50:8d:7b:df:
         17:55:58:d7:b7:53:7c:d0:a6:2b:1b:e6:74:24:d2:f8:45:d4:
         ba:dd:e2:37:64:e4:ed:89:a4:ca:d6:44:50:93:51:d2:f5:4d:
         8e:7f:df:d6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0DfRR9YwHSoPipNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
NzNiOTI4MDQtZDNmOS00M2YyLWJlNzgtNWQ2NmQ3YWY4ODM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4b/54EF9MVQKys1bR8HDlFx8BfDtA7ZBYCZ
G9FiNqfd7qSLEzxEEblPgJlZKWEXJp2TkpCxb189cSUApwDczTNv+5smkZwbcj3A
QqMDaMIKhSS9CrJHlYHJ/3uBD24Yn1rMIZ92qAuOUHd3z869T3WIVfqciOHbxeAP
oEkEUFyoTImV1ClVsNRsCUZCA3mlJ4UtvBew3QB+WVZNKF7T8IBbyP2YFdZbKm2b
ZjshZmjnQFLxqA4T2mjMre8F72ZIENUoWD9zAxWRbvVJ/wp4YTArq/sm8fJp2EQC
jWkSKTs/srgXYWrUSKFGjmPbmKzUHkH43kjTM0NJcnUSMAAJAwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLh/VWbONNIJAu4ztJD/XLVCLcrnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDFkYjM4Y2YtMGRmMi0z
ZTE3LWE2NzQtZmM1ZTA3MWFlZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBwDhax9tYCR265wFMf2nlU//D2flJjPvt1dcLz
9RV+/+tpOFwO/EcJkyzy4IesvH7wH6B0Brs4Hc9A2xkcX/bIs2klef45zgkE2QVh
99rh6qob5aVU/8M3yyI7V9I6BgUtpsMoJJFsp3OMDtIcj0UWR9rjh+Rom0CVyM9Y
F0US5gqHn1Aed/Gv3nbHHLS35v5UySBPfgSWZBfmyTBUPf9ZqV/B9u64GSLJQkA3
QNwytBVHCxfPLOsEQmYJMzzCldChHeMbsEfNFy7Uug7ENUacKGwE01CNe98XVVjX
t1N80KYrG+Z0JNL4RdS63eI3ZOTtiaTK1kRQk1HS9U2Of9/W
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:55 2026 by rpki-client