Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/443c0b8d-68a3-3635-925b-5cd421fe37f9.roa
File:                     443c0b8d-68a3-3635-925b-5cd421fe37f9.roa (raw, json)
Hash identifier:          NTPIRuMJem9jtYE3crrvcapmd4bjnmraSY4hMkzDpuI=
Subject key identifier:   37:83:22:B6:9A:90:46:45:DA:88:F2:B9:C3:A9:4E:E3:A3:3B:4A:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D00B297EE32C28191186C7680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/443c0b8d-68a3-3635-925b-5cd421fe37f9.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     397203
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:97:ee:32:c2:81:91:18:6c:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=d1835ed1-6d71-44f2-a6f1-6bfe7bed09cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:0e:f1:84:d3:cd:f4:3b:aa:a1:ef:5f:8a:
                    5a:db:fb:7e:95:fd:c6:98:b5:36:64:ce:d3:7a:4d:
                    41:2e:6d:64:21:9b:1d:3e:15:f0:de:0f:fb:0a:9a:
                    a0:4a:93:56:14:64:f2:39:c8:12:0e:83:07:d0:06:
                    d7:76:e3:20:3b:ad:1e:1e:a1:93:eb:af:1b:6c:cb:
                    3e:31:01:c1:95:50:3d:04:26:43:d5:8f:b9:2b:6e:
                    25:b3:37:bc:14:82:1e:13:1e:aa:99:d6:53:94:2d:
                    65:d5:87:06:23:48:a1:80:c4:30:ba:fe:5e:0a:00:
                    b3:3c:3e:e5:96:60:48:3e:87:61:1f:d7:c7:0c:66:
                    40:15:e8:54:10:9a:83:36:2f:39:d3:a8:1a:31:94:
                    df:7c:1e:5c:a9:ea:c2:f8:eb:61:da:6b:7f:14:01:
                    ce:19:c0:f7:f7:a6:25:3e:0b:87:cb:a3:c0:d3:ed:
                    ef:ca:3c:f1:76:fb:3e:12:9d:73:99:ff:19:3e:97:
                    c2:8a:d7:18:24:d3:2b:fa:be:81:55:fa:a9:72:d9:
                    2d:a4:f1:de:b0:23:cd:6f:42:e3:62:c6:44:d4:69:
                    f3:20:ef:7c:da:c0:db:91:ae:c4:cf:58:66:eb:54:
                    7a:83:ed:87:17:d7:04:55:b8:26:16:47:2a:cb:04:
                    e0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:83:22:B6:9A:90:46:45:DA:88:F2:B9:C3:A9:4E:E3:A3:3B:4A:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/443c0b8d-68a3-3635-925b-5cd421fe37f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:c3:5d:53:58:63:4f:60:35:af:8b:4e:c7:ba:1d:48:35:d1:
         b0:5d:26:e8:b5:70:c9:83:f6:ce:73:cc:5f:d0:55:a0:24:23:
         ef:24:3e:2f:7d:6e:f2:92:2b:9b:5e:83:d6:74:19:a8:8d:60:
         a9:f9:df:df:80:3e:81:cd:24:a0:bf:b6:d9:7f:1e:00:50:5e:
         18:4b:5b:62:7b:9a:b1:c8:dd:36:9c:f8:79:65:6b:6f:0f:05:
         1f:74:f0:0d:24:8f:1d:42:de:d6:d9:59:f9:24:fd:47:6c:fd:
         71:ed:f3:d5:aa:bb:e9:ae:85:59:1c:4e:6f:07:92:7d:30:07:
         91:77:d4:68:13:54:16:2f:8a:ab:76:61:27:87:94:c6:80:0b:
         30:f4:38:1e:cf:34:cc:4b:25:03:bd:f0:07:7e:fa:59:52:8d:
         77:47:ed:7e:87:42:d1:c9:50:c3:5f:5e:1c:a4:09:1f:21:68:
         aa:1b:77:3e:12:b6:72:3f:9d:99:06:a4:5b:73:2e:69:e3:9a:
         23:89:a6:30:91:2d:27:9e:97:64:90:7a:ee:be:fd:f2:d0:aa:
         f6:c2:64:57:4a:1f:ac:bd:f1:6c:a6:6e:1b:96:ff:b3:cd:56:
         9a:5b:ee:32:cc:95:63:6d:16:23:b4:8b:b0:7e:ee:69:c5:89:
         bd:e2:0f:a3
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0AspfuMsKBkRhsdoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk
ZDE4MzVlZDEtNmQ3MS00NGYyLWE2ZjEtNmJmZTdiZWQwOWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqAO8YTTzfQ7qqHvX4pa2/t+lf3GmLU2ZM7T
ek1BLm1kIZsdPhXw3g/7CpqgSpNWFGTyOcgSDoMH0AbXduMgO60eHqGT668bbMs+
MQHBlVA9BCZD1Y+5K24lsze8FIIeEx6qmdZTlC1l1YcGI0ihgMQwuv5eCgCzPD7l
lmBIPodhH9fHDGZAFehUEJqDNi8506gaMZTffB5cqerC+Oth2mt/FAHOGcD396Yl
PguHy6PA0+3vyjzxdvs+Ep1zmf8ZPpfCitcYJNMr+r6BVfqpctktpPHesCPNb0Lj
YsZE1GnzIO982sDbka7Ez1hm61R6g+2HF9cEVbgmFkcqywTg6wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDeDIraakEZF2ojyucOpTuOjO0rWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDQzYzBiOGQtNjhhMy0z
NjM1LTkyNWItNWNkNDIxZmUzN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAow11TWGNPYDWvi07Huh1INdGwXSbotXDJg/bO
c8xf0FWgJCPvJD4vfW7ykiubXoPWdBmojWCp+d/fgD6BzSSgv7bZfx4AUF4YS1ti
e5qxyN02nPh5ZWtvDwUfdPANJI8dQt7W2Vn5JP1HbP1x7fPVqrvproVZHE5vB5J9
MAeRd9RoE1QWL4qrdmEnh5TGgAsw9DgezzTMSyUDvfAHfvpZUo13R+1+h0LRyVDD
X14cpAkfIWiqG3c+ErZyP52ZBqRbcy5p45ojiaYwkS0nnpdkkHruvv3y0Kr2wmRX
Sh+svfFspm4blv+zzVaaW+4yzJVjbRYjtIuwfu5pxYm94g+j
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:42 2026 by rpki-client