Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4af4d672-539e-3c35-a02b-55f7ff93290b.roa
File:                     4af4d672-539e-3c35-a02b-55f7ff93290b.roa (raw, json)
Hash identifier:          gNkPXCaxLDku2vQPRlsW1l5NMx2q9Zp6ivVqTE4qvnY=
Subject key identifier:   4F:C2:AE:13:91:38:8C:ED:10:27:7D:A4:43:CA:BF:5F:03:33:84:18
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CFDE799EB3FB73432978BCE40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4af4d672-539e-3c35-a02b-55f7ff93290b.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     396826
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:99:eb:3f:b7:34:32:97:8b:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=36671847-8e91-4e04-8eb6-e58f8877401a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:69:45:33:68:98:76:a5:e3:b7:15:21:c5:
                    6b:a9:07:0f:eb:96:43:91:1c:22:4c:c9:31:11:63:
                    89:6f:75:d1:93:65:35:5f:d4:c3:5b:98:d8:b0:e4:
                    c3:a0:b1:a6:67:f0:c3:3a:7c:b8:73:14:1d:86:46:
                    40:ab:b1:fb:d8:dc:46:26:8e:89:21:63:ab:64:9c:
                    e2:43:f7:91:95:16:ca:da:4c:30:43:83:ec:f6:ae:
                    89:ac:55:23:60:42:c2:02:20:72:1d:c9:70:ae:46:
                    86:d9:c1:d9:9b:8f:1b:3d:98:04:a2:a7:e1:1d:37:
                    29:a0:97:d8:44:aa:7d:78:29:a0:78:20:d3:6d:67:
                    0f:63:3c:11:95:9f:41:be:fc:f5:2b:2f:8c:a7:93:
                    d1:a9:b7:6a:7f:b6:c2:d9:ad:15:70:c5:8e:2d:5f:
                    37:68:e4:2d:b9:bd:97:1a:6b:b2:1a:6e:5a:48:c0:
                    ce:ea:24:c8:5c:5e:d6:ae:1a:bd:02:aa:4e:cd:1a:
                    b7:ab:17:48:59:f5:eb:ad:8a:62:a9:5f:09:ab:5d:
                    49:84:75:45:99:20:b3:ce:54:9d:64:68:84:81:bb:
                    0d:f3:f8:89:5a:d9:44:40:ae:06:0a:95:4a:0e:7e:
                    8a:de:ab:83:e8:dc:b0:bd:43:1a:61:2e:01:43:84:
                    23:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C2:AE:13:91:38:8C:ED:10:27:7D:A4:43:CA:BF:5F:03:33:84:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4af4d672-539e-3c35-a02b-55f7ff93290b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:15:25:b3:b7:bf:01:13:8e:b2:92:7c:bd:60:84:81:26:2d:
         ad:a0:b2:40:2f:cf:3a:96:01:44:8b:55:e6:97:a5:0e:39:5c:
         8a:c7:68:5c:21:c6:2a:d4:3d:3c:bb:85:96:a6:dc:67:a8:5e:
         48:4c:20:27:5f:ed:9c:c5:d0:26:26:17:d7:56:b1:d0:b3:20:
         1c:a0:1f:ec:fe:1f:a9:cf:1e:b8:43:66:7d:c2:57:f7:ed:1a:
         e9:81:d0:61:40:ac:f5:0c:c8:38:5d:2d:37:c4:7e:94:c8:e7:
         09:8b:c9:f2:1f:fd:e4:ca:5f:28:b4:96:67:08:f1:a9:d2:a1:
         76:e4:cd:7d:31:cb:12:63:23:51:81:07:a9:f1:cc:4d:2b:c5:
         02:49:22:91:c0:16:da:76:de:9a:29:da:a9:b1:26:e7:06:2d:
         bb:6b:8c:53:e5:8a:fc:b4:cb:e0:5e:10:1b:db:db:81:f4:60:
         38:df:1b:13:bd:29:49:40:d4:d3:d6:fb:c5:3b:fb:ff:dc:de:
         8c:56:b2:c8:b7:59:b1:2a:d5:38:8e:6a:d4:f8:73:bb:46:ae:
         4f:3e:18:b0:aa:64:06:27:35:8a:92:5a:09:d0:d9:1d:12:24:
         e1:11:8c:36:be:eb:97:52:6b:89:a7:48:4f:e1:49:82:c3:5f:
         be:76:ba:7d
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEz955nrP7c0MpeLzkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
MzY2NzE4NDctOGU5MS00ZTA0LThlYjYtZTU4Zjg4Nzc0MDFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrtpRTNomHal47cVIcVrqQcP65ZDkRwiTMkx
EWOJb3XRk2U1X9TDW5jYsOTDoLGmZ/DDOny4cxQdhkZAq7H72NxGJo6JIWOrZJzi
Q/eRlRbK2kwwQ4Ps9q6JrFUjYELCAiByHclwrkaG2cHZm48bPZgEoqfhHTcpoJfY
RKp9eCmgeCDTbWcPYzwRlZ9Bvvz1Ky+Mp5PRqbdqf7bC2a0VcMWOLV83aOQtub2X
GmuyGm5aSMDO6iTIXF7Wrhq9AqpOzRq3qxdIWfXrrYpiqV8Jq11JhHVFmSCzzlSd
ZGiEgbsN8/iJWtlEQK4GCpVKDn6K3quD6NywvUMaYS4BQ4QjIwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFE/CrhOROIztECd9pEPKv18DM4QYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGFmNGQ2NzItNTM5ZS0z
YzM1LWEwMmItNTVmN2ZmOTMyOTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAMFSWzt78BE46ykny9YISBJi2toLJAL886lgFE
i1Xml6UOOVyKx2hcIcYq1D08u4WWptxnqF5ITCAnX+2cxdAmJhfXVrHQsyAcoB/s
/h+pzx64Q2Z9wlf37RrpgdBhQKz1DMg4XS03xH6UyOcJi8nyH/3kyl8otJZnCPGp
0qF25M19McsSYyNRgQep8cxNK8UCSSKRwBbadt6aKdqpsSbnBi27a4xT5Yr8tMvg
XhAb29uB9GA43xsTvSlJQNTT1vvFO/v/3N6MVrLIt1mxKtU4jmrU+HO7Rq5PPhiw
qmQGJzWKkloJ0NkdEiThEYw2vuuXUmuJp0hP4UmCw1++drp9
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:21:11 2026 by rpki-client