Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba34bcf-5357-3076-9123-9ef84349756a.roa
File:                     5ba34bcf-5357-3076-9123-9ef84349756a.roa (raw, json)
Hash identifier:          8Rw/QFn8aJQY5+eOftpsUlkmja3ATsDgQbYCiCtJw5M=
Subject key identifier:   26:C9:37:4B:17:8F:4A:7C:D8:71:EF:6F:39:DB:20:3E:CF:76:59:4F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CED27B5C8FD1CC878B2005D74
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba34bcf-5357-3076-9123-9ef84349756a.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     396591
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:b5:c8:fd:1c:c8:78:b2:00:5d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=d6dca380-b81b-469f-bf33-5798ba51e314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a5:43:8e:9e:51:33:29:e8:11:02:75:c3:7d:
                    86:2d:55:50:fa:a3:13:34:36:bf:13:c1:39:d2:1c:
                    66:f4:2b:9b:48:55:68:ed:9b:1f:8b:c9:d5:61:39:
                    91:e3:d4:a7:ce:c2:97:ad:d5:bd:ea:b9:66:34:54:
                    0a:bf:1b:c1:95:5e:18:3a:15:62:a1:fb:cf:2a:fa:
                    64:91:9d:16:da:22:ff:2c:5e:5f:b6:da:20:67:20:
                    3a:68:6e:24:93:d7:62:20:71:89:b4:ba:04:7e:6e:
                    d9:ec:f5:c3:53:52:76:8b:ba:6e:7b:17:dd:df:39:
                    a7:36:2e:15:fd:a9:56:c9:db:e9:41:55:01:7e:9b:
                    16:bb:8e:df:89:1a:b7:39:2a:99:6d:31:1b:22:f2:
                    74:23:d9:2e:79:fd:12:82:ce:69:12:37:a9:f8:6f:
                    ee:8a:a7:24:36:99:6c:64:29:21:e4:b4:5c:25:ad:
                    8b:cd:ea:01:41:4b:b1:1d:fc:f2:c3:25:5f:59:ad:
                    59:29:b8:bc:41:42:2f:bc:07:41:02:32:88:da:2f:
                    7c:0b:59:d3:b1:08:2b:76:f5:33:28:c1:4d:6f:1c:
                    30:9e:6b:69:74:11:57:aa:94:d4:fd:c4:61:ff:7b:
                    2d:8b:05:2d:06:6f:d8:65:49:f9:f7:d9:2c:d7:01:
                    02:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C9:37:4B:17:8F:4A:7C:D8:71:EF:6F:39:DB:20:3E:CF:76:59:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba34bcf-5357-3076-9123-9ef84349756a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d5:62:dd:6b:95:cc:c1:48:1b:58:25:c4:df:6f:a6:4d:45:
         a3:e6:f8:a0:1a:b5:f5:1c:8f:19:06:d0:0a:47:62:1c:ed:ef:
         8b:dd:c1:38:cd:17:22:a6:42:92:b6:68:cb:6d:7e:d7:8e:3c:
         76:14:dd:79:ea:dc:03:2b:a8:65:1a:76:3d:5c:77:a7:a8:72:
         45:b3:9e:d8:99:b0:ff:a8:4c:05:8b:96:a4:80:a3:96:44:51:
         e4:53:7f:13:c0:aa:5f:60:9b:5a:77:b2:8d:dc:27:e6:bd:6d:
         8c:01:83:17:9f:86:4d:9c:80:0e:bc:7a:a7:78:40:65:9b:d2:
         0a:24:86:d5:47:05:03:dc:de:09:d8:31:9b:79:fc:9f:a8:a5:
         5c:76:bb:cc:90:90:a7:59:1a:c1:5f:0a:74:b6:b2:1b:46:dc:
         a0:26:e4:11:dc:23:95:f0:ef:84:12:5a:cc:88:8f:e2:42:45:
         fe:f8:20:a6:c4:45:21:eb:18:07:68:18:1c:ee:b7:d1:71:ee:
         ad:8e:39:ce:ea:74:2e:5d:c9:c4:88:b4:c8:f4:0f:f1:83:b7:
         59:28:36:fa:52:d9:f6:bb:93:a3:ed:3f:34:e9:b7:4d:43:b5:
         8d:a9:4c:9a:43:d4:85:1d:29:d1:ad:85:54:fb:42:95:42:b5:
         e3:19:dc:40
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEztJ7XI/RzIeLIAXXQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk
ZDZkY2EzODAtYjgxYi00NjlmLWJmMzMtNTc5OGJhNTFlMzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6VDjp5RMynoEQJ1w32GLVVQ+qMTNDa/E8E5
0hxm9CubSFVo7Zsfi8nVYTmR49SnzsKXrdW96rlmNFQKvxvBlV4YOhViofvPKvpk
kZ0W2iL/LF5fttogZyA6aG4kk9diIHGJtLoEfm7Z7PXDU1J2i7puexfd3zmnNi4V
/alWydvpQVUBfpsWu47fiRq3OSqZbTEbIvJ0I9kuef0Sgs5pEjep+G/uiqckNpls
ZCkh5LRcJa2LzeoBQUuxHfzywyVfWa1ZKbi8QUIvvAdBAjKI2i98C1nTsQgrdvUz
KMFNbxwwnmtpdBFXqpTU/cRh/3stiwUtBm/YZUn599ks1wECAQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCbJN0sXj0p82HHvbznbID7PdllPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWJhMzRiY2YtNTM1Ny0z
MDc2LTkxMjMtOWVmODQzNDk3NTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA41WLda5XMwUgbWCXE32+mTUWj5vigGrX1HI8Z
BtAKR2Ic7e+L3cE4zRcipkKStmjLbX7Xjjx2FN156twDK6hlGnY9XHenqHJFs57Y
mbD/qEwFi5akgKOWRFHkU38TwKpfYJtad7KN3CfmvW2MAYMXn4ZNnIAOvHqneEBl
m9IKJIbVRwUD3N4J2DGbefyfqKVcdrvMkJCnWRrBXwp0trIbRtygJuQR3COV8O+E
ElrMiI/iQkX++CCmxEUh6xgHaBgc7rfRce6tjjnO6nQuXcnEiLTI9A/xg7dZKDb6
Utn2u5Oj7T806bdNQ7WNqUyaQ9SFHSnRrYVU+0KVQrXjGdxA
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:24 2026 by rpki-client