Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d686611-e937-3646-884c-e840c181a09d.roa
File:                     5d686611-e937-3646-884c-e840c181a09d.roa (raw, json)
Hash identifier:          SPQK0T11frGFrxO7ZLcmxq3TBquJ0x3KpiXj0l+Ro70=
Subject key identifier:   50:2B:BD:78:DC:22:4E:6D:10:A0:BC:84:87:1F:62:34:8E:9D:BD:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CEFF22B343D0E179AA50E72C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d686611-e937-3646-884c-e840c181a09d.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     22547
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:2b:34:3d:0e:17:9a:a5:0e:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=a246c71b-3982-48e6-aa8e-c9896094f395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:b0:eb:d4:68:0f:6e:95:6b:5d:e2:e6:ef:
                    56:15:5c:00:65:a2:69:0e:b5:fc:a1:b7:54:c4:20:
                    68:4b:14:b0:c8:a0:1b:78:ee:d1:55:9a:76:69:7e:
                    d3:ff:99:7e:d3:10:4e:16:73:8f:5d:2f:50:89:be:
                    43:46:ec:6a:0f:38:4f:68:81:cf:ed:da:66:f7:58:
                    02:1b:8d:4c:47:b1:ae:2e:31:7e:95:51:13:78:16:
                    1a:fa:27:dc:12:7e:eb:a8:36:29:5f:27:69:6b:c4:
                    11:d8:3c:73:e6:2a:05:15:18:1e:5d:63:d5:ef:ce:
                    d2:71:f0:c4:9e:fe:22:4c:be:3a:07:3b:c0:1e:c4:
                    b3:be:6f:b4:51:ef:e5:d9:65:25:97:45:5f:8b:42:
                    99:da:e1:d3:9f:78:42:34:b0:02:65:8a:37:26:dd:
                    fd:17:7d:1f:4c:e6:9d:c2:63:b7:35:4e:cf:0b:73:
                    f7:69:6a:e0:b2:a9:eb:8d:1c:af:52:52:e1:1f:1b:
                    2d:ff:51:a4:78:7d:cc:4d:29:76:ce:4f:bf:fc:95:
                    2d:c6:d6:97:ff:74:0a:2b:c5:95:2f:dd:f8:15:b2:
                    bf:7b:cc:34:63:2b:23:21:a7:e7:3a:36:f0:6b:fb:
                    13:24:9b:f7:9e:fa:ff:69:e0:8a:1e:0d:2c:5b:81:
                    5b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2B:BD:78:DC:22:4E:6D:10:A0:BC:84:87:1F:62:34:8E:9D:BD:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d686611-e937-3646-884c-e840c181a09d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:dc:93:09:11:2b:98:3a:33:09:de:05:04:70:aa:31:55:f1:
         82:36:9b:bd:29:b6:94:99:8f:40:62:e2:8d:ee:4b:0a:89:98:
         13:ba:5e:49:0f:7b:2a:27:79:c2:f8:a0:aa:15:8d:ce:54:25:
         3f:d1:67:1b:03:9f:b2:f9:c9:d5:bd:ce:d3:ef:13:cc:14:36:
         f1:8f:d9:01:55:dc:fd:15:63:28:cb:f1:b7:5d:d9:a8:73:7e:
         f2:f0:da:ff:c4:c1:38:ed:85:44:37:30:8e:c7:41:ec:65:8d:
         d5:1a:1d:d0:fb:48:ab:89:90:de:62:a3:60:70:44:65:e5:c1:
         83:46:2b:51:d7:75:db:bb:70:f2:96:23:5f:a9:58:62:c8:f5:
         a9:07:ad:f7:bc:14:82:9d:40:08:e8:44:4b:fa:59:d8:d0:d6:
         49:f9:d6:a3:db:d0:46:21:58:83:2b:eb:29:68:e8:64:6d:88:
         c2:d0:55:d3:2a:f4:12:eb:35:5d:72:d3:a6:24:10:3f:d7:1b:
         20:77:6f:9a:5a:c5:f5:b4:95:68:73:92:62:7f:08:c0:ab:c2:
         d2:1c:d2:a0:ae:e5:2a:94:ac:ca:c1:48:81:65:cf:1c:54:89:
         02:79:54:88:be:1d:96:af:09:30:0c:db:7a:56:dd:a7:1f:92:
         b3:c3:61:81
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEzv8is0PQ4XmqUOcsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk
YTI0NmM3MWItMzk4Mi00OGU2LWFhOGUtYzk4OTYwOTRmMzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAiw69RoD26Va13i5u9WFVwAZaJpDrX8obdU
xCBoSxSwyKAbeO7RVZp2aX7T/5l+0xBOFnOPXS9Qib5DRuxqDzhPaIHP7dpm91gC
G41MR7GuLjF+lVETeBYa+ifcEn7rqDYpXydpa8QR2Dxz5ioFFRgeXWPV787ScfDE
nv4iTL46BzvAHsSzvm+0Ue/l2WUll0Vfi0KZ2uHTn3hCNLACZYo3Jt39F30fTOad
wmO3NU7PC3P3aWrgsqnrjRyvUlLhHxst/1GkeH3MTSl2zk+//JUtxtaX/3QKK8WV
L934FbK/e8w0YysjIafnOjbwa/sTJJv3nvr/aeCKHg0sW4FbjwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFArvXjcIk5tEKC8hIcfYjSOnb3wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWQ2ODY2MTEtZTkzNy0z
NjQ2LTg4NGMtZTg0MGMxODFhMDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC73JMJESuYOjMJ3gUEcKoxVfGCNpu9KbaUmY9A
YuKN7ksKiZgTul5JD3sqJ3nC+KCqFY3OVCU/0WcbA5+y+cnVvc7T7xPMFDbxj9kB
Vdz9FWMoy/G3Xdmoc37y8Nr/xME47YVENzCOx0HsZY3VGh3Q+0iriZDeYqNgcERl
5cGDRitR13Xbu3DyliNfqVhiyPWpB633vBSCnUAI6ERL+lnY0NZJ+daj29BGIViD
K+spaOhkbYjC0FXTKvQS6zVdctOmJBA/1xsgd2+aWsX1tJVoc5JifwjAq8LSHNKg
ruUqlKzKwUiBZc8cVIkCeVSIvh2WrwkwDNt6Vt2nH5Kzw2GB
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:10 2026 by rpki-client