Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/684aa8f9-c82e-3cbf-8b28-d5d076c51c59.roa
File:                     684aa8f9-c82e-3cbf-8b28-d5d076c51c59.roa (raw, json)
Hash identifier:          9SJGbquZkWuqFDZxg1NA2o6gmwK1xVqCgnEQxmLIrSI=
Subject key identifier:   76:C9:3F:55:6A:83:23:15:8A:BA:6A:56:FC:9E:77:01:17:39:07:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D00B29A1B739CE7B2C36ACE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/684aa8f9-c82e-3cbf-8b28-d5d076c51c59.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     396610
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:9a:1b:73:9c:e7:b2:c3:6a:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=0e05eae0-4e33-43f8-8759-dd298cb92ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:13:4f:b5:cf:ac:7a:80:82:35:e6:0b:9a:03:
                    8c:1b:fe:08:32:a3:41:97:54:c6:57:4b:16:82:3d:
                    07:18:c7:07:ed:9d:bd:c3:9c:f8:9f:9c:2e:8b:a8:
                    9b:9b:b6:07:2f:ab:fc:bc:78:08:07:c1:5b:c0:6f:
                    28:85:be:15:01:31:7f:8a:8f:6f:ea:83:f6:35:66:
                    b8:35:63:e7:b2:94:e5:4a:fd:07:f3:4b:fa:d4:73:
                    bb:ef:73:08:b6:d0:84:74:35:0a:1d:0a:4f:82:20:
                    4d:1b:25:5b:a2:e0:44:89:49:aa:c5:d4:7b:fc:e5:
                    d2:a4:3f:a1:80:3a:f2:54:21:6f:35:67:17:a2:a6:
                    ac:4f:19:c2:fb:b2:50:92:84:36:f0:4a:78:23:5f:
                    99:8b:c5:48:66:84:ee:05:3f:2e:3a:fa:e1:35:06:
                    7f:52:e3:2c:ab:26:a4:a8:a8:61:f9:90:0b:64:25:
                    15:86:d1:70:64:3f:3d:f4:88:1a:66:7c:68:03:c8:
                    b0:97:de:c7:87:0a:8a:3b:fd:9d:4f:2b:a2:c6:ed:
                    d1:d2:80:5a:25:fc:46:51:04:1e:e2:01:1f:0c:ca:
                    94:cb:8c:50:e5:e1:ff:39:a1:30:d2:8a:59:1c:91:
                    91:5a:03:11:14:9e:d9:d4:6a:18:02:a8:dc:07:36:
                    74:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C9:3F:55:6A:83:23:15:8A:BA:6A:56:FC:9E:77:01:17:39:07:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/684aa8f9-c82e-3cbf-8b28-d5d076c51c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b9:88:ce:f6:1b:a8:52:08:29:a5:19:c8:7d:a5:af:9b:d1:
         6f:c3:36:6b:0e:db:e2:56:51:08:5f:00:a2:da:91:2f:77:78:
         c4:07:ed:7d:b7:3d:dd:5e:86:d9:2b:f0:a1:8b:4f:ea:a2:23:
         b9:45:6f:c7:4f:af:e1:1e:27:bc:72:fa:0d:f9:38:f1:d3:35:
         0e:3a:a3:09:2a:d9:ef:d0:9a:86:83:ca:18:e7:35:53:d3:4a:
         50:1d:e9:5a:85:52:45:39:70:af:63:e2:c7:50:ae:81:26:1d:
         b0:1a:ab:e7:dc:0d:e6:44:20:d2:2e:48:9d:8e:69:c4:a3:65:
         d0:b5:4a:16:4b:d8:59:f4:16:80:8a:6f:75:49:4f:01:ed:39:
         51:fd:4e:8b:12:69:9a:0a:25:0f:c3:ee:16:ae:c7:5c:22:1e:
         5e:05:a6:c2:4d:6a:aa:0d:b5:5b:6f:1b:27:9f:48:7a:1e:70:
         5d:65:05:e1:47:cc:83:22:c0:99:9d:70:39:34:3a:64:61:35:
         a8:f9:bd:26:8e:30:a1:53:2a:43:50:1a:ef:08:0e:89:75:2c:
         a2:78:b8:d2:94:72:1a:ed:f5:a0:93:12:32:43:f9:9b:7f:cb:
         67:e5:a7:2f:94:0c:05:7e:7f:6b:59:74:34:54:9a:27:0a:fb:
         8c:dd:53:b9
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0Aspobc5znssNqzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk
MGUwNWVhZTAtNGUzMy00M2Y4LTg3NTktZGQyOThjYjkyZWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RNPtc+seoCCNeYLmgOMG/4IMqNBl1TGV0sW
gj0HGMcH7Z29w5z4n5wui6ibm7YHL6v8vHgIB8FbwG8ohb4VATF/io9v6oP2NWa4
NWPnspTlSv0H80v61HO773MIttCEdDUKHQpPgiBNGyVbouBEiUmqxdR7/OXSpD+h
gDryVCFvNWcXoqasTxnC+7JQkoQ28Ep4I1+Zi8VIZoTuBT8uOvrhNQZ/UuMsqyak
qKhh+ZALZCUVhtFwZD899IgaZnxoA8iwl97HhwqKO/2dTyuixu3R0oBaJfxGUQQe
4gEfDMqUy4xQ5eH/OaEw0opZHJGRWgMRFJ7Z1GoYAqjcBzZ0lQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHbJP1VqgyMVirpqVvyedwEXOQdjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjg0YWE4ZjktYzgyZS0z
Y2JmLThiMjgtZDVkMDc2YzUxYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCJuYjO9huoUggppRnIfaWvm9FvwzZrDtviVlEI
XwCi2pEvd3jEB+19tz3dXobZK/Chi0/qoiO5RW/HT6/hHie8cvoN+Tjx0zUOOqMJ
Ktnv0JqGg8oY5zVT00pQHelahVJFOXCvY+LHUK6BJh2wGqvn3A3mRCDSLkidjmnE
o2XQtUoWS9hZ9BaAim91SU8B7TlR/U6LEmmaCiUPw+4WrsdcIh5eBabCTWqqDbVb
bxsnn0h6HnBdZQXhR8yDIsCZnXA5NDpkYTWo+b0mjjChUypDUBrvCA6JdSyieLjS
lHIa7fWgkxIyQ/mbf8tn5acvlAwFfn9rWXQ0VJonCvuM3VO5
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:24 2026 by rpki-client