Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d91d046-65a0-3d9e-85cf-8b3038f77d6d.roa
File:                     8d91d046-65a0-3d9e-85cf-8b3038f77d6d.roa (raw, json)
Hash identifier:          wt6SSFohA0CzCVDP5CaIB7UzWCe1gYxfSv/OQzUvVeI=
Subject key identifier:   21:FC:CC:93:8A:8F:72:AB:76:79:CB:46:22:95:F8:D9:C6:DB:AC:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CF878E8EB22753A3490E3FA18
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d91d046-65a0-3d9e-85cf-8b3038f77d6d.roa
Signing time:             Tue 24 Feb 2026 15:18:44 +0000
ROA not before:           Tue 24 Feb 2026 15:18:44 +0000
ROA not after:            Mon 25 May 2026 14:18:44 +0000
asID:                     396553
IP address blocks:        2001:503:a83e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:78:e8:eb:22:75:3a:34:90:e3:fa:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 24 15:18:44 2026 GMT
            Not After : May 25 14:18:44 2026 GMT
        Subject: CN=07850dae-7789-492a-825f-85ee5d9ecefa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4a:44:d5:d9:8a:28:67:52:76:2b:31:21:ca:
                    e0:a4:a3:af:0c:3e:30:2a:64:7a:82:b9:a2:87:68:
                    fc:3f:9b:50:c5:c2:a0:a6:b0:a9:3d:97:48:5d:cc:
                    ad:7d:b5:e7:f6:8e:64:e0:22:c5:3c:b1:09:ca:23:
                    70:a1:33:f6:5e:85:fd:19:96:ec:1b:a0:0e:1d:c3:
                    9e:4e:d9:71:cd:d6:60:a3:34:63:d8:b8:33:a3:71:
                    48:6b:ba:0a:45:3d:4b:42:0c:49:f3:da:c0:c4:52:
                    69:45:18:c4:58:b4:aa:48:85:07:1d:1d:75:11:14:
                    22:e9:23:9a:80:0e:fd:7c:9c:66:19:57:95:16:83:
                    8e:bf:86:f6:fe:3c:0a:4b:8d:2a:a2:26:5f:45:3e:
                    94:23:50:f4:87:b0:73:f5:40:9e:1f:d7:3e:53:f0:
                    fd:d1:30:23:d0:68:de:c0:44:e0:c9:1f:d5:b3:a7:
                    b3:88:21:4c:c3:28:d6:a5:0b:5e:c0:af:00:54:e2:
                    d8:b3:52:2e:63:45:95:d4:82:d5:22:c8:70:c6:69:
                    a2:83:76:c8:d0:6f:dd:ee:79:33:30:d5:92:f6:6c:
                    06:f8:28:5d:9f:cf:0e:83:49:f3:22:1d:12:fa:df:
                    67:ce:15:47:cf:ba:e9:f9:f8:93:ba:59:c6:b9:3d:
                    62:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FC:CC:93:8A:8F:72:AB:76:79:CB:46:22:95:F8:D9:C6:DB:AC:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d91d046-65a0-3d9e-85cf-8b3038f77d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:4e:ce:fc:05:54:bd:77:78:60:c1:bf:25:4b:87:f4:0b:8f:
         ee:99:0c:95:f9:68:ab:23:73:08:55:2f:5a:6c:c4:5c:af:4c:
         5d:46:4b:2b:52:2e:a9:2f:3d:d5:c9:ce:57:75:6b:b9:1c:4d:
         32:47:67:14:9e:14:c1:b2:bc:b5:7a:7b:a7:16:6a:2d:f4:94:
         d2:c3:a5:9a:80:e1:d3:7b:c0:09:72:2c:d0:89:e9:4d:67:c7:
         79:3f:aa:17:b0:3d:41:dd:34:08:69:d7:b9:a0:bc:67:21:87:
         47:8e:df:58:6c:d6:23:c4:e8:50:d5:17:df:c4:22:a8:dc:6e:
         24:01:52:1e:24:50:f4:3c:3a:05:15:65:a8:13:e1:8e:bf:4d:
         2d:ab:ed:cb:ec:16:9d:87:5c:29:f1:37:d0:25:e7:f9:6f:3f:
         4f:20:12:a6:f6:fa:c4:a3:30:3c:e4:63:f1:50:6d:1e:d3:82:
         29:55:29:35:88:e3:32:b5:af:4b:6a:c6:17:36:a6:b2:ce:1d:
         67:2b:a8:fe:c7:4e:69:3f:b6:c7:6d:32:1f:16:e6:5a:33:ed:
         7c:69:5f:7f:79:4f:3e:67:a5:b5:17:74:5a:3d:ed:d4:83:9d:
         c1:f8:5d:cb:86:ff:ba:99:c8:56:6b:15:4d:ff:2b:4a:08:cc:
         2a:b1:17:96
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEz4eOjrInU6NJDj+hgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIyNDE1MTg0NFoXDTI2MDUyNTE0MTg0NFowLzEtMCsGA1UEAxMk
MDc4NTBkYWUtNzc4OS00OTJhLTgyNWYtODVlZTVkOWVjZWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkpE1dmKKGdSdisxIcrgpKOvDD4wKmR6grmi
h2j8P5tQxcKgprCpPZdIXcytfbXn9o5k4CLFPLEJyiNwoTP2XoX9GZbsG6AOHcOe
TtlxzdZgozRj2Lgzo3FIa7oKRT1LQgxJ89rAxFJpRRjEWLSqSIUHHR11ERQi6SOa
gA79fJxmGVeVFoOOv4b2/jwKS40qoiZfRT6UI1D0h7Bz9UCeH9c+U/D90TAj0Gje
wETgyR/Vs6eziCFMwyjWpQtewK8AVOLYs1IuY0WV1ILVIshwxmmig3bI0G/d7nkz
MNWS9mwG+Chdn88Og0nzIh0S+t9nzhVHz7rp+fiTulnGuT1iDQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCH8zJOKj3KrdnnLRiKV+NnG26wHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGQ5MWQwNDYtNjVhMC0z
ZDllLTg1Y2YtOGIzMDM4Zjc3ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA6g+
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAETs78BVS9d3hgwb8lS4f0C4/umQyV+WirI3MI
VS9abMRcr0xdRksrUi6pLz3Vyc5XdWu5HE0yR2cUnhTBsry1enunFmot9JTSw6Wa
gOHTe8AJcizQielNZ8d5P6oXsD1B3TQIade5oLxnIYdHjt9YbNYjxOhQ1RffxCKo
3G4kAVIeJFD0PDoFFWWoE+GOv00tq+3L7Badh1wp8TfQJef5bz9PIBKm9vrEozA8
5GPxUG0e04IpVSk1iOMyta9LasYXNqayzh1nK6j+x05pP7bHbTIfFuZaM+18aV9/
eU8+Z6W1F3RaPe3Ug53B+F3Lhv+6mchWaxVN/ytKCMwqsReW
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:30:15 2026 by rpki-client