Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b90d5daf-91f8-30a7-bc36-140f03d2d0e1.roa
File:                     b90d5daf-91f8-30a7-bc36-140f03d2d0e1.roa (raw, json)
Hash identifier:          NrYL1hgW2H5aud+hcitPah1taAe7hYUjvfY7KF1oKa8=
Subject key identifier:   7F:DF:E0:B6:AF:AC:67:9E:AA:45:1A:FD:54:41:52:F4:34:CB:8C:1D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5FA86724738D3143FCFD9C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b90d5daf-91f8-30a7-bc36-140f03d2d0e1.roa
Signing time:             Thu 02 Apr 2026 14:22:41 +0000
ROA not before:           Thu 02 Apr 2026 14:22:41 +0000
ROA not after:            Wed 01 Jul 2026 14:22:41 +0000
asID:                     397197
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:a8:67:24:73:8d:31:43:fc:fd:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 14:22:41 2026 GMT
            Not After : Jul  1 14:22:41 2026 GMT
        Subject: CN=8e8366fa-75fb-4fd9-acc4-f36108b8e1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:27:99:a1:88:77:7f:95:0a:7e:9f:15:0c:05:
                    f7:64:fc:32:cf:9e:b3:62:79:61:4d:b5:6e:f2:32:
                    6a:9e:25:9e:7b:0a:f6:28:5f:7d:c9:57:11:93:4d:
                    f7:b4:85:ec:af:c2:16:99:73:59:4f:bb:1d:a0:32:
                    ad:57:ff:46:d3:bc:66:3d:f0:d3:b8:dc:0e:22:d7:
                    50:8b:f7:60:5d:5f:df:79:77:72:04:05:93:ae:19:
                    d8:aa:88:21:85:76:fb:6e:03:2b:45:21:62:fd:ed:
                    24:32:dc:12:44:75:78:21:1a:44:27:be:47:f8:6b:
                    88:31:c4:ac:6f:c9:f8:2d:55:59:a0:10:24:b8:6e:
                    22:b1:57:79:b3:6d:a2:7c:b1:7d:28:52:bf:af:ec:
                    53:af:e6:e3:9d:81:d0:18:db:86:2c:81:ee:dd:64:
                    14:7a:ad:cc:45:87:e6:3e:38:dd:5b:a6:e8:d7:bd:
                    a8:93:0f:91:d8:1d:61:fe:a1:81:e9:27:01:7d:4f:
                    f7:18:b6:0d:fe:85:4a:ca:88:ef:b9:16:74:7e:2f:
                    1a:98:fc:4b:ed:5c:c9:d1:d6:a6:7d:b1:26:48:05:
                    14:ce:e7:84:91:7a:4b:63:6a:eb:20:2b:ec:45:01:
                    d0:87:ab:22:ad:a0:a0:6f:aa:5f:11:91:da:bb:de:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DF:E0:B6:AF:AC:67:9E:AA:45:1A:FD:54:41:52:F4:34:CB:8C:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b90d5daf-91f8-30a7-bc36-140f03d2d0e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d3:dc:71:62:5a:b6:7e:92:70:b3:3a:c8:c3:e7:77:41:3d:
         d3:6a:22:69:6c:97:52:41:d7:82:e4:21:62:f0:20:37:86:17:
         44:c2:0e:5b:e7:3b:ef:a1:d7:85:05:66:cf:2b:99:20:c7:1b:
         96:ee:60:9e:55:70:4d:08:71:2f:2a:06:73:d4:6b:59:67:6c:
         75:8b:35:60:d3:e5:80:b1:50:45:fe:02:9f:42:95:90:6a:20:
         54:73:30:45:97:4b:09:b8:fa:2f:8e:7e:62:7d:a7:70:9c:fd:
         86:50:72:e1:74:2c:99:d5:8b:d0:e5:a6:99:00:11:a3:34:ea:
         f1:ef:8b:01:f9:a4:bd:ed:60:b1:3d:da:3b:36:b3:fc:e0:5c:
         aa:5d:f3:90:80:37:eb:88:9f:e6:5d:3e:3e:4d:ad:53:c4:37:
         78:2a:7d:fa:8e:a8:93:ec:23:e1:86:07:2d:6e:6f:74:8c:0d:
         ae:19:85:4a:17:06:d7:2a:f3:db:0a:8c:61:cd:aa:a7:2c:e6:
         c4:aa:32:69:3c:70:84:fd:ce:22:72:32:65:dc:56:22:cb:b3:
         77:82:50:26:b1:18:7a:bc:35:19:07:c9:83:41:2c:fe:63:61:
         84:11:61:fc:fa:35:1a:db:c6:79:74:41:9b:b2:46:1f:59:8e:
         9b:dc:30:ad
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1fqGckc40xQ/z9nIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwMjE0MjI0MVoXDTI2MDcwMTE0MjI0MVowLzEtMCsGA1UEAxMk
OGU4MzY2ZmEtNzVmYi00ZmQ5LWFjYzQtZjM2MTA4YjhlMWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjieZoYh3f5UKfp8VDAX3ZPwyz56zYnlhTbVu
8jJqniWeewr2KF99yVcRk033tIXsr8IWmXNZT7sdoDKtV/9G07xmPfDTuNwOItdQ
i/dgXV/feXdyBAWTrhnYqoghhXb7bgMrRSFi/e0kMtwSRHV4IRpEJ75H+GuIMcSs
b8n4LVVZoBAkuG4isVd5s22ifLF9KFK/r+xTr+bjnYHQGNuGLIHu3WQUeq3MRYfm
PjjdW6bo172okw+R2B1h/qGB6ScBfU/3GLYN/oVKyojvuRZ0fi8amPxL7VzJ0dam
fbEmSAUUzueEkXpLY2rrICvsRQHQh6siraCgb6pfEZHau96ETwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFH/f4LavrGeeqkUa/VRBUvQ0y4wdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjkwZDVkYWYtOTFmOC0z
MGE3LWJjMzYtMTQwZjAzZDJkMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAyMd
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBA09xxYlq2fpJwszrIw+d3QT3TaiJpbJdSQdeC
5CFi8CA3hhdEwg5b5zvvodeFBWbPK5kgxxuW7mCeVXBNCHEvKgZz1GtZZ2x1izVg
0+WAsVBF/gKfQpWQaiBUczBFl0sJuPovjn5ifadwnP2GUHLhdCyZ1YvQ5aaZABGj
NOrx74sB+aS97WCxPdo7NrP84FyqXfOQgDfriJ/mXT4+Ta1TxDd4Kn36jqiT7CPh
hgctbm90jA2uGYVKFwbXKvPbCoxhzaqnLObEqjJpPHCE/c4icjJl3FYiy7N3glAm
sRh6vDUZB8mDQSz+Y2GEEWH8+jUa28Z5dEGbskYfWY6b3DCt
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:06:09 2026 by rpki-client