Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce9a91cd-94c4-3a95-9912-d6c7708f4f5e.roa
File:                     ce9a91cd-94c4-3a95-9912-d6c7708f4f5e.roa (raw, json)
Hash identifier:          gr0PZE614jrobNektAoEqXYH1LAupry7FkmHKL9HegU=
Subject key identifier:   2D:BE:42:CC:07:ED:A2:24:6D:8B:D3:CB:C9:C0:39:B3:73:0B:38:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D87FA91FE68A0247FB553CA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce9a91cd-94c4-3a95-9912-d6c7708f4f5e.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     36620
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:91:fe:68:a0:24:7f:b5:53:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=f4628155-95ce-4c74-873b-4dfac8405eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:36:6e:7e:88:3f:c8:cb:a1:23:41:e4:20:
                    74:0b:0c:c4:f8:a7:bb:2c:0d:0b:2d:24:80:e5:23:
                    19:01:84:ee:a7:53:64:a3:b2:44:4e:7e:20:fd:43:
                    0a:f6:f9:95:1b:2d:0a:13:ed:c5:f5:ce:84:62:1f:
                    ea:5f:81:11:61:d9:43:9a:70:34:76:bc:b5:15:4a:
                    ad:f1:e5:75:34:31:2c:5d:10:fb:23:ce:80:5d:74:
                    4f:59:1c:56:51:55:b5:2c:d9:e1:15:92:ab:c2:16:
                    2a:5e:57:46:01:34:39:54:26:79:93:6c:47:4a:05:
                    a5:d5:7c:6e:f1:ef:f3:bc:6b:34:47:97:c6:42:76:
                    aa:db:14:d2:0b:c4:74:4e:c1:2d:28:df:27:e7:65:
                    96:31:c5:f8:c4:fa:9b:2b:39:52:a7:73:50:44:6b:
                    a2:9d:18:59:77:36:28:73:d0:35:55:a2:46:f3:11:
                    6a:5c:02:60:2f:7e:65:ad:f7:d7:7d:33:f2:fc:90:
                    f0:39:da:e2:b4:9c:12:bc:d6:a1:17:9b:ff:28:e1:
                    b3:fb:34:fc:ea:dc:dc:2f:d6:09:83:b8:ae:fb:c4:
                    e1:d0:05:00:82:9a:f9:b9:b7:4f:e9:97:e8:a0:2c:
                    dc:4f:b5:51:39:5c:c6:b6:ec:af:6b:a8:d7:14:d1:
                    b1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BE:42:CC:07:ED:A2:24:6D:8B:D3:CB:C9:C0:39:B3:73:0B:38:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce9a91cd-94c4-3a95-9912-d6c7708f4f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:d6:6e:d3:ec:aa:be:4f:08:0b:5c:57:ce:27:f9:e8:eb:e0:
         c8:24:34:2f:31:2a:60:06:9c:df:8f:f9:c7:93:40:14:cd:5b:
         07:79:90:61:49:2c:4d:88:43:ce:0b:7b:38:1b:88:15:3c:88:
         71:d4:96:ba:c0:b3:4f:6b:33:ee:a9:93:12:c7:46:f6:b0:5a:
         6a:d9:3c:91:73:20:ef:5f:c4:9a:22:c5:53:32:2f:1c:83:13:
         e3:95:d8:99:61:fd:89:96:d5:a6:2a:0d:9c:ec:b4:59:28:24:
         35:52:cc:3d:1c:2b:e7:99:63:6c:f4:da:3b:39:30:e9:f7:63:
         95:a9:2e:4f:11:b7:e1:94:37:21:a3:5f:47:6f:fe:c9:98:e0:
         c0:a9:b3:ca:96:cb:0e:f2:1a:b6:a3:06:13:b3:ca:cb:88:82:
         74:85:4f:9e:23:f5:0e:19:7b:c3:57:c9:3c:47:d8:ff:98:d0:
         f0:67:ee:14:4e:8f:a0:d4:fd:b2:27:f0:c3:dd:58:37:b5:52:
         d0:95:1e:4a:3b:9f:2b:6e:b7:2a:51:1a:9a:55:64:9b:09:30:
         48:6a:87:25:d3:7d:9d:67:b5:65:39:d7:a6:4d:a4:5c:ea:94:
         60:1e:df:ec:6c:72:7e:80:0f:be:67:cf:a9:5d:36:ee:6c:0f:
         de:bf:90:9e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2H+pH+aKAkf7VTyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk
ZjQ2MjgxNTUtOTVjZS00Yzc0LTg3M2ItNGRmYWM4NDA1ZWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsys2bn6IP8jLoSNB5CB0CwzE+Ke7LA0LLSSA
5SMZAYTup1Nko7JETn4g/UMK9vmVGy0KE+3F9c6EYh/qX4ERYdlDmnA0dry1FUqt
8eV1NDEsXRD7I86AXXRPWRxWUVW1LNnhFZKrwhYqXldGATQ5VCZ5k2xHSgWl1Xxu
8e/zvGs0R5fGQnaq2xTSC8R0TsEtKN8n52WWMcX4xPqbKzlSp3NQRGuinRhZdzYo
c9A1VaJG8xFqXAJgL35lrffXfTPy/JDwOdritJwSvNahF5v/KOGz+zT86tzcL9YJ
g7iu+8Th0AUAgpr5ubdP6ZfooCzcT7VROVzGtuyva6jXFNGx2wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFC2+QswH7aIkbYvTy8nAObNzCzjTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2U5YTkxY2QtOTRjNC0z
YTk1LTk5MTItZDZjNzcwOGY0ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC31m7T7Kq+TwgLXFfOJ/no6+DIJDQvMSpgBpzf
j/nHk0AUzVsHeZBhSSxNiEPOC3s4G4gVPIhx1Ja6wLNPazPuqZMSx0b2sFpq2TyR
cyDvX8SaIsVTMi8cgxPjldiZYf2JltWmKg2c7LRZKCQ1Usw9HCvnmWNs9No7OTDp
92OVqS5PEbfhlDcho19Hb/7JmODAqbPKlssO8hq2owYTs8rLiIJ0hU+eI/UOGXvD
V8k8R9j/mNDwZ+4UTo+g1P2yJ/DD3Vg3tVLQlR5KO58rbrcqURqaVWSbCTBIaocl
032dZ7VlOdemTaRc6pRgHt/sbHJ+gA++Z8+pXTbubA/ev5Ce
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:59 2026 by rpki-client