Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbad8993-698d-3d02-aaee-faa7494f65d2.roa
File:                     dbad8993-698d-3d02-aaee-faa7494f65d2.roa (raw, json)
Hash identifier:          H2A1SSYTTL107TX3vcDci1/sCjmqKqSEVeVzPO+2z7E=
Subject key identifier:   17:07:82:28:F4:F1:A8:2D:C3:1C:79:4F:DD:6F:45:A0:90:9A:F3:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAE22CFF74BB77947B1180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbad8993-698d-3d02-aaee-faa7494f65d2.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396552
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:e2:2c:ff:74:bb:77:94:7b:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=da30fa2c-d197-4993-b322-bde9bc243b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:ce:6d:ad:3f:b7:cf:50:75:79:68:6a:36:
                    70:58:a9:ec:cd:7b:ba:04:7b:8f:1e:43:f5:96:1c:
                    1d:d8:18:e1:b0:a1:18:a5:25:4d:9d:17:1a:1c:47:
                    9d:17:fb:6e:29:4d:d2:f0:50:eb:4a:28:6d:3b:fb:
                    12:9a:8e:61:24:17:22:b4:c8:04:37:70:62:c1:dd:
                    93:a9:54:bc:60:ce:b8:2e:30:a2:e3:86:97:ff:6b:
                    a2:68:fb:2f:a7:e7:f8:cf:ff:f6:fc:56:b5:c3:cf:
                    eb:9e:30:ed:c9:52:7d:66:db:c6:2b:d8:05:fd:cc:
                    bd:d0:76:66:46:b5:ea:87:0e:72:00:b7:54:be:83:
                    c9:16:7b:0c:b2:dc:a2:02:e4:8d:c4:90:05:bf:9e:
                    4a:34:c3:83:e0:3d:c1:c3:93:ae:b7:f1:d8:e7:12:
                    e0:00:78:c6:10:ce:fc:1f:9d:25:28:2d:eb:9c:65:
                    a5:2b:c5:30:15:47:4f:38:db:e6:eb:bf:d3:7e:50:
                    07:f3:bd:94:d1:05:01:29:85:ae:b6:b4:a9:1a:17:
                    eb:ab:6b:88:30:f5:6d:10:dc:52:1f:5c:82:f3:99:
                    da:fd:5e:6a:98:4b:77:b7:d2:be:e1:d4:f8:f4:a9:
                    09:8b:7e:ee:4b:ed:31:b4:8f:a7:d3:bd:29:3d:6c:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:07:82:28:F4:F1:A8:2D:C3:1C:79:4F:DD:6F:45:A0:90:9A:F3:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbad8993-698d-3d02-aaee-faa7494f65d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:25:97:e2:3d:d9:f3:ad:6e:6a:19:61:6c:ca:92:0f:67:48:
         cb:29:12:85:5f:b7:be:43:8e:c1:bd:e7:11:9c:d1:b2:f3:ef:
         ba:5b:92:6b:ca:e2:de:4a:11:69:8a:b5:7e:21:bf:7b:66:92:
         53:f0:8a:ef:ab:2b:d7:97:fd:fd:ed:6a:c1:e9:62:9a:97:e9:
         30:f1:c8:4f:dd:41:d4:92:10:20:ff:dc:7d:c4:dc:35:95:5a:
         a6:b8:0c:f0:f5:78:94:f2:eb:06:04:9c:50:b3:59:d7:7f:ce:
         39:95:94:e0:10:5d:a5:ab:ca:35:8c:f5:c3:cf:0d:c6:be:cf:
         1e:64:6e:cc:91:03:15:59:b7:bd:28:df:15:53:dd:7b:73:df:
         02:5e:9f:c7:51:68:dc:70:4d:72:4b:7f:f0:40:e6:ef:44:56:
         7b:b6:16:af:50:c9:59:4b:72:a5:8f:e6:ea:67:ef:8e:bd:57:
         b7:21:93:30:f4:82:43:9e:07:5b:69:1c:6a:1e:9f:1c:24:9e:
         62:9c:bc:a6:6d:21:a7:5f:93:af:72:27:f6:f1:6c:27:4b:27:
         0d:46:e3:39:da:1c:27:33:bb:bc:92:9d:44:ae:c5:ed:71:72:
         24:32:d5:36:8b:77:9f:03:53:62:ca:4a:07:69:37:0d:b3:38:
         8c:76:4c:e4
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2DyuIs/3S7d5R7EYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
ZGEzMGZhMmMtZDE5Ny00OTkzLWIzMjItYmRlOWJjMjQzYjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKbOba0/t89QdXloajZwWKnszXu6BHuPHkP1
lhwd2BjhsKEYpSVNnRcaHEedF/tuKU3S8FDrSihtO/sSmo5hJBcitMgEN3Biwd2T
qVS8YM64LjCi44aX/2uiaPsvp+f4z//2/Fa1w8/rnjDtyVJ9ZtvGK9gF/cy90HZm
RrXqhw5yALdUvoPJFnsMstyiAuSNxJAFv55KNMOD4D3Bw5Out/HY5xLgAHjGEM78
H50lKC3rnGWlK8UwFUdPONvm67/TflAH872U0QUBKYWutrSpGhfrq2uIMPVtENxS
H1yC85na/V5qmEt3t9K+4dT49KkJi37uS+0xtI+n070pPWx03QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBcHgij08agtwxx5T91vRaCQmvMTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGJhZDg5OTMtNjk4ZC0z
ZDAyLWFhZWUtZmFhNzQ5NGY2NWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAMJZfiPdnzrW5qGWFsypIPZ0jLKRKFX7e+Q47B
vecRnNGy8++6W5JryuLeShFpirV+Ib97ZpJT8IrvqyvXl/397WrB6WKal+kw8chP
3UHUkhAg/9x9xNw1lVqmuAzw9XiU8usGBJxQs1nXf845lZTgEF2lq8o1jPXDzw3G
vs8eZG7MkQMVWbe9KN8VU917c98CXp/HUWjccE1yS3/wQObvRFZ7thavUMlZS3Kl
j+bqZ++OvVe3IZMw9IJDngdbaRxqHp8cJJ5inLymbSGnX5Ovcif28WwnSycNRuM5
2hwnM7u8kp1ErsXtcXIkMtU2i3efA1NiykoHaTcNsziMdkzk
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:28 2026 by rpki-client