Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc0dded1-7211-3c87-bb88-c2a0da76db5b.roa
File:                     dc0dded1-7211-3c87-bb88-c2a0da76db5b.roa (raw, json)
Hash identifier:          wMsp3U5cxU+wBcmGD4e/96zXkDh3mOe63GtN8GZyKnQ=
Subject key identifier:   2D:60:10:9F:AA:F0:9E:9C:4D:A0:70:AB:19:36:02:08:BF:4D:A7:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA82033EA1BC9A75A36D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc0dded1-7211-3c87-bb88-c2a0da76db5b.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     396612
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:82:03:3e:a1:bc:9a:75:a3:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=8b49d3ef-ad1b-407e-9d71-4d675a5d1bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:52:35:dd:be:6a:0d:1c:31:ea:5f:3d:ff:ec:
                    18:b8:53:d7:e4:f6:f9:cd:e9:1b:bb:98:a8:32:59:
                    e3:3b:93:6c:1b:c1:73:d5:ef:61:a1:87:18:72:7f:
                    79:6c:9f:d5:a4:3f:54:a5:f4:73:56:88:54:86:ab:
                    fe:ce:d0:77:78:1a:0b:f2:20:d9:ed:f1:90:7e:51:
                    9d:2b:c2:48:19:d3:ea:a7:40:6b:c4:26:aa:b9:9a:
                    5c:85:ba:60:b6:81:dd:02:b6:f8:28:49:92:9c:b8:
                    cc:c8:11:84:d6:ee:8f:36:28:7b:a2:25:e1:54:e5:
                    7a:b0:f5:71:e1:cd:17:41:89:0d:79:c5:e5:40:f5:
                    d1:79:73:9b:00:49:81:73:39:dc:21:31:26:de:0b:
                    33:33:4a:c4:80:27:d4:11:d5:43:b6:56:a1:77:ec:
                    ce:0e:5e:3b:69:a2:5a:48:4f:9c:6b:35:b3:b6:bf:
                    9e:9a:4e:84:47:f2:6d:b8:41:7a:d7:f4:fd:ac:f5:
                    95:d1:29:b8:2e:83:ef:bd:2d:d6:1b:34:08:12:1f:
                    59:ad:55:8b:21:fc:34:21:ad:10:42:e1:29:1f:c5:
                    1b:d0:6f:a9:af:91:1a:5b:31:b4:8a:5a:56:fc:13:
                    9b:c4:60:61:f5:cc:52:1f:b2:65:62:d9:fb:65:1e:
                    21:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:60:10:9F:AA:F0:9E:9C:4D:A0:70:AB:19:36:02:08:BF:4D:A7:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc0dded1-7211-3c87-bb88-c2a0da76db5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:4f:d0:bf:12:fe:74:09:61:71:5d:71:c3:7e:e1:99:9c:da:
         db:88:ab:64:ef:97:db:6e:28:cf:c2:d8:ac:59:e6:b2:f1:94:
         91:6b:3c:2d:51:e4:06:aa:47:27:48:6b:06:a2:c7:f9:38:9a:
         04:63:da:76:20:75:16:54:5d:03:05:a7:d9:31:a2:77:aa:84:
         f7:df:60:69:3a:f4:68:02:8b:af:07:18:b0:e3:b6:3a:8c:fd:
         ca:79:a1:9a:ed:5e:f0:cd:67:34:98:e6:df:d0:9f:02:d1:17:
         57:a6:a7:09:cc:12:2a:50:f4:50:7d:b3:aa:42:67:23:2c:25:
         f7:5c:ee:e1:fa:50:27:8f:52:79:56:b7:bc:68:10:d4:36:fd:
         e2:b4:6b:48:b9:6e:77:23:a6:f2:78:91:c2:da:d6:d3:f3:df:
         19:0e:95:c1:66:70:45:05:64:7d:d0:e3:22:0f:83:51:c1:5c:
         57:78:f3:64:20:b2:ee:eb:81:e2:c9:6d:a7:a4:51:fb:8a:ed:
         fd:20:e1:9f:5d:80:37:7f:e7:19:4a:66:19:4e:d1:68:61:4d:
         04:49:1b:6b:25:4d:dd:fc:d9:67:aa:3d:ce:c0:0b:71:57:df:
         7a:0c:9b:ff:4f:63:79:33:b2:27:be:0a:21:d8:ab:db:e4:7d:
         f3:e7:aa:82
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1u2oIDPqG8mnWjbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk
OGI0OWQzZWYtYWQxYi00MDdlLTlkNzEtNGQ2NzVhNWQxYmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVI13b5qDRwx6l89/+wYuFPX5Pb5zekbu5io
MlnjO5NsG8Fz1e9hoYcYcn95bJ/VpD9UpfRzVohUhqv+ztB3eBoL8iDZ7fGQflGd
K8JIGdPqp0BrxCaquZpchbpgtoHdArb4KEmSnLjMyBGE1u6PNih7oiXhVOV6sPVx
4c0XQYkNecXlQPXReXObAEmBczncITEm3gszM0rEgCfUEdVDtlahd+zODl47aaJa
SE+cazWztr+emk6ER/JtuEF61/T9rPWV0Sm4LoPvvS3WGzQIEh9ZrVWLIfw0Ia0Q
QuEpH8Ub0G+pr5EaWzG0ilpW/BObxGBh9cxSH7JlYtn7ZR4hTwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFC1gEJ+q8J6cTaBwqxk2Agi/TaehMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGMwZGRlZDEtNzIxMS0z
Yzg3LWJiODgtYzJhMGRhNzZkYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCdT9C/Ev50CWFxXXHDfuGZnNrbiKtk75fbbijP
wtisWeay8ZSRazwtUeQGqkcnSGsGosf5OJoEY9p2IHUWVF0DBafZMaJ3qoT332Bp
OvRoAouvBxiw47Y6jP3KeaGa7V7wzWc0mObf0J8C0RdXpqcJzBIqUPRQfbOqQmcj
LCX3XO7h+lAnj1J5Vre8aBDUNv3itGtIuW53I6byeJHC2tbT898ZDpXBZnBFBWR9
0OMiD4NRwVxXePNkILLu64HiyW2npFH7iu39IOGfXYA3f+cZSmYZTtFoYU0ESRtr
JU3d/Nlnqj3OwAtxV996DJv/T2N5M7Invgoh2Kvb5H3z56qC
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:25 2026 by rpki-client