Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dcaf43cc-e4ad-3b28-8d70-28218df4ec67.roa
File:                     dcaf43cc-e4ad-3b28-8d70-28218df4ec67.roa (raw, json)
Hash identifier:          nF9PEdYSbl3Jm+yNLPyqKIf9qMLGdi57zP9cyIrjZfs=
Subject key identifier:   22:55:AB:6A:5E:E7:52:D6:9C:53:62:85:6A:D0:6A:08:04:E3:28:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D732BDDB0621E5D5ED89FD3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dcaf43cc-e4ad-3b28-8d70-28218df4ec67.roa
Signing time:             Thu 09 Apr 2026 14:07:55 +0000
ROA not before:           Thu 09 Apr 2026 14:07:55 +0000
ROA not after:            Wed 08 Jul 2026 14:07:55 +0000
asID:                     396566
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:2b:dd:b0:62:1e:5d:5e:d8:9f:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  9 14:07:55 2026 GMT
            Not After : Jul  8 14:07:55 2026 GMT
        Subject: CN=65996e37-9b86-41ab-b80c-d3ed10fd25cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1e:19:54:e0:f8:f3:e3:ae:6f:6f:b9:9f:ab:
                    27:ba:14:bb:b7:3e:3f:35:e3:5a:13:50:be:7a:d5:
                    27:89:a9:36:d4:a2:ac:a0:ef:59:f8:84:e6:e0:ce:
                    42:e1:79:bb:7f:b1:7c:cf:7d:85:8c:d4:da:a5:0b:
                    b0:6a:fb:89:2a:02:7a:2e:dc:33:74:73:ce:3e:5a:
                    e5:2d:a2:25:b0:6b:62:80:71:9c:bd:2a:04:fb:98:
                    be:e2:1d:20:5f:be:73:43:34:5f:d0:5a:be:24:6f:
                    36:91:2e:41:d3:ff:83:22:30:40:c3:4c:26:03:02:
                    05:d1:ea:c2:88:49:bf:10:16:55:33:7c:9e:69:ce:
                    f1:9a:cd:82:64:27:cc:bd:aa:f0:6f:2d:c2:79:d9:
                    99:8e:2b:dd:63:b1:79:6b:b5:dc:0a:60:06:f5:4b:
                    79:c7:dc:72:8f:5a:32:d6:4a:48:4f:25:ff:d3:b6:
                    84:33:46:05:7e:7d:c6:96:b1:18:0e:9d:9d:04:5d:
                    6c:ac:c5:7d:4f:e9:cc:fc:67:76:a5:1c:72:fa:76:
                    8e:57:30:9e:e3:7b:e7:43:96:16:ae:4b:7a:75:bf:
                    6f:9e:45:02:89:d1:fb:35:c4:ab:13:32:24:6e:76:
                    05:49:6a:75:f9:98:5c:51:d6:94:9b:4c:b1:c6:a1:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:55:AB:6A:5E:E7:52:D6:9C:53:62:85:6A:D0:6A:08:04:E3:28:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dcaf43cc-e4ad-3b28-8d70-28218df4ec67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:55:5e:94:32:4d:c9:33:98:f7:cd:d1:e7:d4:89:2d:1d:68:
         6f:2c:c8:da:9a:f9:13:fd:32:7b:42:ef:30:c5:63:de:11:9f:
         06:ea:f8:da:4b:d8:92:30:78:4f:ca:cf:3a:1b:61:cd:e1:56:
         24:67:35:8f:7f:d0:77:95:36:35:e9:83:1b:97:c5:86:4d:23:
         85:43:df:b1:0e:51:60:65:1e:61:3d:fa:42:80:70:e1:4e:aa:
         14:fb:d9:26:f4:d1:ad:f7:ea:7d:67:c9:ea:8e:d1:ea:4f:22:
         bd:db:0e:1a:f9:eb:bf:13:00:15:f5:26:3f:05:39:dd:8a:aa:
         4f:5d:49:3f:b8:85:f1:0e:67:a1:ad:82:b1:15:2d:d8:fa:2b:
         10:95:a7:92:27:77:a2:d0:38:ad:15:1e:a7:f5:98:19:1b:1e:
         a2:79:36:5b:a1:69:07:01:5b:d9:c4:ec:cb:d0:33:0d:1f:fd:
         aa:59:81:50:88:7b:a9:36:f9:e4:59:85:b3:b9:8e:a0:c3:65:
         68:11:a4:3d:13:ae:6f:cd:21:a4:50:4a:f8:44:70:68:77:e6:
         8e:2c:a9:5d:c1:10:15:e0:2d:b8:08:3e:20:5a:67:0f:9a:52:
         af:5c:40:4c:8e:c6:b5:26:38:f6:8a:95:8c:bf:6d:9e:6f:cb:
         f6:2f:d2:26
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1zK92wYh5dXtif08AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwOTE0MDc1NVoXDTI2MDcwODE0MDc1NVowLzEtMCsGA1UEAxMk
NjU5OTZlMzctOWI4Ni00MWFiLWI4MGMtZDNlZDEwZmQyNWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx4ZVOD48+Oub2+5n6snuhS7tz4/NeNaE1C+
etUniak21KKsoO9Z+ITm4M5C4Xm7f7F8z32FjNTapQuwavuJKgJ6LtwzdHPOPlrl
LaIlsGtigHGcvSoE+5i+4h0gX75zQzRf0Fq+JG82kS5B0/+DIjBAw0wmAwIF0erC
iEm/EBZVM3yeac7xms2CZCfMvarwby3CedmZjivdY7F5a7XcCmAG9Ut5x9xyj1oy
1kpITyX/07aEM0YFfn3GlrEYDp2dBF1srMV9T+nM/Gd2pRxy+naOVzCe43vnQ5YW
rkt6db9vnkUCidH7NcSrEzIkbnYFSWp1+ZhcUdaUm0yxxqHtOQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCJVq2pe51LWnFNihWrQaggE4yisMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGNhZjQzY2MtZTRhZC0z
YjI4LThkNzAtMjgyMThkZjRlYzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAw0t
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAdVV6UMk3JM5j3zdHn1IktHWhvLMjamvkT/TJ7
Qu8wxWPeEZ8G6vjaS9iSMHhPys86G2HN4VYkZzWPf9B3lTY16YMbl8WGTSOFQ9+x
DlFgZR5hPfpCgHDhTqoU+9km9NGt9+p9Z8nqjtHqTyK92w4a+eu/EwAV9SY/BTnd
iqpPXUk/uIXxDmehrYKxFS3Y+isQlaeSJ3ei0DitFR6n9ZgZGx6ieTZboWkHAVvZ
xOzL0DMNH/2qWYFQiHupNvnkWYWzuY6gw2VoEaQ9E65vzSGkUEr4RHBod+aOLKld
wRAV4C24CD4gWmcPmlKvXEBMjsa1Jjj2ipWMv22eb8v2L9Im
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:18:41 2026 by rpki-client