Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbd68319-238d-3b9b-a226-c868ebbcbfc9.roa
File:                     fbd68319-238d-3b9b-a226-c868ebbcbfc9.roa (raw, json)
Hash identifier:          U2l5Kl3dy+aXfECwxmAx0aX78nzYZI+tXpme690NRTc=
Subject key identifier:   96:C5:86:59:5B:50:98:3B:00:1D:24:B6:59:A6:EB:5A:35:D5:A7:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D00B27437A34CFA6C6B384800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbd68319-238d-3b9b-a226-c868ebbcbfc9.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     396609
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:74:37:a3:4c:fa:6c:6b:38:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=70c4ed9f-69bd-4240-9130-a8016c31b33e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:76:26:5b:33:b3:21:5d:6b:b9:a3:20:85:
                    e6:6d:42:fd:15:c4:fa:dc:22:f4:5b:23:e5:f7:8d:
                    53:79:25:84:59:7c:82:86:9d:bb:91:db:70:dc:78:
                    bd:03:f3:6f:b2:e4:25:a0:74:15:a7:3c:ad:7b:3c:
                    a0:7c:f2:47:eb:71:75:d9:86:fd:c5:83:a5:46:a8:
                    7c:0d:8d:d4:ff:9a:44:1b:7a:ae:57:31:1a:4f:c2:
                    90:f6:7b:af:a2:6d:df:58:2b:16:f5:1a:be:88:68:
                    89:07:6a:03:e1:e7:15:14:2e:19:a1:83:53:81:b1:
                    5f:ab:a4:14:84:be:d0:a8:fb:c9:b2:b7:e1:e8:4a:
                    f5:34:e8:90:fa:b5:5b:b1:89:b4:46:a8:1a:6e:9e:
                    9d:70:d9:92:25:e7:95:e1:79:bb:2a:66:60:0d:b6:
                    24:b7:ca:31:1e:66:42:5e:c9:52:32:b1:bd:82:ef:
                    1f:83:6b:91:86:4c:ab:49:ca:1a:66:0e:d4:fb:60:
                    67:84:a8:f5:1c:c6:b1:54:32:cc:bb:03:26:df:5e:
                    0e:82:37:b7:34:08:47:20:3e:e7:37:38:60:96:4c:
                    ed:2c:4a:75:8c:86:31:29:4f:d1:70:10:9c:ca:eb:
                    d7:c4:a0:4f:ce:08:7b:24:4e:2c:66:1f:43:2d:8a:
                    c0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C5:86:59:5B:50:98:3B:00:1D:24:B6:59:A6:EB:5A:35:D5:A7:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbd68319-238d-3b9b-a226-c868ebbcbfc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ac:4e:fa:0d:b7:0d:a3:2a:f9:6d:a7:5f:79:59:14:66:07:
         95:6d:bf:6b:81:48:bf:c9:ff:b7:5b:4b:4a:b8:b8:d5:a9:05:
         8a:28:d3:d0:05:02:cb:e3:da:ec:ad:52:04:e9:fc:e7:62:f0:
         f1:0e:e9:c6:01:d1:7d:67:a9:12:3a:b0:d0:8f:13:66:62:11:
         37:57:3d:ac:5d:2f:c0:c5:95:1c:aa:0a:14:93:a1:a5:1c:e1:
         85:2e:b9:b2:13:1b:19:b5:c1:8f:76:5c:62:7f:86:dd:73:56:
         81:d9:41:40:cd:a1:44:37:6d:e1:17:44:1a:b4:98:fe:dd:7c:
         e0:12:ee:d9:90:ff:b3:5c:5e:d2:56:1c:4b:31:89:de:ad:bf:
         04:ea:fd:80:d1:1b:82:d3:14:9d:ad:a0:f9:8d:28:36:a0:82:
         58:da:f5:f6:45:38:30:54:ba:09:ba:c6:13:d8:7c:c9:46:ff:
         3d:b1:12:a1:2a:10:4b:3f:35:93:92:02:47:e9:e6:63:eb:a5:
         c0:f3:5f:81:af:f2:46:ba:16:dc:de:f9:30:d6:4c:a1:da:e4:
         3a:77:16:cb:46:22:8b:5b:82:be:4d:f6:85:b8:6a:85:3c:31:
         5d:25:f0:1f:fb:9d:e7:54:62:c6:e2:e3:26:ea:3d:92:26:12:
         91:dd:48:dd
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0AsnQ3o0z6bGs4SAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk
NzBjNGVkOWYtNjliZC00MjQwLTkxMzAtYTgwMTZjMzFiMzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqd2JlszsyFda7mjIIXmbUL9FcT63CL0WyPl
941TeSWEWXyChp27kdtw3Hi9A/NvsuQloHQVpzytezygfPJH63F12Yb9xYOlRqh8
DY3U/5pEG3quVzEaT8KQ9nuvom3fWCsW9Rq+iGiJB2oD4ecVFC4ZoYNTgbFfq6QU
hL7QqPvJsrfh6Er1NOiQ+rVbsYm0Rqgabp6dcNmSJeeV4Xm7KmZgDbYkt8oxHmZC
XslSMrG9gu8fg2uRhkyrScoaZg7U+2BnhKj1HMaxVDLMuwMm314Ogje3NAhHID7n
NzhglkztLEp1jIYxKU/RcBCcyuvXxKBPzgh7JE4sZh9DLYrApQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJbFhllbUJg7AB0ktlmm61o11af1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmJkNjgzMTktMjM4ZC0z
YjliLWEyMjYtYzg2OGViYmNiZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBtrE76DbcNoyr5badfeVkUZgeVbb9rgUi/yf+3
W0tKuLjVqQWKKNPQBQLL49rsrVIE6fznYvDxDunGAdF9Z6kSOrDQjxNmYhE3Vz2s
XS/AxZUcqgoUk6GlHOGFLrmyExsZtcGPdlxif4bdc1aB2UFAzaFEN23hF0QatJj+
3XzgEu7ZkP+zXF7SVhxLMYnerb8E6v2A0RuC0xSdraD5jSg2oIJY2vX2RTgwVLoJ
usYT2HzJRv89sRKhKhBLPzWTkgJH6eZj66XA81+Br/JGuhbc3vkw1kyh2uQ6dxbL
RiKLW4K+TfaFuGqFPDFdJfAf+53nVGLG4uMm6j2SJhKR3Ujd
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:10:53 2026 by rpki-client