Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4fcdff6-fecf-3ba4-8cda-60026c2cad89.roa
File:                     d4fcdff6-fecf-3ba4-8cda-60026c2cad89.roa (raw, json)
Hash identifier:          lHn56uUekrnlDSq538Y1krp+en5blda25dXJkpyJAtA=
Subject key identifier:   F3:D1:A4:1A:6D:0B:FD:03:6A:78:2B:5E:36:66:6A:3A:4B:22:74:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E534F3E3414642505F3D29940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4fcdff6-fecf-3ba4-8cda-60026c2cad89.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     396541
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:3e:34:14:64:25:05:f3:d2:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=dd1a61d3-32e4-4f84-a45f-bb397ef832ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b2:81:99:8c:8d:90:61:a2:a3:14:ac:9b:e1:
                    39:96:df:f4:67:53:f6:ce:bb:26:7b:d3:91:56:76:
                    5c:f8:f7:78:89:b4:d8:ff:31:e0:8b:8e:fb:94:02:
                    d0:9b:90:a1:4f:12:16:5e:74:e5:77:d2:26:7d:40:
                    93:35:01:e9:6d:65:7d:03:c7:69:ea:0a:71:47:86:
                    ba:22:30:14:53:2f:56:6f:a9:da:c9:51:2e:d5:d3:
                    a2:e1:36:4b:68:47:f1:2b:f8:1f:63:cb:f4:1d:62:
                    cb:3e:9f:c8:7d:f4:64:61:dc:53:b1:15:75:4a:9d:
                    48:2f:b7:51:21:29:d2:0c:b0:83:83:00:36:22:69:
                    53:0f:3b:a6:6a:31:cb:3a:77:4f:4a:76:bc:b6:6b:
                    f4:1f:8a:a4:c0:0c:26:19:bf:9f:0d:04:c1:80:09:
                    ca:1f:fb:90:19:c0:40:ef:7a:2b:33:c8:11:72:1f:
                    fe:56:26:00:63:26:2f:e4:4f:c7:ac:11:30:d0:36:
                    67:d5:bb:3c:e0:15:f8:9b:5e:56:19:9f:b8:90:5d:
                    c0:88:4b:27:20:97:b7:93:fa:10:c5:d1:d4:f6:d4:
                    2f:af:27:7c:7a:75:bd:27:e5:e0:d5:dd:13:59:ed:
                    01:85:05:25:a2:a5:af:85:2f:50:5a:e9:71:ac:2a:
                    87:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D1:A4:1A:6D:0B:FD:03:6A:78:2B:5E:36:66:6A:3A:4B:22:74:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4fcdff6-fecf-3ba4-8cda-60026c2cad89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:25:d7:ed:bb:ca:b5:ad:38:b5:3b:92:ba:c7:32:88:7c:17:
         fd:ff:83:18:a1:3e:a8:ea:10:87:03:b8:61:f1:b1:e4:47:47:
         39:88:a2:8b:13:2b:f6:21:66:04:bd:47:1a:bb:cd:68:2d:52:
         0f:d1:38:d8:8e:32:7e:a1:88:c6:02:46:c8:7f:c7:c7:f5:0c:
         c9:9a:85:14:2d:52:06:74:1c:41:96:f8:38:01:53:31:04:e4:
         12:0f:9c:5e:53:14:b4:8c:18:d8:ab:7c:cb:7f:64:10:e1:44:
         a4:ce:42:86:d1:7c:f3:08:9b:35:da:ec:1f:ff:83:31:f4:b0:
         c8:2a:8f:8e:21:a2:19:f6:61:c6:f7:3c:fb:d8:8b:22:dd:08:
         61:e5:aa:dd:6a:db:88:1f:04:8b:2f:54:6c:57:e0:28:c8:c5:
         b5:1e:8c:b4:91:d8:2b:b9:0d:cc:a5:fc:09:ac:7f:46:8a:81:
         11:f0:86:f7:d1:a4:9d:2d:54:fb:45:1c:52:e0:a4:99:e9:cf:
         21:c0:c5:b8:99:63:e8:9d:7b:54:fc:e0:9d:da:97:9d:65:08:
         f1:9f:c6:51:21:42:62:7f:06:40:2b:1d:3f:b3:86:3e:5e:c3:
         07:f2:11:53:c8:f4:a9:49:7d:95:c4:e4:46:aa:ea:a6:0b:9c:
         30:62:52:df
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5TTz40FGQlBfPSmUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYyODIxMDAxMVoXDTI2MDkyNjIxMDAxMVowLzEtMCsGA1UEAxMk
ZGQxYTYxZDMtMzJlNC00Zjg0LWE0NWYtYmIzOTdlZjgzMmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLKBmYyNkGGioxSsm+E5lt/0Z1P2zrsme9OR
VnZc+Pd4ibTY/zHgi477lALQm5ChTxIWXnTld9ImfUCTNQHpbWV9A8dp6gpxR4a6
IjAUUy9Wb6nayVEu1dOi4TZLaEfxK/gfY8v0HWLLPp/IffRkYdxTsRV1Sp1IL7dR
ISnSDLCDgwA2ImlTDzumajHLOndPSna8tmv0H4qkwAwmGb+fDQTBgAnKH/uQGcBA
73orM8gRch/+ViYAYyYv5E/HrBEw0DZn1bs84BX4m15WGZ+4kF3AiEsnIJe3k/oQ
xdHU9tQvryd8enW9J+Xg1d0TWe0BhQUloqWvhS9QWulxrCqHewIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPPRpBptC/0DangrXjZmajpLInR9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDRmY2RmZjYtZmVjZi0z
YmE0LThjZGEtNjAwMjZjMmNhZDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAw0t
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCmJdftu8q1rTi1O5K6xzKIfBf9/4MYoT6o6hCH
A7hh8bHkR0c5iKKLEyv2IWYEvUcau81oLVIP0TjYjjJ+oYjGAkbIf8fH9QzJmoUU
LVIGdBxBlvg4AVMxBOQSD5xeUxS0jBjYq3zLf2QQ4USkzkKG0XzzCJs12uwf/4Mx
9LDIKo+OIaIZ9mHG9zz72Isi3Qhh5ardatuIHwSLL1RsV+AoyMW1Hoy0kdgruQ3M
pfwJrH9GioER8Ib30aSdLVT7RRxS4KSZ6c8hwMW4mWPonXtU/OCd2pedZQjxn8ZR
IUJifwZAKx0/s4Y+XsMH8hFTyPSpSX2VxORGquqmC5wwYlLf
-----END CERTIFICATE-----
Generated at Sun Jun 28 23:08:01 2026 by rpki-client