Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bcca41b-80c0-3ed0-bf94-82ddea1a97a7.roa
File:                     0bcca41b-80c0-3ed0-bf94-82ddea1a97a7.roa (raw, json)
Hash identifier:          0B/stZ+rLLlcFThAsl9Bb6omzGGGtd7uaVo3lJLDIfs=
Subject key identifier:   E8:28:C9:9F:AF:B0:23:18:4C:D0:E6:AE:D3:A9:CE:1C:87:FD:54:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E815FB6F750A879EB664AAA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bcca41b-80c0-3ed0-bf94-82ddea1a97a7.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     396571
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:b6:f7:50:a8:79:eb:66:4a:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=3c751058-fde7-4698-b139-dd540670fc1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:78:3b:be:6b:a1:44:93:10:7b:b9:44:3a:6b:
                    6e:02:71:df:c1:ed:fb:03:c0:59:16:15:be:09:06:
                    08:fd:f4:9a:b4:c1:25:ed:02:84:a1:d8:ac:e8:cd:
                    de:ad:d3:1b:b7:b8:de:c1:97:71:58:8f:95:b7:5f:
                    35:68:1a:92:01:44:31:3d:9e:89:04:7d:59:56:80:
                    07:30:c3:fa:32:53:ba:e9:6e:de:be:46:df:c4:60:
                    b4:ee:70:4c:7e:d0:f5:fc:a2:11:49:d3:17:db:df:
                    f0:7c:3c:a8:bf:31:26:a6:29:13:c7:6f:0d:a4:46:
                    16:1d:48:a6:9a:5d:6f:b9:8f:17:b2:83:d8:bd:c5:
                    8c:85:0b:a9:07:5f:e2:05:3b:94:b3:15:83:cf:1c:
                    29:18:b4:62:38:f3:1a:11:ac:83:69:88:7d:50:13:
                    5f:90:17:0f:d4:da:ee:4f:34:d2:2c:90:d3:cf:4e:
                    df:83:cb:3c:85:6b:d0:86:fa:86:9a:d4:d8:80:15:
                    bd:0f:9a:11:6b:02:6f:80:8d:8c:34:61:09:b5:00:
                    16:16:f1:63:31:2b:b5:ee:f6:c6:c9:be:b4:92:a9:
                    16:81:3d:05:af:5d:56:fc:9f:e5:26:09:86:26:7a:
                    ee:52:0e:29:6a:45:45:f5:e8:a7:95:23:85:dd:56:
                    19:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:28:C9:9F:AF:B0:23:18:4C:D0:E6:AE:D3:A9:CE:1C:87:FD:54:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bcca41b-80c0-3ed0-bf94-82ddea1a97a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:2d:02:69:97:b5:d5:44:74:dc:90:4e:cd:3c:11:00:a5:e0:
         ac:3c:25:92:00:78:dd:25:53:09:bb:b8:37:53:53:74:c3:14:
         06:f9:e8:4d:b5:a7:ca:d3:22:20:b1:2f:a8:c3:b7:1f:61:f4:
         45:ad:5f:cd:6c:61:6b:89:07:38:59:e1:19:87:ba:cb:55:c4:
         26:0e:68:5a:8d:42:fe:f0:bd:33:44:6e:70:cd:5e:97:ba:b0:
         6a:22:8b:70:4c:01:83:de:02:ee:76:1f:65:f1:24:65:34:a0:
         37:45:02:fb:cd:07:4d:7a:14:5d:b1:ce:ab:c3:af:c1:72:f9:
         53:60:49:f4:7a:87:c3:b7:72:d4:dd:d0:e9:e5:7a:83:6e:e9:
         94:5d:78:3a:27:09:6c:36:40:8d:86:ae:6e:e9:ca:9d:d9:38:
         83:94:16:ee:c3:b7:2b:71:76:dc:1d:16:1f:e1:20:6f:56:82:
         5d:b6:6b:aa:9b:b5:98:73:7e:5a:a4:c2:d3:8b:3e:d2:34:ef:
         b2:6b:c6:b8:b7:03:a1:17:62:b2:b3:82:ac:39:ae:5c:46:5b:
         66:c0:dd:67:54:b6:39:1c:1f:ab:7c:97:de:6a:80:c6:8f:e7:
         27:23:89:4f:e2:77:62:61:0a:42:51:4b:04:a3:a3:43:68:dc:
         d0:5e:0d:43
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6BX7b3UKh562ZKqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
M2M3NTEwNTgtZmRlNy00Njk4LWIxMzktZGQ1NDA2NzBmYzFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHg7vmuhRJMQe7lEOmtuAnHfwe37A8BZFhW+
CQYI/fSatMEl7QKEodis6M3erdMbt7jewZdxWI+Vt181aBqSAUQxPZ6JBH1ZVoAH
MMP6MlO66W7evkbfxGC07nBMftD1/KIRSdMX29/wfDyovzEmpikTx28NpEYWHUim
ml1vuY8XsoPYvcWMhQupB1/iBTuUsxWDzxwpGLRiOPMaEayDaYh9UBNfkBcP1Nru
TzTSLJDTz07fg8s8hWvQhvqGmtTYgBW9D5oRawJvgI2MNGEJtQAWFvFjMSu17vbG
yb60kqkWgT0Fr11W/J/lJgmGJnruUg4pakVF9einlSOF3VYZGwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOgoyZ+vsCMYTNDmrtOpzhyH/VTPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGJjY2E0MWItODBjMC0z
ZWQwLWJmOTQtODJkZGVhMWE5N2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCwLQJpl7XVRHTckE7NPBEApeCsPCWSAHjdJVMJ
u7g3U1N0wxQG+ehNtafK0yIgsS+ow7cfYfRFrV/NbGFriQc4WeEZh7rLVcQmDmha
jUL+8L0zRG5wzV6XurBqIotwTAGD3gLudh9l8SRlNKA3RQL7zQdNehRdsc6rw6/B
cvlTYEn0eofDt3LU3dDp5XqDbumUXXg6JwlsNkCNhq5u6cqd2TiDlBbuw7crcXbc
HRYf4SBvVoJdtmuqm7WYc35apMLTiz7SNO+ya8a4twOhF2Kys4KsOa5cRltmwN1n
VLY5HB+rfJfeaoDGj+cnI4lP4ndiYQpCUUsEo6NDaNzQXg1D
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:50:10 2026 by rpki-client