Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d3e358b-988b-3c18-8580-a6ab219a6bce.roa
File:                     0d3e358b-988b-3c18-8580-a6ab219a6bce.roa (raw, json)
Hash identifier:          A1obMpyLmTdgD2id6vapt9hR6jipVjcKSU3GbwvLLmk=
Subject key identifier:   A4:CC:A9:4F:F1:8A:1D:01:DA:1C:ED:DC:AA:78:1A:A0:C2:99:B9:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E66DA2A235C1ED3B6002EA1A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d3e358b-988b-3c18-8580-a6ab219a6bce.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     396567
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:2a:23:5c:1e:d3:b6:00:2e:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=8bad88b6-fc5e-4b7e-aa6a-11066c8ec5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:96:d1:eb:f6:07:f6:2f:86:43:ec:6c:14:91:
                    6c:8a:b2:12:ec:42:14:3e:4a:76:23:79:19:d7:1e:
                    34:2a:39:e4:87:64:b3:91:8d:3b:af:23:df:d9:35:
                    39:71:e1:7c:da:4d:af:40:08:eb:34:92:66:c4:6c:
                    fd:f9:69:e3:b1:5e:96:83:5c:ee:5f:0f:6e:6f:23:
                    ca:ea:21:c4:53:fd:0a:88:a6:da:03:c3:a1:13:fe:
                    5c:9c:05:d9:53:3a:bb:7d:ba:95:58:2c:c4:82:5b:
                    23:a8:6a:39:49:fb:54:7d:57:99:70:1c:96:e0:80:
                    06:44:8d:8e:93:4e:28:e4:88:d4:7c:2f:7a:54:77:
                    3a:78:a8:0b:0c:1a:46:61:a6:36:e4:f6:23:5e:28:
                    77:f6:bc:30:c6:2c:0d:7e:0e:7c:8a:28:eb:fb:42:
                    f1:5e:85:f8:51:56:2d:c9:fb:22:b0:02:3c:42:a1:
                    d7:ef:26:eb:50:ba:58:47:07:d7:16:4b:74:1e:bd:
                    75:0e:2e:23:5c:ae:c3:ef:03:c2:ab:7d:c1:a9:12:
                    2a:a2:33:08:4a:7b:69:2f:24:55:e3:92:2d:4b:f9:
                    48:b8:03:b1:e3:fc:ba:65:be:b1:2e:3f:9e:92:d7:
                    34:8e:26:18:86:93:dd:3f:b3:1c:a7:c2:69:1a:e0:
                    c1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CC:A9:4F:F1:8A:1D:01:DA:1C:ED:DC:AA:78:1A:A0:C2:99:B9:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d3e358b-988b-3c18-8580-a6ab219a6bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:f1:9c:5b:5e:32:d8:9c:5b:2d:04:30:31:f9:0c:1c:2e:7a:
         06:a3:9a:8d:5c:b5:ad:c5:ed:a5:a6:61:b8:1e:21:eb:15:ce:
         b2:59:19:c7:33:6a:7b:cf:8e:eb:9f:86:da:43:b3:61:c8:e6:
         4d:22:b6:81:c0:bc:78:52:07:98:4e:5d:ce:d4:33:7c:b6:fb:
         39:fc:f1:12:cd:ee:46:9b:09:9c:ee:86:24:21:5b:b1:20:49:
         45:4c:26:ec:98:a0:f4:cd:04:ce:61:e5:7d:de:43:4b:11:6a:
         0c:74:16:88:83:9b:09:6d:d4:88:1b:a8:d5:35:fb:7d:31:e8:
         8b:b2:2d:d4:78:3b:8d:c0:44:14:f8:3e:45:e2:d8:d2:5f:47:
         2c:0b:26:58:0f:d4:b1:c0:bc:be:72:b5:98:77:13:1d:9b:e1:
         5d:e0:b9:9c:e4:53:a3:d3:a8:31:69:f3:51:f5:ad:d3:47:dd:
         d7:af:1c:04:9f:23:52:22:96:61:d2:6f:61:ed:88:4b:d1:c8:
         3c:79:e3:ad:c2:88:2d:ca:37:ce:32:09:a1:b5:8e:bf:77:0c:
         f9:1c:9a:dc:10:78:86:dd:cb:09:98:01:35:5c:a1:ea:3a:eb:
         df:b5:d4:11:cb:83:97:06:61:6c:99:b5:b3:82:23:f7:bc:66:
         d9:04:1f:27
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5m2iojXB7TtgAuoaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
OGJhZDg4YjYtZmM1ZS00YjdlLWFhNmEtMTEwNjZjOGVjNWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJbR6/YH9i+GQ+xsFJFsirIS7EIUPkp2I3kZ
1x40Kjnkh2SzkY07ryPf2TU5ceF82k2vQAjrNJJmxGz9+WnjsV6Wg1zuXw9ubyPK
6iHEU/0KiKbaA8OhE/5cnAXZUzq7fbqVWCzEglsjqGo5SftUfVeZcByW4IAGRI2O
k04o5IjUfC96VHc6eKgLDBpGYaY25PYjXih39rwwxiwNfg58iijr+0LxXoX4UVYt
yfsisAI8QqHX7ybrULpYRwfXFkt0Hr11Di4jXK7D7wPCq33BqRIqojMISntpLyRV
45ItS/lIuAOx4/y6Zb6xLj+ektc0jiYYhpPdP7Mcp8JpGuDBfQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKTMqU/xih0B2hzt3Kp4GqDCmbmkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGQzZTM1OGItOTg4Yi0z
YzE4LTg1ODAtYTZhYjIxOWE2YmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC18ZxbXjLYnFstBDAx+QwcLnoGo5qNXLWtxe2l
pmG4HiHrFc6yWRnHM2p7z47rn4baQ7NhyOZNIraBwLx4UgeYTl3O1DN8tvs5/PES
ze5Gmwmc7oYkIVuxIElFTCbsmKD0zQTOYeV93kNLEWoMdBaIg5sJbdSIG6jVNft9
MeiLsi3UeDuNwEQU+D5F4tjSX0csCyZYD9SxwLy+crWYdxMdm+Fd4Lmc5FOj06gx
afNR9a3TR93XrxwEnyNSIpZh0m9h7YhL0cg8eeOtwogtyjfOMgmhtY6/dwz5HJrc
EHiG3csJmAE1XKHqOuvftdQRy4OXBmFsmbWzgiP3vGbZBB8n
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:04:48 2026 by rpki-client