Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a8a3b7e-0a8f-3b95-b5d5-3b4dcd3c22b5.roa
File:                     1a8a3b7e-0a8f-3b95-b5d5-3b4dcd3c22b5.roa (raw, json)
Hash identifier:          y+UuapR9hvnTzzG3uIFpWMWu0OjPenSMCaRfwspG/lc=
Subject key identifier:   40:7F:C3:8F:62:6A:3B:68:00:A7:AD:05:B8:E9:1B:24:41:47:4B:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4972ECA663BF55927043BA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a8a3b7e-0a8f-3b95-b5d5-3b4dcd3c22b5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396542
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:ec:a6:63:bf:55:92:70:43:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=59a07754-76d5-440f-9d30-9e46d8be1997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b0:1d:80:2c:78:25:6d:de:7e:99:e3:76:06:
                    77:07:82:63:e5:05:2a:4f:bc:c0:2c:98:56:ea:cb:
                    a0:9a:36:5e:c4:32:62:ec:74:ce:b3:34:05:c4:05:
                    41:03:6a:45:23:5f:a8:98:e5:d0:ba:de:a0:8c:51:
                    dd:49:b4:99:dd:54:9e:a0:cd:d4:f8:d8:08:13:31:
                    dc:6c:74:aa:61:09:76:f2:92:eb:ab:4f:4f:16:dd:
                    fb:8f:02:94:ec:a3:47:1d:df:ac:08:96:1b:63:98:
                    c5:28:28:ed:c8:28:39:e3:39:45:56:ab:23:a4:68:
                    60:ae:85:20:66:cd:76:d7:91:83:fc:e6:b1:17:1e:
                    fe:fe:3d:71:75:dc:7a:d2:54:a4:29:2a:6c:5a:66:
                    e6:aa:cf:0b:18:f8:83:77:83:88:ed:17:96:3a:d6:
                    47:44:29:4c:20:de:37:36:0d:a2:82:13:e9:86:c4:
                    de:79:a2:ad:de:c7:d8:52:c9:0b:6d:22:c8:94:47:
                    fa:8c:c0:c0:62:43:2a:21:4d:f4:64:e5:8d:f6:88:
                    94:da:3e:09:19:c1:41:85:16:4e:ee:89:04:60:89:
                    53:68:2d:fd:02:d4:f5:38:e5:0c:f4:f2:83:d4:5f:
                    27:36:60:7a:f4:ee:cc:da:3b:3c:ec:90:e1:de:df:
                    64:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7F:C3:8F:62:6A:3B:68:00:A7:AD:05:B8:E9:1B:24:41:47:4B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a8a3b7e-0a8f-3b95-b5d5-3b4dcd3c22b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:a8:78:cf:5d:69:a6:8e:cf:e1:66:69:91:1d:0a:c0:bc:77:
         22:85:df:b6:be:6a:53:9a:7e:ba:9a:44:97:fd:76:95:5f:fb:
         16:a9:81:60:ee:c7:f8:16:2d:c8:bd:f3:14:77:12:a8:88:39:
         b2:bd:93:12:f3:b3:53:05:88:80:80:4b:66:c6:b7:3e:99:4b:
         8e:c8:d7:66:a5:c0:08:94:5a:7d:52:82:ad:af:4f:24:88:b4:
         50:77:fb:7f:d7:e1:ea:a4:e4:78:e9:c4:f2:b2:b0:5c:0e:0a:
         67:29:69:d3:6c:2f:56:3b:34:88:a4:b2:7d:9e:28:0f:1b:a1:
         bf:e8:56:b1:1a:78:ef:5b:57:cb:1c:da:7a:11:62:7e:ea:a9:
         5b:b3:16:76:6a:8a:81:24:5d:8c:9a:d2:79:cb:93:5e:fb:87:
         47:a5:6e:14:f5:89:43:2a:88:cd:af:a3:39:26:d2:cc:d5:70:
         99:7b:f9:73:bf:e6:9d:89:8b:26:ac:6d:f4:cf:f6:c1:e4:be:
         b4:2e:97:61:18:8d:b4:80:a8:14:dd:78:91:ee:42:34:59:c8:
         86:30:1c:4c:a7:90:69:00:4a:56:ac:43:37:f1:db:98:bc:ce:
         35:59:2c:7d:53:b3:58:e7:8b:14:31:f4:66:88:c0:d6:dd:e3:
         ed:03:a9:af
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JcuymY79VknBDugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTlhMDc3NTQtNzZkNS00NDBmLTlkMzAtOWU0NmQ4YmUxOTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrAdgCx4JW3efpnjdgZ3B4Jj5QUqT7zALJhW
6sugmjZexDJi7HTOszQFxAVBA2pFI1+omOXQut6gjFHdSbSZ3VSeoM3U+NgIEzHc
bHSqYQl28pLrq09PFt37jwKU7KNHHd+sCJYbY5jFKCjtyCg54zlFVqsjpGhgroUg
Zs1215GD/OaxFx7+/j1xddx60lSkKSpsWmbmqs8LGPiDd4OI7ReWOtZHRClMIN43
Ng2ighPphsTeeaKt3sfYUskLbSLIlEf6jMDAYkMqIU30ZOWN9oiU2j4JGcFBhRZO
7okEYIlTaC39AtT1OOUM9PKD1F8nNmB69O7M2js87JDh3t9kuwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEB/w49iajtoAKetBbjpGyRBR0veMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWE4YTNiN2UtMGE4Zi0z
Yjk1LWI1ZDUtM2I0ZGNkM2MyMmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFANk3
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCLqHjPXWmmjs/hZmmRHQrAvHcihd+2vmpTmn66
mkSX/XaVX/sWqYFg7sf4Fi3IvfMUdxKoiDmyvZMS87NTBYiAgEtmxrc+mUuOyNdm
pcAIlFp9UoKtr08kiLRQd/t/1+HqpOR46cTysrBcDgpnKWnTbC9WOzSIpLJ9nigP
G6G/6FaxGnjvW1fLHNp6EWJ+6qlbsxZ2aoqBJF2MmtJ5y5Ne+4dHpW4U9YlDKojN
r6M5JtLM1XCZe/lzv+adiYsmrG30z/bB5L60LpdhGI20gKgU3XiR7kI0WciGMBxM
p5BpAEpWrEM38duYvM41WSx9U7NY54sUMfRmiMDW3ePtA6mv
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:15:44 2026 by rpki-client