Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26cbdb0e-75f4-34ec-9aad-cadff5de153b.roa
File:                     26cbdb0e-75f4-34ec-9aad-cadff5de153b.roa (raw, json)
Hash identifier:          jXAh4/3sATTDSvuqM1dscu14PMF+mTTAxWkLlEzAfKw=
Subject key identifier:   28:24:11:1A:7B:65:F4:16:DF:A1:BB:69:1F:88:AA:B5:64:60:DA:36
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7BCA328C6D7ED55BBFB8A0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26cbdb0e-75f4-34ec-9aad-cadff5de153b.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     20172
IP address blocks:        2001:502:7094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:32:8c:6d:7e:d5:5b:bf:b8:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=7693fb30-92ca-4e73-8dd0-603780c4fa51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:0c:b4:be:df:47:e0:41:db:db:0e:3e:90:
                    a7:df:c0:fc:e8:45:b6:ec:57:82:47:48:ce:ef:fd:
                    79:7b:43:f5:22:1f:14:e0:66:37:55:9e:5a:1e:25:
                    13:82:7a:86:c9:52:97:f8:0b:ce:45:8c:fa:66:15:
                    06:93:b2:fd:2b:93:a6:0d:06:75:9a:a4:ed:00:77:
                    3e:86:c4:22:f5:00:83:46:c9:e8:7e:25:42:c1:5f:
                    06:e7:f7:55:c3:bf:d2:50:0d:8a:1d:27:05:f4:6e:
                    d1:6c:6c:60:1f:a7:67:a8:32:de:b6:f1:c5:d9:52:
                    71:3a:b4:4a:e6:c6:68:75:b8:12:42:01:f7:bb:aa:
                    ce:99:e5:9a:2b:8c:6f:00:a4:fc:3b:4b:34:78:8a:
                    3a:18:c9:e6:2c:e4:f2:ce:b3:86:f7:94:b0:c2:66:
                    d1:89:95:6d:5c:ec:9e:8a:7e:fc:2f:f3:9f:0d:f1:
                    a2:49:3c:ca:2c:d4:6b:3d:44:99:f9:1d:2f:52:e6:
                    f2:dc:5c:10:0a:08:aa:26:59:13:62:b0:df:12:62:
                    c9:c2:be:e0:2a:de:3a:3a:88:de:f0:93:6a:87:09:
                    07:39:5b:86:5c:dd:f9:26:59:77:6b:14:99:fe:09:
                    ab:81:1c:ce:3e:d0:fe:5a:c8:fe:53:e8:4b:9d:68:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:24:11:1A:7B:65:F4:16:DF:A1:BB:69:1F:88:AA:B5:64:60:DA:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26cbdb0e-75f4-34ec-9aad-cadff5de153b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:1c:37:bb:11:44:cb:de:e1:b1:40:25:c3:22:4d:98:77:32:
         47:45:5f:f6:14:a3:27:4d:a8:07:a4:73:6c:72:4a:33:67:86:
         49:f6:91:44:6e:66:ee:9c:1a:7c:fa:25:67:bf:6a:ad:bd:82:
         29:60:aa:33:3f:58:ad:13:f7:1f:e4:30:69:a2:b1:e8:48:f4:
         17:05:3f:a5:fa:3d:ae:a7:ae:1a:13:7e:dc:bc:9f:80:0d:04:
         6b:30:14:ab:ee:a9:93:2d:53:9b:2d:cb:89:7f:55:ab:2b:d2:
         fa:bd:d4:69:60:f6:aa:93:9b:6f:99:ee:53:65:e0:26:3a:bb:
         97:7b:d6:95:cf:32:7b:d7:4f:89:ac:f5:f7:6c:78:eb:09:52:
         90:c8:68:e8:04:68:e6:d2:0d:c1:bd:8e:76:fd:58:69:fe:b9:
         b8:10:64:46:c8:8a:7d:47:a0:c3:62:a8:97:7f:a3:ce:35:40:
         18:37:5e:6f:e2:8c:26:d2:bb:7f:3e:4b:1a:38:6d:c4:57:96:
         11:33:79:d1:23:ff:a6:68:26:fc:ce:74:71:cb:5e:2e:8e:75:
         29:ce:cb:4f:a5:8e:9c:97:43:6b:9b:7d:c4:8f:75:4b:73:4a:
         db:b1:cb:84:7e:33:87:0d:79:ec:8c:7e:81:24:c3:38:af:be:
         39:ca:47:27
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE57yjKMbX7VW7+4oMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk
NzY5M2ZiMzAtOTJjYS00ZTczLThkZDAtNjAzNzgwYzRmYTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaQMtL7fR+BB29sOPpCn38D86EW27FeCR0jO
7/15e0P1Ih8U4GY3VZ5aHiUTgnqGyVKX+AvORYz6ZhUGk7L9K5OmDQZ1mqTtAHc+
hsQi9QCDRsnofiVCwV8G5/dVw7/SUA2KHScF9G7RbGxgH6dnqDLetvHF2VJxOrRK
5sZodbgSQgH3u6rOmeWaK4xvAKT8O0s0eIo6GMnmLOTyzrOG95SwwmbRiZVtXOye
in78L/OfDfGiSTzKLNRrPUSZ+R0vUuby3FwQCgiqJlkTYrDfEmLJwr7gKt46Ooje
8JNqhwkHOVuGXN35Jll3axSZ/gmrgRzOPtD+Wsj+U+hLnWhUWwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCgkERp7ZfQW36G7aR+IqrVkYNo2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjZjYmRiMGUtNzVmNC0z
NGVjLTlhYWQtY2FkZmY1ZGUxNTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ0cN7sRRMve4bFAJcMiTZh3MkdFX/YUoydNqAekc2xySjNnhkn2
kURuZu6cGnz6JWe/aq29gilgqjM/WK0T9x/kMGmisehI9BcFP6X6Pa6nrhoTfty8
n4ANBGswFKvuqZMtU5sty4l/Vasr0vq91Glg9qqTm2+Z7lNl4CY6u5d71pXPMnvX
T4ms9fdseOsJUpDIaOgEaObSDcG9jnb9WGn+ubgQZEbIin1HoMNiqJd/o841QBg3
Xm/ijCbSu38+Sxo4bcRXlhEzedEj/6ZoJvzOdHHLXi6OdSnOy0+ljpyXQ2ubfcSP
dUtzStuxy4R+M4cNeeyMfoEkwzivvjnKRyc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:57:40 2026 by rpki-client