Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36db3a37-3c69-3146-ab84-6135cf19ca68.roa
File:                     36db3a37-3c69-3146-ab84-6135cf19ca68.roa (raw, json)
Hash identifier:          XDKff0eipwUS1cWIDENMm2mZxKa2OFpt9RuWhNIR7ag=
Subject key identifier:   85:B9:45:5B:17:AE:B4:28:92:1D:AD:15:70:01:94:1B:3C:2B:F1:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FB9B809375CD7F9701210
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36db3a37-3c69-3146-ab84-6135cf19ca68.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     25485
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:b9:b8:09:37:5c:d7:f9:70:12:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=8a857270-780c-4f26-81ee-b56691c3c2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:08:cc:db:b8:8a:bf:71:ed:4b:b7:0b:a5:c7:
                    25:5d:97:f9:d2:bc:3d:2f:71:f0:c5:5e:c0:50:40:
                    86:28:35:5a:5d:1c:d4:0a:04:b9:80:1a:77:24:af:
                    fd:4f:58:b9:16:73:76:d1:5b:67:39:2b:9e:b0:ea:
                    cd:ad:38:d9:17:13:4f:7b:df:ff:c0:b1:6f:9a:9d:
                    6c:01:22:e3:01:32:34:39:3b:7d:44:96:4e:d6:64:
                    71:18:92:c4:75:ff:c2:69:fd:64:a0:27:a2:ae:97:
                    f7:21:a9:6b:b3:cc:13:8f:0c:1d:eb:4e:93:09:27:
                    fe:1d:53:32:93:73:55:4f:8d:d0:a7:6f:4d:38:b7:
                    dc:5b:e4:d7:44:ba:38:4e:b3:21:d1:21:ab:99:69:
                    2a:26:64:81:29:1f:99:2d:4f:79:b1:ab:b3:ef:15:
                    2f:47:08:24:fb:e8:7f:d9:ef:d7:0b:98:de:06:67:
                    6e:c3:cc:05:57:1d:a2:a9:7a:85:48:c9:b0:c9:7e:
                    3d:b3:57:47:c6:d1:7d:89:d4:e9:73:b7:25:82:e5:
                    eb:1a:96:d3:64:c1:6e:4c:c8:fa:3e:0a:8d:63:bd:
                    70:f4:0d:2d:ca:85:e3:ed:0b:36:39:42:f7:40:22:
                    c6:2d:87:20:09:13:45:12:61:fd:e3:17:0b:0e:7a:
                    52:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B9:45:5B:17:AE:B4:28:92:1D:AD:15:70:01:94:1B:3C:2B:F1:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36db3a37-3c69-3146-ab84-6135cf19ca68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c3:6a:72:88:0a:ad:ce:eb:91:09:f0:3c:1e:4d:f3:72:1d:
         c9:12:a5:5b:72:93:3a:b2:e1:26:97:b8:6e:c0:64:50:29:83:
         bc:5d:1f:39:dc:1e:89:d7:81:d5:ba:d8:06:fc:4c:49:b1:5a:
         16:35:91:ab:ac:3b:c2:05:10:25:54:8d:b4:e4:4f:98:b2:49:
         d0:8f:da:b1:d8:ad:0b:9c:39:66:ee:4e:81:df:20:12:0c:55:
         1b:81:bb:18:fb:7c:71:38:2f:41:8f:ad:d9:7c:f6:14:6a:5d:
         fa:36:73:13:a3:99:1c:fb:cd:36:04:50:9f:12:c5:ab:95:79:
         48:31:c5:41:04:30:9a:a6:7c:d7:b4:06:5e:47:ac:33:ab:ec:
         d2:9c:02:d9:30:a7:80:c5:b2:91:a5:ba:b8:5b:38:35:d2:1b:
         dc:f4:26:e1:fa:69:43:18:18:d6:e6:e0:9e:1b:7e:83:c9:7f:
         e1:40:07:86:1c:e5:10:3b:4f:52:7c:82:f1:3f:2b:f0:33:24:
         38:85:0b:61:45:a5:cf:29:6c:b3:a0:8f:b4:ec:3f:3a:fe:2f:
         9b:fe:e9:eb:71:06:f2:4e:d9:f6:ea:79:9a:11:b2:d5:d2:e5:
         4c:e3:88:88:f7:66:c9:73:dc:89:82:49:62:84:3b:c2:89:75:
         3e:de:11:cf
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5kD7m4CTdc1/lwEhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
OGE4NTcyNzAtNzgwYy00ZjI2LTgxZWUtYjU2NjkxYzNjMmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgjM27iKv3HtS7cLpcclXZf50rw9L3HwxV7A
UECGKDVaXRzUCgS5gBp3JK/9T1i5FnN20VtnOSuesOrNrTjZFxNPe9//wLFvmp1s
ASLjATI0OTt9RJZO1mRxGJLEdf/Caf1koCeirpf3Ialrs8wTjwwd606TCSf+HVMy
k3NVT43Qp29NOLfcW+TXRLo4TrMh0SGrmWkqJmSBKR+ZLU95sauz7xUvRwgk++h/
2e/XC5jeBmduw8wFVx2iqXqFSMmwyX49s1dHxtF9idTpc7clguXrGpbTZMFuTMj6
PgqNY71w9A0tyoXj7Qs2OUL3QCLGLYcgCRNFEmH94xcLDnpS1wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFIW5RVsXrrQokh2tFXABlBs8K/HyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzZkYjNhMzctM2M2OS0z
MTQ2LWFiODQtNjEzNWNmMTljYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAlw2pyiAqtzuuRCfA8Hk3zch3JEqVbcpM6suEm
l7huwGRQKYO8XR853B6J14HVutgG/ExJsVoWNZGrrDvCBRAlVI205E+YsknQj9qx
2K0LnDlm7k6B3yASDFUbgbsY+3xxOC9Bj63ZfPYUal36NnMTo5kc+802BFCfEsWr
lXlIMcVBBDCapnzXtAZeR6wzq+zSnALZMKeAxbKRpbq4Wzg10hvc9Cbh+mlDGBjW
5uCeG36DyX/hQAeGHOUQO09SfILxPyvwMyQ4hQthRaXPKWyzoI+07D86/i+b/unr
cQbyTtn26nmaEbLV0uVM44iI92bJc9yJgklihDvCiXU+3hHP
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:22:51 2026 by rpki-client