Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40f11ea5-292f-31aa-af3c-6b9eeef1babc.roa
File:                     40f11ea5-292f-31aa-af3c-6b9eeef1babc.roa (raw, json)
Hash identifier:          ICKP+xCVSRbNiGw5RDLLW/afGC+9IgqPfMW7qmWI2Gs=
Subject key identifier:   6A:0C:BD:09:3A:46:61:38:B6:51:FC:12:C3:72:2F:99:0D:3C:9C:9C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A64EF73CE5EDAAAC03AB116
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40f11ea5-292f-31aa-af3c-6b9eeef1babc.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     211369
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:ef:73:ce:5e:da:aa:c0:3a:b1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=ddc4eaf1-9021-424e-87f2-f44116f62978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:1d:e2:7c:a8:72:e3:9f:08:fe:98:b1:f7:
                    15:a4:8b:83:60:b7:12:00:9a:4c:2b:37:4e:80:37:
                    ee:85:aa:45:e6:05:5d:89:7a:17:dc:1f:fb:24:fa:
                    55:0e:cf:77:58:eb:b3:78:0e:e8:af:5c:a6:bc:5f:
                    3c:a8:26:9d:33:84:d9:bc:2b:54:3f:aa:32:6d:56:
                    57:8a:6d:a8:2f:c6:f7:50:68:73:96:af:ff:c7:d0:
                    0d:c5:33:01:fe:1c:63:10:6a:e5:6a:38:f9:b9:3b:
                    eb:57:f3:80:c3:d0:11:a5:10:1d:c0:4f:ef:ff:aa:
                    71:1a:2b:16:9a:57:38:b9:7c:ca:15:72:b5:4e:d9:
                    e4:e7:8c:92:e1:03:ac:6a:b3:72:b7:3c:bb:0f:85:
                    b1:52:35:8d:65:80:0e:09:b2:77:2a:af:b6:b0:4a:
                    fa:c9:3f:4c:f4:aa:9d:89:ae:d6:57:61:be:c4:94:
                    9f:92:cd:ac:a2:93:c4:7f:b2:f6:03:e5:72:fa:45:
                    8b:27:34:7d:5f:fa:09:5f:2f:10:55:cf:40:bc:1c:
                    db:5b:98:23:03:ff:74:70:0b:f0:79:92:c8:18:57:
                    ad:f9:a7:06:ee:90:01:ba:07:dd:51:7a:82:0e:e9:
                    cd:74:18:16:ed:12:97:cc:97:61:c3:0a:78:65:85:
                    18:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0C:BD:09:3A:46:61:38:B6:51:FC:12:C3:72:2F:99:0D:3C:9C:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40f11ea5-292f-31aa-af3c-6b9eeef1babc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:68:4e:c8:ba:0f:83:13:51:49:e8:ee:ab:2a:af:fd:94:6d:
         e5:43:66:37:9e:7c:31:a5:80:fd:7c:12:df:fb:9e:14:01:96:
         88:13:12:18:f3:5b:6d:e7:fb:9d:70:85:e3:ad:e5:cb:47:9c:
         66:f5:6a:9c:d9:75:be:e8:71:2f:a9:40:18:3a:8a:48:3a:66:
         99:23:06:d8:26:f8:91:1b:90:2b:10:cb:84:b0:87:37:1e:e6:
         45:b8:91:18:4b:a9:dd:33:62:00:2e:83:2e:d2:19:24:2d:8b:
         ee:92:c1:93:84:2b:55:cf:8c:0a:1c:3a:4e:ed:02:4f:17:48:
         1d:59:6e:bd:fb:ff:92:7d:59:d5:c8:17:27:65:16:32:17:c4:
         38:e9:2a:05:49:21:92:77:e6:c8:1d:18:d0:ef:e0:40:1b:f0:
         b6:88:23:6d:7c:93:a6:78:3b:87:04:41:c4:02:70:f4:7b:ae:
         86:af:e8:67:70:87:60:6b:4c:9a:1d:80:ce:7c:4f:63:d7:eb:
         71:51:3f:cc:6b:43:a2:a7:53:4c:32:76:a2:c1:97:ec:96:d3:
         a3:6b:12:9d:3b:a0:5a:c4:47:23:d1:c8:fc:f3:d8:73:82:3a:
         03:08:33:4b:e8:eb:52:b0:f1:f9:7c:f2:8a:52:bc:45:1d:2c:
         a3:7b:95:f5
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE56ZO9zzl7aqsA6sRYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
ZGRjNGVhZjEtOTAyMS00MjRlLTg3ZjItZjQ0MTE2ZjYyOTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntcd4nyocuOfCP6YsfcVpIuDYLcSAJpMKzdO
gDfuhapF5gVdiXoX3B/7JPpVDs93WOuzeA7or1ymvF88qCadM4TZvCtUP6oybVZX
im2oL8b3UGhzlq//x9ANxTMB/hxjEGrlajj5uTvrV/OAw9ARpRAdwE/v/6pxGisW
mlc4uXzKFXK1Ttnk54yS4QOsarNytzy7D4WxUjWNZYAOCbJ3Kq+2sEr6yT9M9Kqd
ia7WV2G+xJSfks2sopPEf7L2A+Vy+kWLJzR9X/oJXy8QVc9AvBzbW5gjA/90cAvw
eZLIGFet+acG7pABugfdUXqCDunNdBgW7RKXzJdhwwp4ZYUY/wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGoMvQk6RmE4tlH8EsNyL5kNPJycMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDBmMTFlYTUtMjkyZi0z
MWFhLWFmM2MtNmI5ZWVlZjFiYWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAQaE7Iug+DE1FJ6O6rKq/9lG3lQ2Y3nnwxpYD9
fBLf+54UAZaIExIY81tt5/udcIXjreXLR5xm9Wqc2XW+6HEvqUAYOopIOmaZIwbY
JviRG5ArEMuEsIc3HuZFuJEYS6ndM2IALoMu0hkkLYvuksGThCtVz4wKHDpO7QJP
F0gdWW69+/+SfVnVyBcnZRYyF8Q46SoFSSGSd+bIHRjQ7+BAG/C2iCNtfJOmeDuH
BEHEAnD0e66Gr+hncIdga0yaHYDOfE9j1+txUT/Ma0Oip1NMMnaiwZfsltOjaxKd
O6BaxEcj0cj889hzgjoDCDNL6OtSsPH5fPKKUrxFHSyje5X1
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:53:12 2026 by rpki-client