Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/418e445a-ba6e-3c70-a310-f6b6d23d1c9b.roa
File:                     418e445a-ba6e-3c70-a310-f6b6d23d1c9b.roa (raw, json)
Hash identifier:          cG2nGWdzDIPj+SfNfikNsRobt5r5mTnKIEUMaY9eIHY=
Subject key identifier:   AB:A3:8B:04:55:08:29:5E:BB:E2:5F:C3:AD:12:0D:E3:16:6D:71:82
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FB04167815BE4F23F2900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/418e445a-ba6e-3c70-a310-f6b6d23d1c9b.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     397206
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:b0:41:67:81:5b:e4:f2:3f:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=c90fa5ad-3627-467f-b881-9385b9a93d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:16:3c:83:d0:b5:37:b8:fb:e5:96:27:3d:a9:
                    7a:e8:27:2e:d6:bd:9a:a9:d2:25:9f:51:b4:a9:3a:
                    3f:76:c0:b2:80:2d:ce:a1:f8:43:11:d2:31:e7:33:
                    f1:dd:aa:9b:39:8a:96:f5:1c:19:c8:d4:0a:ce:a7:
                    6f:31:5f:4d:16:17:2c:f6:fc:d5:52:2d:a8:fc:17:
                    77:bc:7b:c9:fa:04:b4:47:f4:fe:4b:33:9e:ad:08:
                    d4:2c:25:7b:b1:07:ef:2e:d8:c9:18:ac:f0:9e:a0:
                    f1:9d:fd:1f:33:13:76:66:5b:3a:77:7a:b0:8e:b8:
                    dc:1f:a5:d3:33:bc:b8:c0:2e:87:31:60:f1:00:e5:
                    27:52:1a:a3:48:61:44:68:9e:4d:d9:1d:fb:79:7d:
                    70:6d:5c:43:68:a9:77:82:b1:0f:f4:89:bb:f0:bb:
                    2b:af:c3:b0:6e:d9:2f:6c:8e:56:66:68:7d:48:d2:
                    d8:71:26:7b:c7:72:61:14:76:6e:f7:b0:fa:fe:9a:
                    13:27:7b:ef:ac:a4:28:3f:96:72:6b:a0:12:06:a8:
                    c4:da:db:96:5a:e5:79:63:8b:c7:fd:04:6b:43:89:
                    bb:9b:ab:f5:47:4d:f7:31:07:1b:42:3a:ff:85:aa:
                    12:1c:cf:ea:3e:90:85:b1:91:cb:a1:43:58:95:1e:
                    90:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A3:8B:04:55:08:29:5E:BB:E2:5F:C3:AD:12:0D:E3:16:6D:71:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/418e445a-ba6e-3c70-a310-f6b6d23d1c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:31:4f:e7:22:0a:5b:4e:db:58:cd:b6:45:80:58:f4:ae:e8:
         08:37:ed:16:15:4a:d4:da:05:1a:37:75:3e:d8:4c:66:e4:bf:
         52:9f:95:0d:42:77:69:f9:78:b4:6f:78:d6:8a:c1:fb:f9:cf:
         fc:6b:9a:98:9f:3e:91:cb:b9:98:69:9a:4c:f9:76:1a:74:c7:
         03:1b:60:eb:69:a3:82:a7:1c:52:d4:29:be:e4:bb:dc:aa:81:
         35:74:83:b0:74:92:15:fe:07:18:c8:11:70:8a:cd:12:88:2f:
         df:63:88:f6:04:96:90:0f:71:66:6d:0a:b9:06:fd:37:d6:03:
         58:b1:fd:1f:7d:6d:bc:2b:c8:c8:29:0e:24:d5:83:fe:88:67:
         a9:b2:a4:1c:8a:47:11:3c:35:90:b9:1e:a3:35:c1:ed:f0:8b:
         11:73:0b:1c:fc:e9:ab:a8:e2:65:9b:5a:e5:f4:7e:5e:8b:b9:
         92:8a:83:07:e4:0f:f3:a8:8c:85:33:d8:c5:9f:20:e8:07:01:
         70:8c:b9:3d:02:bf:fe:ff:cd:e8:93:16:51:66:8e:db:59:16:
         c5:31:a8:55:8a:71:54:7a:d8:56:a7:db:4b:d5:fc:9c:92:ee:
         59:c3:90:68:13:4b:a6:c8:2f:aa:a2:4e:c1:f7:12:d4:9a:f1:
         f2:f0:a9:b7
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5kD7BBZ4Fb5PI/KQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
YzkwZmE1YWQtMzYyNy00NjdmLWI4ODEtOTM4NWI5YTkzZDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRY8g9C1N7j75ZYnPal66Ccu1r2aqdIln1G0
qTo/dsCygC3OofhDEdIx5zPx3aqbOYqW9RwZyNQKzqdvMV9NFhcs9vzVUi2o/Bd3
vHvJ+gS0R/T+SzOerQjULCV7sQfvLtjJGKzwnqDxnf0fMxN2Zls6d3qwjrjcH6XT
M7y4wC6HMWDxAOUnUhqjSGFEaJ5N2R37eX1wbVxDaKl3grEP9Im78Lsrr8Owbtkv
bI5WZmh9SNLYcSZ7x3JhFHZu97D6/poTJ3vvrKQoP5Zya6ASBqjE2tuWWuV5Y4vH
/QRrQ4m7m6v1R033MQcbQjr/haoSHM/qPpCFsZHLoUNYlR6Q+wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKujiwRVCCleu+Jfw60SDeMWbXGCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDE4ZTQ0NWEtYmE2ZS0z
YzcwLWEzMTAtZjZiNmQyM2QxYzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBJMU/nIgpbTttYzbZFgFj0rugIN+0WFUrU2gUa
N3U+2Exm5L9Sn5UNQndp+Xi0b3jWisH7+c/8a5qYnz6Ry7mYaZpM+XYadMcDG2Dr
aaOCpxxS1Cm+5LvcqoE1dIOwdJIV/gcYyBFwis0SiC/fY4j2BJaQD3FmbQq5Bv03
1gNYsf0ffW28K8jIKQ4k1YP+iGepsqQcikcRPDWQuR6jNcHt8IsRcwsc/OmrqOJl
m1rl9H5ei7mSioMH5A/zqIyFM9jFnyDoBwFwjLk9Ar/+/83okxZRZo7bWRbFMahV
inFUethWp9tL1fycku5Zw5BoE0umyC+qok7B9xLUmvHy8Km3
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:54:07 2026 by rpki-client