Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4267f739-a2d2-3313-a9b4-dab041918248.roa
File:                     4267f739-a2d2-3313-a9b4-dab041918248.roa (raw, json)
Hash identifier:          Zz2LKkxBoY/kOm+usy5gKQcQR+U0W+f0O2x1+FX9o2k=
Subject key identifier:   38:56:B1:32:76:F3:D3:40:62:0B:A1:C2:82:B6:16:91:0D:8F:C0:16
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FA814604212317A985380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4267f739-a2d2-3313-a9b4-dab041918248.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396574
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:a8:14:60:42:12:31:7a:98:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=2459e37d-ac32-404e-ab64-8275edfc73ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:03:d2:65:5e:de:f8:d9:32:a9:96:8d:4d:4e:
                    92:db:7c:de:0d:8a:a6:ef:74:cf:a7:82:61:2c:aa:
                    39:34:ac:8b:dc:b4:2f:c0:b3:ff:3c:58:a8:ff:71:
                    c2:df:f7:92:97:36:39:d2:f8:8c:0e:8d:c2:a6:56:
                    03:8b:3e:8b:4b:eb:d0:bd:56:f0:c7:91:19:7e:d2:
                    92:7f:8e:ee:96:dd:84:18:f1:ff:89:67:ef:13:cd:
                    41:7e:c9:19:77:0f:f3:04:8b:85:29:27:ac:a8:9d:
                    52:83:42:9a:4c:f1:01:7e:02:b5:29:38:ea:d4:ef:
                    22:06:bb:2c:66:3a:7d:7c:e1:91:c9:cc:8c:2c:73:
                    01:83:5b:e4:7f:de:5b:10:f6:5d:2f:a1:a8:0c:68:
                    22:96:6c:b1:5a:ce:8f:2a:91:d9:47:41:9b:bb:f7:
                    56:c4:30:b2:11:3c:a7:db:6f:3e:1a:ae:91:26:f7:
                    f9:18:8e:2a:3a:2c:69:a9:ae:31:e5:76:cc:44:3c:
                    60:cc:e3:49:28:24:4b:b1:57:0c:58:71:53:8d:1e:
                    65:ac:bc:6f:64:b6:7a:48:63:ef:8c:93:25:93:de:
                    6c:53:fd:6c:38:fe:4b:cd:b6:3c:89:bd:ca:4c:18:
                    0b:14:87:f6:18:90:22:80:ce:ad:91:6f:5c:0f:55:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:56:B1:32:76:F3:D3:40:62:0B:A1:C2:82:B6:16:91:0D:8F:C0:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4267f739-a2d2-3313-a9b4-dab041918248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:88:6a:a5:95:0d:fa:04:bd:05:20:53:fe:5e:15:f8:54:ca:
         aa:9e:d2:f1:28:d1:6d:da:ff:07:58:1b:3b:1e:49:85:c1:b5:
         8d:c5:d1:40:41:9d:09:eb:e7:4d:17:c5:c3:37:23:a8:81:4f:
         e0:ed:8a:32:9b:2f:b2:93:ab:79:55:ef:18:97:e9:d0:a8:f7:
         f8:49:44:b3:43:14:73:74:84:c6:87:8e:47:f9:fe:a9:19:38:
         8a:22:71:81:d3:91:aa:ce:44:0b:07:0a:11:ef:5e:b9:97:13:
         cb:a1:c2:4a:c0:f6:5e:38:34:a9:24:94:d3:d6:7e:cb:a7:33:
         b3:75:09:43:7e:11:68:bf:82:98:df:cb:c9:ea:4e:3f:58:2a:
         34:eb:1b:31:27:ad:18:73:2e:f2:54:6f:c2:fc:e6:8e:3d:df:
         46:64:30:5e:62:34:d2:ed:0a:1c:b1:15:6d:40:7c:d2:71:75:
         bb:a5:05:b4:71:74:0e:23:ce:ac:e0:2a:ab:4d:f3:5c:33:31:
         bf:ed:8a:1e:8d:a0:22:28:ab:20:62:7e:76:eb:6b:8a:ad:bb:
         db:82:b6:99:cc:b8:92:da:89:e7:25:af:bb:61:ab:90:2d:eb:
         27:10:47:c4:ac:ec:c6:2e:d7:37:58:12:88:31:1c:db:6f:32:
         93:09:e8:6e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5kD6gUYEISMXqYU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
MjQ1OWUzN2QtYWMzMi00MDRlLWFiNjQtODI3NWVkZmM3M2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwPSZV7e+NkyqZaNTU6S23zeDYqm73TPp4Jh
LKo5NKyL3LQvwLP/PFio/3HC3/eSlzY50viMDo3CplYDiz6LS+vQvVbwx5EZftKS
f47ult2EGPH/iWfvE81BfskZdw/zBIuFKSesqJ1Sg0KaTPEBfgK1KTjq1O8iBrss
Zjp9fOGRycyMLHMBg1vkf95bEPZdL6GoDGgilmyxWs6PKpHZR0Gbu/dWxDCyETyn
228+Gq6RJvf5GI4qOixpqa4x5XbMRDxgzONJKCRLsVcMWHFTjR5lrLxvZLZ6SGPv
jJMlk95sU/1sOP5LzbY8ib3KTBgLFIf2GJAigM6tkW9cD1VhOwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDhWsTJ289NAYguhwoK2FpENj8AWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDI2N2Y3MzktYTJkMi0z
MzEzLWE5YjQtZGFiMDQxOTE4MjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB5iGqllQ36BL0FIFP+XhX4VMqqntLxKNFt2v8H
WBs7HkmFwbWNxdFAQZ0J6+dNF8XDNyOogU/g7Yoymy+yk6t5Ve8Yl+nQqPf4SUSz
QxRzdITGh45H+f6pGTiKInGB05GqzkQLBwoR7165lxPLocJKwPZeODSpJJTT1n7L
pzOzdQlDfhFov4KY38vJ6k4/WCo06xsxJ60Ycy7yVG/C/OaOPd9GZDBeYjTS7Qoc
sRVtQHzScXW7pQW0cXQOI86s4CqrTfNcMzG/7YoejaAiKKsgYn5262uKrbvbgraZ
zLiS2onnJa+7YauQLesnEEfErOzGLtc3WBKIMRzbbzKTCehu
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:04:21 2026 by rpki-client