Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4689354c-4bef-3113-8a9d-c73047cf17fe.roa
File:                     4689354c-4bef-3113-8a9d-c73047cf17fe.roa (raw, json)
Hash identifier:          7FsoS30C8McJsF6UaNjX7Ra2NgFrjnGwZeqqluFDcjs=
Subject key identifier:   02:EB:60:26:42:6C:2D:76:7E:E7:66:FB:19:D5:24:03:50:6E:5D:86
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A64F0496FED2600917ABA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4689354c-4bef-3113-8a9d-c73047cf17fe.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     396610
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:f0:49:6f:ed:26:00:91:7a:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=7c282321-c84e-4e5e-983e-de8cd295ea4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:99:9e:64:7d:5a:53:98:d7:8f:39:9f:63:
                    c3:fd:f0:66:4a:2f:93:c4:1a:a9:c8:2e:68:0f:69:
                    5a:7b:2e:ca:da:66:68:fd:30:31:cd:10:ac:b7:92:
                    25:cb:59:08:77:d4:8b:04:cf:cf:8f:70:0c:ca:12:
                    5d:d2:75:aa:7d:95:8a:4c:e8:5f:64:88:70:7a:0e:
                    98:fb:7e:e2:72:28:02:db:31:af:f8:d3:99:a4:dc:
                    29:38:ce:12:58:1f:39:50:4a:16:04:2a:38:ed:44:
                    89:ac:5c:6f:2d:1a:ae:ce:7d:cb:3c:6a:1d:29:bd:
                    01:07:60:10:0e:9c:bf:71:da:70:4e:f3:3a:5e:b2:
                    d0:6d:52:67:a5:29:e1:59:8e:9d:df:01:34:ac:32:
                    5e:e9:dd:f2:10:86:9e:1f:8e:f9:36:7f:20:87:a1:
                    26:bf:3e:4a:28:c2:7a:38:08:f1:f2:36:bd:8e:0d:
                    b1:ed:88:0f:d3:59:1f:0a:cf:e2:e7:e2:56:5f:40:
                    6d:fd:31:61:51:ee:84:7a:e9:0e:5a:ec:df:2d:3e:
                    ce:77:b3:07:0b:40:39:71:b7:71:17:21:4f:f5:84:
                    bc:6f:eb:c5:71:f1:50:0f:39:65:1a:23:41:38:cc:
                    5f:40:7b:12:76:ae:4f:48:56:d7:c6:f0:dd:12:1e:
                    de:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EB:60:26:42:6C:2D:76:7E:E7:66:FB:19:D5:24:03:50:6E:5D:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4689354c-4bef-3113-8a9d-c73047cf17fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:31:80:a3:b2:45:92:61:95:56:7f:8d:cb:7b:ee:8f:7e:55:
         82:4b:d5:be:91:bd:df:49:62:cb:13:38:17:b4:4c:1b:5f:60:
         08:45:d3:aa:be:08:ed:00:0d:ec:17:85:77:75:36:c4:92:71:
         74:30:9b:b7:94:bc:ed:98:64:cd:87:f3:24:60:7e:14:97:14:
         64:1d:3e:f9:88:5e:8e:21:2a:ff:c9:32:ac:6b:b4:f7:6e:3b:
         b9:bb:38:d3:a4:76:87:65:47:2b:be:04:17:b1:f5:e5:9c:c2:
         27:4c:c5:15:4c:80:0c:5a:f4:50:9a:4a:5b:6c:90:4c:4f:17:
         0e:5e:25:84:81:81:76:ea:fc:39:c0:ef:3c:a5:27:73:2a:00:
         b7:56:ac:c7:e7:c4:f6:af:16:a2:0b:38:61:03:01:d5:b6:6e:
         07:4e:7b:f8:e6:bb:e7:be:4a:59:97:2f:c4:9e:48:7b:e5:9b:
         97:71:1f:86:7a:09:c7:a1:db:0c:88:8a:40:70:ef:21:b5:79:
         50:fd:68:b9:3d:b9:12:d1:cc:66:b5:9a:fd:37:2e:61:a0:0c:
         44:c9:d3:4e:8d:0a:2a:b7:c0:1e:50:30:ba:58:41:cc:41:6c:
         67:88:96:a3:ca:b1:f7:b2:86:08:16:22:e9:a0:45:83:77:18:
         e9:7d:6d:94
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE56ZPBJb+0mAJF6ugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
N2MyODIzMjEtYzg0ZS00ZTVlLTk4M2UtZGU4Y2QyOTVlYTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDKZnmR9WlOY1485n2PD/fBmSi+TxBqpyC5o
D2laey7K2mZo/TAxzRCst5Ily1kId9SLBM/Pj3AMyhJd0nWqfZWKTOhfZIhweg6Y
+37icigC2zGv+NOZpNwpOM4SWB85UEoWBCo47USJrFxvLRquzn3LPGodKb0BB2AQ
Dpy/cdpwTvM6XrLQbVJnpSnhWY6d3wE0rDJe6d3yEIaeH475Nn8gh6Emvz5KKMJ6
OAjx8ja9jg2x7YgP01kfCs/i5+JWX0Bt/TFhUe6EeukOWuzfLT7Od7MHC0A5cbdx
FyFP9YS8b+vFcfFQDzllGiNBOMxfQHsSdq5PSFbXxvDdEh7eLwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFALrYCZCbC12fudm+xnVJANQbl2GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDY4OTM1NGMtNGJlZi0z
MTEzLThhOWQtYzczMDQ3Y2YxN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA/MYCjskWSYZVWf43Le+6PflWCS9W+kb3fSWLL
EzgXtEwbX2AIRdOqvgjtAA3sF4V3dTbEknF0MJu3lLztmGTNh/MkYH4UlxRkHT75
iF6OISr/yTKsa7T3bju5uzjTpHaHZUcrvgQXsfXlnMInTMUVTIAMWvRQmkpbbJBM
TxcOXiWEgYF26vw5wO88pSdzKgC3VqzH58T2rxaiCzhhAwHVtm4HTnv45rvnvkpZ
ly/Enkh75ZuXcR+GegnHodsMiIpAcO8htXlQ/Wi5PbkS0cxmtZr9Ny5hoAxEydNO
jQoqt8AeUDC6WEHMQWxniJajyrH3soYIFiLpoEWDdxjpfW2U
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:10 2026 by rpki-client