Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b166d32-42f5-3fb5-99e0-bf540d17449f.roa
File:                     4b166d32-42f5-3fb5-99e0-bf540d17449f.roa (raw, json)
Hash identifier:          GofDl80iu5eLSPX5eB6wva1brJ7mK5HEPJez/6zV1HQ=
Subject key identifier:   E6:A0:34:5E:A7:F0:ED:15:AF:D5:B6:A2:3A:DC:18:07:99:54:B6:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6C6F702AE4E9A9AB9EFDFC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b166d32-42f5-3fb5-99e0-bf540d17449f.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     396592
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:70:2a:e4:e9:a9:ab:9e:fd:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=90f632f0-528a-4fcd-912a-4fad4e42018d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:a2:97:c3:13:29:ef:37:b0:fc:4b:a6:2f:
                    0b:85:44:94:51:1c:74:3a:92:12:1f:3d:ec:54:3a:
                    b3:e2:13:43:dd:6f:bd:9d:fe:45:f5:6d:1e:da:49:
                    17:c1:42:84:28:06:e1:dd:7e:44:8b:86:77:3f:c2:
                    72:c4:b1:8f:0f:ac:c7:ac:d9:f5:6f:7e:2d:cb:c0:
                    7a:4e:b6:c9:50:04:3d:11:d2:12:bf:64:b8:fc:ed:
                    81:c9:eb:77:6a:c5:81:c0:64:d8:f0:a0:a5:ce:cc:
                    fb:e2:10:10:31:4a:7d:82:10:cc:7c:af:d4:fe:64:
                    f9:5a:52:24:44:a1:bf:6e:6c:94:14:fe:a4:b1:ae:
                    03:c9:43:5f:e3:0e:99:4b:05:2d:df:dc:42:88:9a:
                    d0:69:bb:49:b6:2d:d8:2f:2b:a8:91:95:75:17:a6:
                    0f:5b:14:7e:2c:b3:73:12:49:1a:4e:a7:b6:8d:92:
                    f2:5b:30:77:33:42:3b:31:a1:57:d3:1a:69:b9:aa:
                    d0:52:68:61:3a:33:ab:67:67:93:4b:a5:ae:b1:1d:
                    7c:ea:b9:80:7e:34:db:d3:01:29:cb:82:f5:89:50:
                    9f:36:2b:11:50:16:6a:9c:a9:14:5b:09:e9:d4:b2:
                    8d:51:23:2f:d7:07:bf:26:e3:92:77:15:36:ea:70:
                    dc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A0:34:5E:A7:F0:ED:15:AF:D5:B6:A2:3A:DC:18:07:99:54:B6:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b166d32-42f5-3fb5-99e0-bf540d17449f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:28:2e:9e:f2:ad:0b:71:81:f0:8d:cf:e4:f1:4c:b6:7b:18:
         e7:3a:8a:14:ee:a5:a8:e7:32:61:7d:83:72:08:3b:be:15:23:
         c9:2e:58:b6:e7:29:f6:a3:cb:d7:c1:a9:a3:6e:88:86:8e:58:
         08:13:03:1b:23:01:cf:47:2e:20:4a:3a:a5:26:15:06:05:76:
         71:72:71:38:49:c4:ab:95:3e:86:4f:8c:e9:16:c2:90:fd:42:
         1b:2d:00:14:4c:5c:36:dd:2b:81:98:fa:03:8f:63:a6:9f:c5:
         6a:cc:82:7f:0f:5e:9d:85:7e:43:f6:73:b8:32:6a:70:63:26:
         a1:ab:89:05:ab:57:c9:9a:a6:52:16:6d:1e:63:31:7c:74:6d:
         c2:4d:c3:7e:d6:cc:d1:6f:fd:0c:9e:b3:c7:7e:30:15:7d:d9:
         da:cc:20:10:6f:26:ff:7b:e8:6f:9d:dd:14:4e:21:43:e8:84:
         5b:1f:0b:9f:07:0a:67:4a:43:79:10:cd:0f:5f:fe:59:cb:b2:
         21:a5:2a:c6:d9:0a:b3:56:9a:09:fd:fa:b1:ca:54:95:61:ed:
         00:9c:ce:2e:d4:fd:18:f1:d9:1b:b7:fe:34:da:aa:ab:a1:f4:
         26:d9:23:f3:8c:09:b1:2e:f5:df:4d:fe:82:98:35:64:5f:ae:
         54:41:ba:bd
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5sb3Aq5Ompq579/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk
OTBmNjMyZjAtNTI4YS00ZmNkLTkxMmEtNGZhZDRlNDIwMThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dKil8MTKe83sPxLpi8LhUSUURx0OpISHz3s
VDqz4hND3W+9nf5F9W0e2kkXwUKEKAbh3X5Ei4Z3P8JyxLGPD6zHrNn1b34ty8B6
TrbJUAQ9EdISv2S4/O2Byet3asWBwGTY8KClzsz74hAQMUp9ghDMfK/U/mT5WlIk
RKG/bmyUFP6ksa4DyUNf4w6ZSwUt39xCiJrQabtJti3YLyuokZV1F6YPWxR+LLNz
EkkaTqe2jZLyWzB3M0I7MaFX0xppuarQUmhhOjOrZ2eTS6WusR186rmAfjTb0wEp
y4L1iVCfNisRUBZqnKkUWwnp1LKNUSMv1we/JuOSdxU26nDcyQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOagNF6n8O0Vr9W2ojrcGAeZVLYDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGIxNjZkMzItNDJmNS0z
ZmI1LTk5ZTAtYmY1NDBkMTc0NDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC6KC6e8q0LcYHwjc/k8Uy2exjnOooU7qWo5zJh
fYNyCDu+FSPJLli25yn2o8vXwamjboiGjlgIEwMbIwHPRy4gSjqlJhUGBXZxcnE4
ScSrlT6GT4zpFsKQ/UIbLQAUTFw23SuBmPoDj2Omn8VqzIJ/D16dhX5D9nO4Mmpw
Yyahq4kFq1fJmqZSFm0eYzF8dG3CTcN+1szRb/0MnrPHfjAVfdnazCAQbyb/e+hv
nd0UTiFD6IRbHwufBwpnSkN5EM0PX/5Zy7IhpSrG2QqzVpoJ/fqxylSVYe0AnM4u
1P0Y8dkbt/402qqrofQm2SPzjAmxLvXfTf6CmDVkX65UQbq9
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:40:10 2026 by rpki-client