Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f7cf2b9-ab89-3317-8641-b8ea50cede49.roa
File:                     4f7cf2b9-ab89-3317-8641-b8ea50cede49.roa (raw, json)
Hash identifier:          ke+8PAf8ktYAp1tNzOB+0yvVR4j7QDAQ0coaRqmMr5M=
Subject key identifier:   E7:E8:24:FF:7F:89:06:B6:D7:7A:56:DE:69:B2:2C:0C:1F:20:E4:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF5B213B0FE29DFB082064338
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f7cf2b9-ab89-3317-8641-b8ea50cede49.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     397206
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:13:b0:fe:29:df:b0:82:06:43:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=cacb5b03-7c5d-459c-81a3-0aae9dd63956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1c:e8:8f:a5:98:cf:f2:34:06:fa:07:f5:29:
                    ae:7e:4e:c8:bc:3c:48:c1:36:a1:12:fd:d9:da:86:
                    3c:6a:64:8f:5a:2c:4e:fa:91:e4:82:a1:94:93:6c:
                    af:8e:24:8d:59:b8:2a:e6:8a:b1:f3:35:1b:b4:0c:
                    90:4e:9b:f1:45:98:20:ce:94:e1:94:e8:60:75:53:
                    93:81:57:08:5b:81:95:b1:4a:7d:f2:61:6f:29:f7:
                    66:1b:fb:05:ef:a4:28:94:19:da:4e:d1:4e:1c:33:
                    86:9c:71:54:e4:1e:46:08:38:04:8a:02:e5:22:fb:
                    7b:95:8c:3a:e0:ad:5a:1a:56:36:ff:d0:e7:b5:b0:
                    59:f3:9f:c2:68:eb:d0:07:6f:da:f3:7c:71:7f:d5:
                    79:97:1b:a0:32:97:f7:54:6a:de:31:39:ec:85:a8:
                    a8:c9:e3:1b:b4:82:75:f1:62:55:61:fa:2c:7c:23:
                    90:3e:b6:b0:42:6e:a4:ad:46:89:85:d3:a0:f1:0d:
                    fa:0f:2d:ca:1e:00:c1:17:1d:19:88:92:f7:d8:81:
                    aa:68:2a:37:0a:51:67:2d:47:e2:87:61:27:86:86:
                    99:73:46:02:a7:10:8d:b2:38:34:b1:1a:3e:f7:1c:
                    97:18:88:77:63:c5:f2:7b:8e:ab:3d:fc:1c:45:5c:
                    3b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E8:24:FF:7F:89:06:B6:D7:7A:56:DE:69:B2:2C:0C:1F:20:E4:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f7cf2b9-ab89-3317-8641-b8ea50cede49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a7:fb:17:63:e3:94:d4:49:81:51:05:77:50:02:67:59:f2:
         14:d7:fe:62:cd:05:46:c8:78:fe:44:f5:fd:17:ac:91:2e:42:
         58:75:fc:4f:6e:b3:fa:9d:cc:f4:7f:8c:91:fd:ad:f3:57:e8:
         85:95:7d:f2:2d:20:59:96:2f:41:34:c5:ec:02:d0:75:49:f2:
         bd:af:82:85:ba:e0:90:02:62:04:9f:ca:f9:d0:16:42:3d:20:
         61:43:c7:d9:c4:61:a1:86:82:3e:0f:56:94:22:59:c3:54:48:
         94:25:c6:5e:5f:2c:65:77:41:cd:e7:e1:c9:e9:b0:fc:f7:6c:
         3f:8f:b1:31:11:2d:e1:f3:29:7a:08:68:79:cc:74:c6:10:ce:
         50:67:2e:53:6e:64:cc:4a:0d:e9:39:5a:0c:52:6a:07:5d:e6:
         dd:19:3c:4c:b9:40:6c:07:00:ff:22:d1:88:31:b5:0a:7f:95:
         42:f5:b8:f1:e8:fa:0e:64:8b:bf:a0:a5:b4:c2:16:30:5b:54:
         49:44:f3:13:6d:2e:62:ac:84:98:49:48:54:c9:f8:0a:bf:c7:
         ce:b0:5f:e6:ed:73:9d:08:ed:8b:0e:ff:fe:23:b2:a0:bf:d4:
         4a:cb:59:4f:18:99:5f:4d:61:0e:7f:b5:a8:b6:33:81:4b:11:
         6f:b0:5e:8b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE71shOw/infsIIGQzgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2FjYjViMDMtN2M1ZC00NTljLTgxYTMtMGFhZTlkZDYzOTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBzoj6WYz/I0BvoH9Smufk7IvDxIwTahEv3Z
2oY8amSPWixO+pHkgqGUk2yvjiSNWbgq5oqx8zUbtAyQTpvxRZggzpThlOhgdVOT
gVcIW4GVsUp98mFvKfdmG/sF76QolBnaTtFOHDOGnHFU5B5GCDgEigLlIvt7lYw6
4K1aGlY2/9DntbBZ85/CaOvQB2/a83xxf9V5lxugMpf3VGreMTnshaioyeMbtIJ1
8WJVYfosfCOQPrawQm6krUaJhdOg8Q36Dy3KHgDBFx0ZiJL32IGqaCo3ClFnLUfi
h2EnhoaZc0YCpxCNsjg0sRo+9xyXGIh3Y8Xye46rPfwcRVw7SQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOfoJP9/iQa213pW3mmyLAwfIOR1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGY3Y2YyYjktYWI4OS0z
MzE3LTg2NDEtYjhlYTUwY2VkZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAw0t
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBvp/sXY+OU1EmBUQV3UAJnWfIU1/5izQVGyHj+
RPX9F6yRLkJYdfxPbrP6ncz0f4yR/a3zV+iFlX3yLSBZli9BNMXsAtB1SfK9r4KF
uuCQAmIEn8r50BZCPSBhQ8fZxGGhhoI+D1aUIlnDVEiUJcZeXyxld0HN5+HJ6bD8
92w/j7ExES3h8yl6CGh5zHTGEM5QZy5TbmTMSg3pOVoMUmoHXebdGTxMuUBsBwD/
ItGIMbUKf5VC9bjx6PoOZIu/oKW0whYwW1RJRPMTbS5irISYSUhUyfgKv8fOsF/m
7XOdCO2LDv/+I7Kgv9RKy1lPGJlfTWEOf7WotjOBSxFvsF6L
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:14:00 2026 by rpki-client