Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c3de95d-cf41-3a58-b7d7-96c288b489c2.roa
File:                     5c3de95d-cf41-3a58-b7d7-96c288b489c2.roa (raw, json)
Hash identifier:          +qrLrm7+hk/b/y3b/ylUwwVs6xWqfOOWBCUlafCKlww=
Subject key identifier:   64:CE:03:B0:9E:18:61:B7:33:A6:3D:12:44:0B:31:7B:37:15:52:2B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E815FBA89CEA293A9D087AC20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c3de95d-cf41-3a58-b7d7-96c288b489c2.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     396587
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:ba:89:ce:a2:93:a9:d0:87:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=d03ee8b7-4914-462a-b93f-57ab58578811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bb:37:3c:f6:ba:a1:fb:60:24:b3:2a:68:9c:
                    7d:9d:9d:0c:2e:12:37:e2:c3:fa:86:06:00:6b:ec:
                    a8:ca:55:9c:1f:b7:ac:a3:1a:64:c3:1a:41:d7:80:
                    32:02:10:77:09:f4:8f:af:b9:9e:f4:c0:a9:37:a3:
                    6a:94:fd:39:38:1b:d1:3d:5e:ed:b4:4d:65:57:34:
                    4b:38:ca:57:00:ef:8d:d5:4d:6b:74:f1:88:3b:ca:
                    97:24:4d:63:81:7d:57:27:0f:c7:ea:72:fb:16:61:
                    4a:ff:4d:e8:e4:90:c6:8d:dc:90:8a:8b:4d:cf:9f:
                    cc:b7:2f:a9:16:cf:8d:a2:db:6d:d8:89:e9:ee:fd:
                    52:fc:64:a2:bc:db:71:eb:b9:c3:e9:4a:60:70:84:
                    25:2a:b4:49:ed:8e:76:2c:62:0d:ab:aa:00:b1:b4:
                    1a:77:b5:ce:82:5f:f4:2a:44:a1:9a:05:34:04:81:
                    65:94:0f:6b:5c:7e:e1:f5:fa:eb:2e:8d:0e:f7:f4:
                    5f:cd:96:f4:ea:8e:c6:9c:44:71:01:23:c9:d5:6f:
                    d4:47:d2:fb:7e:16:63:a6:a5:0e:e5:51:79:a5:ea:
                    3f:29:e8:ad:6e:68:da:b2:f1:92:b8:fb:8a:07:6f:
                    52:79:74:ac:a2:f3:00:43:32:0f:f5:d7:2a:20:33:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CE:03:B0:9E:18:61:B7:33:A6:3D:12:44:0B:31:7B:37:15:52:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c3de95d-cf41-3a58-b7d7-96c288b489c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:2c:cb:d1:ea:90:e9:6c:ca:6a:52:51:71:1e:f5:ac:e7:15:
         a5:53:73:43:4b:c7:bc:cc:b8:e7:b9:0c:b3:d7:f3:ff:60:90:
         4b:c1:6b:4c:56:00:f4:ea:d4:11:e2:94:71:c5:76:1d:5c:e8:
         87:ce:81:90:f1:03:d4:5a:4c:3f:cd:ff:4f:f8:dc:0f:c8:65:
         86:43:c5:cc:f9:31:63:ec:42:5e:23:2f:9e:de:47:e1:05:af:
         6c:75:e6:db:69:36:f9:c9:81:3d:a0:f2:15:f4:c4:4a:ee:b6:
         03:18:86:ae:f3:ca:cb:79:f6:b7:01:46:0c:14:2b:bb:46:4a:
         e8:b8:d3:33:e4:a9:6e:2c:62:b1:24:4d:d0:ae:b4:49:2b:66:
         de:c6:0b:03:08:d9:9d:52:8a:c6:34:51:ea:89:80:f0:c6:c0:
         d9:99:ea:b1:b8:e9:3a:df:cd:f4:2f:50:37:d9:df:51:f1:d8:
         35:b5:f6:69:50:1d:44:b1:39:45:b0:b1:85:9a:d3:24:f5:5e:
         2e:7f:1b:6a:57:0e:a9:c0:ea:e3:86:e3:a4:02:0f:cf:b1:08:
         13:6c:be:4d:d4:63:83:d2:8c:3a:b7:2c:ce:d9:1a:20:c6:89:
         fd:d5:5f:5c:73:32:b3:1c:44:21:45:46:d7:be:ed:ab:85:27:
         a4:7a:cd:16
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6BX7qJzqKTqdCHrCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
ZDAzZWU4YjctNDkxNC00NjJhLWI5M2YtNTdhYjU4NTc4ODExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbs3PPa6oftgJLMqaJx9nZ0MLhI34sP6hgYA
a+yoylWcH7esoxpkwxpB14AyAhB3CfSPr7me9MCpN6NqlP05OBvRPV7ttE1lVzRL
OMpXAO+N1U1rdPGIO8qXJE1jgX1XJw/H6nL7FmFK/03o5JDGjdyQiotNz5/Mty+p
Fs+Nottt2Inp7v1S/GSivNtx67nD6UpgcIQlKrRJ7Y52LGINq6oAsbQad7XOgl/0
KkShmgU0BIFllA9rXH7h9frrLo0O9/RfzZb06o7GnERxASPJ1W/UR9L7fhZjpqUO
5VF5peo/KeitbmjasvGSuPuKB29SeXSsovMAQzIP9dcqIDMVuwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGTOA7CeGGG3M6Y9EkQLMXs3FVIrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWMzZGU5NWQtY2Y0MS0z
YTU4LWI3ZDctOTZjMjg4YjQ4OWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA0LMvR6pDpbMpqUlFxHvWs5xWlU3NDS8e8zLjn
uQyz1/P/YJBLwWtMVgD06tQR4pRxxXYdXOiHzoGQ8QPUWkw/zf9P+NwPyGWGQ8XM
+TFj7EJeIy+e3kfhBa9sdebbaTb5yYE9oPIV9MRK7rYDGIau88rLefa3AUYMFCu7
RkrouNMz5KluLGKxJE3QrrRJK2bexgsDCNmdUorGNFHqiYDwxsDZmeqxuOk63830
L1A32d9R8dg1tfZpUB1EsTlFsLGFmtMk9V4ufxtqVw6pwOrjhuOkAg/PsQgTbL5N
1GOD0ow6tyzO2Rogxon91V9cczKzHEQhRUbXvu2rhSekes0W
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:19:22 2026 by rpki-client