Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71d96a1f-69eb-3906-93f5-68f54e2949ba.roa
File:                     71d96a1f-69eb-3906-93f5-68f54e2949ba.roa (raw, json)
Hash identifier:          87YBYNXLcbSgHMQMPyKCb10A2Eelu7d5UntCMYGLzAs=
Subject key identifier:   78:B6:1B:69:AD:72:D3:4B:78:A3:49:BC:7E:E6:18:48:18:FA:00:A3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0ED23B02A70DB9D12A0B3080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71d96a1f-69eb-3906-93f5-68f54e2949ba.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     396603
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:3b:02:a7:0d:b9:d1:2a:0b:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=034f09ec-ea26-4875-8982-6d96a105e1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:15:4b:bf:0f:75:25:80:11:b6:9c:c1:52:12:
                    56:89:cb:3a:77:3b:ef:78:76:f2:42:7b:9d:05:d0:
                    f9:21:3d:e4:4f:b9:66:a2:1b:c1:60:7e:0c:bb:53:
                    9e:a6:ee:39:71:f7:3c:c4:70:b4:8c:3d:6c:8b:7b:
                    10:2f:76:66:bc:74:d7:ea:aa:00:5b:15:74:1e:2e:
                    ae:a7:ff:8b:53:bc:1d:51:a6:49:08:7c:b1:6f:26:
                    43:9b:a4:c9:f9:84:89:52:a7:30:c6:32:62:f9:5f:
                    a9:fa:d4:07:dd:d7:85:f1:81:89:cf:e5:9c:c2:eb:
                    1a:02:76:d5:5f:ee:7b:80:88:4a:c0:a9:0e:46:a4:
                    36:4c:ab:20:d7:6e:57:0b:46:58:de:ae:81:00:b3:
                    ab:cd:26:38:e9:f0:49:c9:29:4e:d6:71:5a:88:34:
                    ec:b6:af:fc:f2:95:dd:5b:f0:97:a4:93:bc:fc:e4:
                    6d:59:37:eb:8e:bc:17:3d:82:ef:c9:1c:b5:18:95:
                    2c:52:e3:60:c0:76:da:75:ce:f0:a4:d4:e3:8e:44:
                    ec:e6:1f:a5:d9:87:b9:e2:b9:9d:09:31:51:5b:50:
                    90:59:eb:ac:11:4e:5c:00:57:2f:a6:b4:1d:00:e5:
                    c4:67:8f:9d:d5:d9:d1:1b:18:d0:63:26:7d:b7:d9:
                    68:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B6:1B:69:AD:72:D3:4B:78:A3:49:BC:7E:E6:18:48:18:FA:00:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71d96a1f-69eb-3906-93f5-68f54e2949ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d2:c2:53:fd:4c:38:de:77:c5:ac:82:a9:f1:96:9b:d7:54:
         4b:70:2f:d4:17:27:a4:df:87:1b:ea:39:91:ab:cf:12:58:d9:
         ef:76:b7:6d:bd:7d:ef:37:dc:e9:3b:e6:05:86:0e:67:79:5f:
         dc:39:2e:69:8c:78:b0:1d:4a:9f:a1:a2:91:4c:9b:47:d4:87:
         80:28:b1:5d:ef:13:32:f6:dc:95:af:c4:0d:71:60:12:60:21:
         2f:50:c5:f9:8e:a4:64:b2:51:cf:5f:07:9b:03:49:bd:a3:ad:
         40:17:1b:da:b2:c6:47:38:a3:05:33:6f:fb:47:aa:9c:62:48:
         f5:eb:62:44:83:cb:be:f3:d7:99:97:de:79:e5:df:e6:64:be:
         29:ce:2b:40:21:d8:d9:b3:d0:33:55:83:f3:44:49:f9:82:4c:
         2d:3b:b5:0c:c4:95:c4:54:10:59:5e:c9:ec:c7:91:96:e7:8f:
         73:f0:8b:1a:87:23:af:25:4f:12:0a:a4:d5:1e:a2:31:97:f3:
         88:68:ef:13:67:39:12:71:3b:4a:26:3a:46:4b:13:fb:d1:08:
         a8:3e:67:15:d8:b9:2d:48:25:52:fd:04:8c:60:82:17:47:e0:
         e0:ba:60:c8:56:1a:11:1b:f6:2c:69:19:fa:27:5e:85:11:1e:
         fb:8e:ff:2f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8O0jsCpw250SoLMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk
MDM0ZjA5ZWMtZWEyNi00ODc1LTg5ODItNmQ5NmExMDVlMWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixVLvw91JYARtpzBUhJWics6dzvveHbyQnud
BdD5IT3kT7lmohvBYH4Mu1Oepu45cfc8xHC0jD1si3sQL3ZmvHTX6qoAWxV0Hi6u
p/+LU7wdUaZJCHyxbyZDm6TJ+YSJUqcwxjJi+V+p+tQH3deF8YGJz+WcwusaAnbV
X+57gIhKwKkORqQ2TKsg125XC0ZY3q6BALOrzSY46fBJySlO1nFaiDTstq/88pXd
W/CXpJO8/ORtWTfrjrwXPYLvyRy1GJUsUuNgwHbadc7wpNTjjkTs5h+l2Ye54rmd
CTFRW1CQWeusEU5cAFcvprQdAOXEZ4+d1dnRGxjQYyZ9t9loPQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHi2G2mtctNLeKNJvH7mGEgY+gCjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzFkOTZhMWYtNjllYi0z
OTA2LTkzZjUtNjhmNTRlMjk0OWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBf0sJT/Uw43nfFrIKp8Zab11RLcC/UFyek34cb
6jmRq88SWNnvdrdtvX3vN9zpO+YFhg5neV/cOS5pjHiwHUqfoaKRTJtH1IeAKLFd
7xMy9tyVr8QNcWASYCEvUMX5jqRkslHPXwebA0m9o61AFxvassZHOKMFM2/7R6qc
Ykj162JEg8u+89eZl9555d/mZL4pzitAIdjZs9AzVYPzREn5gkwtO7UMxJXEVBBZ
Xsnsx5GW549z8IsahyOvJU8SCqTVHqIxl/OIaO8TZzkScTtKJjpGSxP70QioPmcV
2LktSCVS/QSMYIIXR+DgumDIVhoRG/YsaRn6J16FER77jv8v
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:30:22 2026 by rpki-client