Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7244d473-044d-3d3b-84e1-cb55a832c31b.roa
File:                     7244d473-044d-3d3b-84e1-cb55a832c31b.roa (raw, json)
Hash identifier:          bAQDM1LuS8jAJp+cN6UI9HkcMDpTA/LB6MitW5QJj0c=
Subject key identifier:   13:9F:74:AF:81:CB:3F:1F:98:C2:37:90:49:7E:3D:40:C6:4A:BB:49
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A840E0EF461651EC6D98E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7244d473-044d-3d3b-84e1-cb55a832c31b.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396609
IP address blocks:        2001:500:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:40:e0:ef:46:16:51:ec:6d:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=6969ca58-fac6-45e8-ab8d-a4f4aa24ef24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:66:8a:e9:8f:d1:b6:b5:83:4f:b7:1b:fd:9b:
                    2b:c5:1c:6e:b3:20:c9:98:6e:9b:5a:38:36:6a:b1:
                    56:f8:ba:47:6c:e8:e9:66:53:0a:66:e1:12:37:ff:
                    f7:79:f4:05:de:08:95:f5:24:13:5a:6c:61:d8:4d:
                    a9:e4:e1:6b:a7:95:89:89:75:cd:31:18:61:1f:08:
                    d2:d7:7d:dd:d3:d5:57:ac:d0:ad:98:b1:d0:db:e2:
                    5e:d1:2d:c0:d4:e9:1e:2a:aa:49:d0:07:ff:46:e4:
                    27:a1:89:b9:92:79:db:fe:48:7e:f7:3d:3d:b4:dc:
                    31:e7:00:e2:ac:6b:91:f4:55:06:68:3e:d4:23:93:
                    e5:e1:e8:cb:e7:62:40:1e:b8:0d:89:72:45:25:d5:
                    d3:46:25:62:c0:3d:a1:65:c5:43:2c:a9:3b:f4:f1:
                    7b:d0:da:3a:63:be:44:e6:8e:0a:ab:a6:9a:12:89:
                    ba:08:8f:9d:81:5f:fc:d3:ef:78:9b:5c:38:04:be:
                    f8:5d:b2:3c:48:59:12:6c:67:6b:8b:c0:98:c4:9b:
                    fa:63:69:5d:29:0f:48:e1:5b:8e:dc:4c:08:0d:90:
                    b4:22:0d:6e:b0:23:57:2a:66:73:14:3f:e4:89:e3:
                    d3:c5:9d:65:b9:c9:5f:cb:20:75:1d:ea:82:6f:4c:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9F:74:AF:81:CB:3F:1F:98:C2:37:90:49:7E:3D:40:C6:4A:BB:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7244d473-044d-3d3b-84e1-cb55a832c31b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d3:42:ac:6a:f7:97:8e:b1:d9:ec:49:bb:0a:7d:c1:47:36:
         7d:93:64:79:de:3d:07:4c:95:dc:99:64:f7:48:4e:81:7b:d0:
         d8:bd:61:7e:b0:1e:6b:52:1d:6a:51:f1:c1:5c:57:bf:49:c4:
         05:e4:d1:04:bb:db:31:c2:78:3c:52:7f:8c:dc:63:8d:b7:10:
         1a:8b:74:b6:8f:55:d6:1a:db:18:24:6d:74:05:0b:2b:bc:ad:
         4f:23:22:07:b0:4c:29:cc:f6:0a:90:97:e7:7e:17:7c:9a:45:
         b8:e7:93:21:ec:24:21:25:43:4b:d1:78:c4:3c:b8:b0:b3:24:
         c3:65:59:df:3a:96:b1:c0:46:ff:0f:dd:e7:bd:64:0a:42:3a:
         cb:9f:ae:ec:c6:bc:82:1a:88:78:3d:53:43:4a:4a:7d:0e:ce:
         61:95:b4:b4:b3:e0:b4:a3:9c:55:9e:25:89:6e:b8:fe:aa:f3:
         0e:72:22:a9:e1:59:59:a1:6b:19:ed:f0:fb:3d:9b:4d:24:c1:
         6a:97:eb:68:b6:d2:72:4c:6e:cf:8a:e6:e2:bd:f2:07:26:f3:
         5e:5a:47:5d:ef:5a:70:3e:5d:18:ff:b0:8e:76:b0:1e:10:7f:
         9a:5a:20:3e:42:60:c6:48:c4:dd:34:75:3a:e8:fd:20:94:e0:
         da:cc:b3:85
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8DqEDg70YWUextmOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
Njk2OWNhNTgtZmFjNi00NWU4LWFiOGQtYTRmNGFhMjRlZjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGaK6Y/RtrWDT7cb/ZsrxRxusyDJmG6bWjg2
arFW+LpHbOjpZlMKZuESN//3efQF3giV9SQTWmxh2E2p5OFrp5WJiXXNMRhhHwjS
133d09VXrNCtmLHQ2+Je0S3A1OkeKqpJ0Af/RuQnoYm5knnb/kh+9z09tNwx5wDi
rGuR9FUGaD7UI5Pl4ejL52JAHrgNiXJFJdXTRiViwD2hZcVDLKk79PF70No6Y75E
5o4Kq6aaEom6CI+dgV/80+94m1w4BL74XbI8SFkSbGdri8CYxJv6Y2ldKQ9I4VuO
3EwIDZC0Ig1usCNXKmZzFD/kiePTxZ1luclfyyB1HeqCb0zhdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBOfdK+Byz8fmMI3kEl+PUDGSrtJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzI0NGQ0NzMtMDQ0ZC0z
ZDNiLTg0ZTEtY2I1NWE4MzJjMzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAHTQqxq95eOsdnsSbsKfcFHNn2TZHnePQdMldyZZPdIToF70Ni9
YX6wHmtSHWpR8cFcV79JxAXk0QS72zHCeDxSf4zcY423EBqLdLaPVdYa2xgkbXQF
Cyu8rU8jIgewTCnM9gqQl+d+F3yaRbjnkyHsJCElQ0vReMQ8uLCzJMNlWd86lrHA
Rv8P3ee9ZApCOsufruzGvIIaiHg9U0NKSn0OzmGVtLSz4LSjnFWeJYluuP6q8w5y
IqnhWVmhaxnt8Ps9m00kwWqX62i20nJMbs+K5uK98gcm815aR13vWnA+XRj/sI52
sB4Qf5paID5CYMZIxN00dTro/SCU4NrMs4U=
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:25:54 2026 by rpki-client