Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/735c6b65-82cb-321d-8c5b-11374f517297.roa
File:                     735c6b65-82cb-321d-8c5b-11374f517297.roa (raw, json)
Hash identifier:          4rcQXTkoJkSaGbmX+GJb4O86pQSLRjo/8AzES17n+YE=
Subject key identifier:   9B:01:40:FD:68:B5:1B:7F:97:7D:6D:B4:7B:BF:07:B5:1E:02:7E:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4F080EB5BFBE6EDDE90C0F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/735c6b65-82cb-321d-8c5b-11374f517297.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     396583
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:0e:b5:bf:be:6e:dd:e9:0c:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=18cf92a4-db8d-4d22-af9b-048cd90d66e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:93:ef:2c:26:96:22:a9:25:64:1b:af:ee:
                    a9:f4:7f:7f:77:11:3a:f7:30:2d:74:ad:d8:08:94:
                    c9:81:d6:36:94:77:06:02:1f:ba:91:f6:87:8e:1b:
                    d5:83:c4:08:8b:e5:8a:97:77:3a:f8:7a:41:71:fd:
                    56:be:b1:0a:3b:a9:0a:d5:9d:7c:16:17:66:50:51:
                    b6:c2:93:cb:b3:b0:64:3b:35:78:f8:98:6b:cf:4e:
                    45:db:33:eb:59:22:4a:b3:6b:4c:14:75:0f:7c:9d:
                    02:4f:bc:ad:b4:90:51:ac:13:3c:a5:51:a3:26:f1:
                    0f:f8:05:08:81:96:3d:b7:bb:08:3c:91:e5:c3:89:
                    5a:cc:68:91:1c:82:d1:d7:8f:f4:db:1a:50:8c:84:
                    20:7b:dc:dd:15:50:ed:d6:84:99:ca:84:95:d2:9e:
                    ad:9a:69:d8:6e:cf:4f:67:be:f4:7b:f4:1b:c5:15:
                    ec:20:80:07:09:af:a7:2e:f0:43:04:d8:65:1e:46:
                    be:13:ee:cf:bd:b7:ef:d9:b1:df:76:69:ec:51:f7:
                    5e:45:cb:e0:89:84:24:a0:39:a0:e8:fe:b3:27:3a:
                    15:69:19:f5:fb:59:0e:d4:6f:72:04:ae:a9:64:07:
                    c9:2f:ee:79:e1:fb:58:11:ba:19:26:56:77:7a:87:
                    d6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:01:40:FD:68:B5:1B:7F:97:7D:6D:B4:7B:BF:07:B5:1E:02:7E:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/735c6b65-82cb-321d-8c5b-11374f517297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ae:49:ba:ca:43:4e:de:e5:71:da:a2:2b:2f:89:8c:db:59:
         4c:05:58:3b:16:b6:ea:fd:6f:d7:ad:82:23:b6:e3:1e:31:e4:
         63:ca:7a:19:2f:2a:85:c5:14:b8:ed:13:ec:30:25:de:16:c2:
         bf:47:2d:02:fb:af:8f:a1:07:fe:56:d6:e4:c8:a0:6e:86:8e:
         07:9c:0a:a4:13:e8:de:74:b9:5c:e8:42:94:d4:15:64:7e:8b:
         a8:0a:2f:89:17:a9:d5:92:f7:8e:c0:06:13:3b:44:a9:e0:c1:
         57:01:18:2e:4f:c3:03:2a:03:5e:0d:93:65:23:9d:23:af:cf:
         e6:84:b8:ef:96:d8:3d:92:bb:c6:d6:6d:b6:3d:46:1c:58:bd:
         32:8e:14:3a:54:01:22:ec:72:a8:de:ac:6c:10:93:bb:3d:4f:
         c8:50:ad:1a:ce:3b:74:2f:3e:3f:0b:0b:76:18:a7:07:dd:11:
         49:7e:52:ee:3e:3d:4e:bb:b7:0a:8e:d5:1b:70:70:1c:96:ea:
         ef:3c:0c:cf:14:f8:e2:0a:e2:cf:29:90:4e:e7:cc:64:60:ad:
         72:74:15:93:7f:3f:50:8c:99:f0:29:20:f5:13:d0:43:fb:a2:
         64:63:42:1e:ed:d9:6e:78:5c:dd:4b:a4:56:02:77:1f:a4:e6:
         f1:71:45:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9PCA61v75u3ekMD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
MThjZjkyYTQtZGI4ZC00ZDIyLWFmOWItMDQ4Y2Q5MGQ2NmU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/qT7ywmliKpJWQbr+6p9H9/dxE69zAtdK3Y
CJTJgdY2lHcGAh+6kfaHjhvVg8QIi+WKl3c6+HpBcf1WvrEKO6kK1Z18FhdmUFG2
wpPLs7BkOzV4+Jhrz05F2zPrWSJKs2tMFHUPfJ0CT7yttJBRrBM8pVGjJvEP+AUI
gZY9t7sIPJHlw4lazGiRHILR14/02xpQjIQge9zdFVDt1oSZyoSV0p6tmmnYbs9P
Z770e/QbxRXsIIAHCa+nLvBDBNhlHka+E+7Pvbfv2bHfdmnsUfdeRcvgiYQkoDmg
6P6zJzoVaRn1+1kO1G9yBK6pZAfJL+554ftYEboZJlZ3eofWKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJsBQP1otRt/l31ttHu/B7UeAn5tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzM1YzZiNjUtODJjYi0z
MjFkLThjNWItMTEzNzRmNTE3Mjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABWuSbrKQ07e5XHaoisviYzbWUwFWDsWtur9b9etgiO24x4x5GPK
ehkvKoXFFLjtE+wwJd4Wwr9HLQL7r4+hB/5W1uTIoG6GjgecCqQT6N50uVzoQpTU
FWR+i6gKL4kXqdWS947ABhM7RKngwVcBGC5PwwMqA14Nk2UjnSOvz+aEuO+W2D2S
u8bWbbY9RhxYvTKOFDpUASLscqjerGwQk7s9T8hQrRrOO3QvPj8LC3YYpwfdEUl+
Uu4+PU67twqO1RtwcByW6u88DM8U+OIK4s8pkE7nzGRgrXJ0FZN/P1CMmfApIPUT
0EP7omRjQh7t2W54XN1LpFYCdx+k5vFxRRM=
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:44:12 2026 by rpki-client