Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74ace11b-f676-3171-b3db-3af61e4dd3a1.roa
File:                     74ace11b-f676-3171-b3db-3af61e4dd3a1.roa (raw, json)
Hash identifier:          stgecBLU9cgLvfxAulnCqAwSKoG7KKLT9A7gmwxiH4E=
Subject key identifier:   B4:D2:22:FB:3D:E2:59:2D:CD:DE:51:43:D1:53:38:50:6A:DC:E4:06
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4F08060DAA0A83C24EE42000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74ace11b-f676-3171-b3db-3af61e4dd3a1.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     396624
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:06:0d:aa:0a:83:c2:4e:e4:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=c0d83a52-9735-4338-a7a8-88f633f5e897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:47:d8:8b:19:7c:46:4d:d2:c9:0a:23:07:86:
                    75:05:8e:b6:bb:71:c1:1b:9d:cb:12:f5:b6:43:31:
                    a1:a6:ca:ff:5a:b6:af:5e:57:04:21:9c:f2:f0:e4:
                    82:9e:46:f9:7c:22:df:5a:38:a5:4d:ba:e6:9f:75:
                    c9:05:94:df:49:d6:59:59:ed:21:68:31:b8:49:c2:
                    3f:a1:6e:f5:7c:b1:86:a8:69:0b:c7:5b:3b:7c:04:
                    53:40:e5:94:c9:e2:6e:b8:96:e7:b9:0e:15:ef:89:
                    ed:6c:a5:11:3a:96:8a:a9:ba:c4:d9:da:16:01:a4:
                    30:0b:86:40:a5:79:93:36:4c:ca:b2:3f:1a:09:08:
                    9d:63:a1:e3:31:34:3b:61:2d:ec:23:7a:02:b7:f9:
                    ee:4d:c4:e6:30:56:67:a4:d0:f2:8c:fa:33:b9:96:
                    5e:cf:16:12:66:3b:bc:e0:5c:c2:47:44:89:a4:dd:
                    56:f7:22:cb:61:01:75:df:6a:23:0f:01:6f:33:27:
                    54:1d:ba:c5:31:c9:f9:2f:0d:be:fb:45:99:41:f6:
                    a7:b4:f8:08:ec:aa:4f:83:9d:59:78:18:39:6c:06:
                    bb:a5:f9:2e:36:6a:a9:0d:20:56:6b:bb:43:15:d5:
                    39:a0:85:cd:76:66:7d:b0:3a:8a:cd:6c:79:1c:d4:
                    b9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D2:22:FB:3D:E2:59:2D:CD:DE:51:43:D1:53:38:50:6A:DC:E4:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74ace11b-f676-3171-b3db-3af61e4dd3a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:5e:26:a3:ed:6c:89:7c:e0:cb:f3:f5:1b:4c:04:1c:84:8f:
         ab:4b:67:de:33:74:ce:59:ce:f0:59:d4:57:d8:00:37:ba:1f:
         69:60:6a:69:9c:fa:42:d0:fe:01:67:06:28:cc:57:8f:d3:9d:
         44:9e:71:0a:77:f6:c9:e4:78:ac:8e:68:fe:b7:ef:fd:f7:34:
         00:f1:93:7f:cd:a6:1d:37:93:18:92:fb:bd:b7:19:74:d0:6a:
         69:4d:91:b2:7c:37:2b:83:da:3b:1e:06:f9:64:00:35:33:fe:
         0a:64:50:a5:6f:74:5b:32:04:f4:6b:a7:c3:4a:a8:5e:d7:c4:
         ef:ec:ed:d0:22:7c:22:a9:f3:e8:f1:b7:ca:d0:dd:42:12:ab:
         41:bc:eb:6f:29:84:12:49:fa:0d:c4:b6:b4:27:1e:87:9a:ae:
         b4:e3:b6:6d:b5:cd:3c:97:74:84:eb:13:a2:1d:13:86:d1:6a:
         c2:b2:c7:30:c0:ca:ac:6e:87:54:4d:3b:9e:2a:75:73:c0:0a:
         92:4e:a9:64:4f:bd:44:4c:8a:60:14:2c:72:4d:2d:26:e5:71:
         53:d3:59:6c:33:d5:57:e3:bd:de:8d:be:10:6b:32:d0:2b:fd:
         64:c7:cc:1a:74:5c:5a:8c:1a:7c:38:9f:7f:0b:e8:24:0e:14:
         8b:71:b1:d1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9PCAYNqgqDwk7kIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
YzBkODNhNTItOTczNS00MzM4LWE3YTgtODhmNjMzZjVlODk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0fYixl8Rk3SyQojB4Z1BY62u3HBG53LEvW2
QzGhpsr/WravXlcEIZzy8OSCnkb5fCLfWjilTbrmn3XJBZTfSdZZWe0haDG4ScI/
oW71fLGGqGkLx1s7fARTQOWUyeJuuJbnuQ4V74ntbKUROpaKqbrE2doWAaQwC4ZA
pXmTNkzKsj8aCQidY6HjMTQ7YS3sI3oCt/nuTcTmMFZnpNDyjPozuZZezxYSZju8
4FzCR0SJpN1W9yLLYQF132ojDwFvMydUHbrFMcn5Lw2++0WZQfantPgI7KpPg51Z
eBg5bAa7pfkuNmqpDSBWa7tDFdU5oIXNdmZ9sDqKzWx5HNS5CQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLTSIvs94lktzd5RQ9FTOFBq3OQGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzRhY2UxMWItZjY3Ni0z
MTcxLWIzZGItM2FmNjFlNGRkM2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKJeJqPtbIl84Mvz9RtMBByEj6tLZ94zdM5ZzvBZ1FfYADe6H2lg
ammc+kLQ/gFnBijMV4/TnUSecQp39snkeKyOaP637/33NADxk3/Nph03kxiS+723
GXTQamlNkbJ8NyuD2jseBvlkADUz/gpkUKVvdFsyBPRrp8NKqF7XxO/s7dAifCKp
8+jxt8rQ3UISq0G8628phBJJ+g3EtrQnHoearrTjtm21zTyXdITrE6IdE4bRasKy
xzDAyqxuh1RNO54qdXPACpJOqWRPvURMimAULHJNLSblcVPTWWwz1Vfjvd6NvhBr
MtAr/WTHzBp0XFqMGnw4n38L6CQOFItxsdE=
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:01:14 2026 by rpki-client