Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/77d97aec-64ce-392e-a50e-f0b6affba8a2.roa
File:                     77d97aec-64ce-392e-a50e-f0b6affba8a2.roa (raw, json)
Hash identifier:          9lf38HczIKqUpK6iiLMNTWAGjVokUjoUD7sNUZp497Q=
Subject key identifier:   39:E4:AA:EE:30:BC:E8:5C:28:3D:92:52:B8:BB:79:FD:84:A3:E2:1E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49890B67F434BBBDDAF3D2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/77d97aec-64ce-392e-a50e-f0b6affba8a2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397210
IP address blocks:        2001:501:8a29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:0b:67:f4:34:bb:bd:da:f3:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6d1026c8-4f8b-4385-be7f-58b4f1e628b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c6:7b:19:fe:69:75:90:df:e7:d2:50:b3:39:
                    9a:62:aa:7f:a4:fa:58:e8:38:d2:98:80:0e:ab:de:
                    91:45:b8:1f:f8:5e:78:96:29:c8:5d:de:54:6c:79:
                    8d:82:f6:e6:f2:4d:38:a5:aa:f2:4d:fc:79:2d:cc:
                    9f:cd:97:eb:fa:d6:01:39:c6:76:d1:8f:71:a0:10:
                    d6:66:f4:6e:63:e8:e2:77:59:aa:81:64:00:83:9f:
                    b1:70:d5:88:a6:c6:00:19:72:1b:98:45:6b:7e:8b:
                    6f:0b:6f:22:08:d9:29:6e:e5:8d:c0:01:fb:f6:8b:
                    b5:f1:89:ab:9c:30:12:d0:bb:fb:a1:de:ea:ec:b8:
                    81:df:b1:1d:ac:6f:b9:af:dd:8f:20:bf:1f:02:43:
                    c7:76:52:40:56:09:74:07:68:b0:cb:b4:0d:5f:55:
                    37:fb:03:72:8d:9c:7d:37:cb:6f:27:02:53:5d:da:
                    7a:08:cd:23:25:42:72:5f:0c:fa:85:94:15:2c:a2:
                    b7:44:15:01:00:80:c5:1a:b5:13:cb:34:57:39:33:
                    70:41:74:70:9e:fd:91:49:69:e8:a8:79:87:db:83:
                    1f:f8:8a:85:a4:12:a9:ce:55:4e:45:e2:73:39:69:
                    50:7a:a9:09:7b:a8:af:8e:81:8b:02:a1:69:31:79:
                    0b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E4:AA:EE:30:BC:E8:5C:28:3D:92:52:B8:BB:79:FD:84:A3:E2:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/77d97aec-64ce-392e-a50e-f0b6affba8a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:e6:7f:84:04:33:74:e7:4d:e5:0a:df:e6:d4:18:35:bf:61:
         f5:44:6b:5b:cc:51:8f:b8:3a:cf:0a:ad:3d:4b:5b:03:66:91:
         ab:d1:53:a2:9d:da:52:78:92:48:60:7d:6d:13:9d:31:9b:e4:
         a0:b2:cf:1e:a8:bc:51:54:fb:5e:d8:1d:fa:6f:b1:12:b3:7c:
         05:f3:8c:8b:73:a8:ee:b0:ab:d1:78:9d:f9:4d:11:95:c9:b2:
         fb:89:b6:2b:11:a2:6f:93:cf:bd:6e:a5:72:7a:67:f8:cc:4b:
         05:90:2a:e4:d2:1d:76:60:07:5b:25:6e:6c:e5:de:42:19:ff:
         a0:f3:72:87:78:ba:4b:78:fc:9c:bd:8e:37:61:d0:87:6a:49:
         61:13:01:25:4a:de:06:7c:bd:03:a2:06:b6:74:3d:be:39:97:
         1c:84:2b:27:83:19:2f:99:75:f3:08:16:d1:72:b8:58:2f:9c:
         18:56:33:21:6c:f2:f1:a3:66:83:84:8a:79:8b:9d:cc:0a:8b:
         a2:f3:88:5d:4b:26:71:50:33:19:e6:1f:26:a4:cc:08:a4:d8:
         02:8d:b1:23:3c:c2:fa:cc:2e:18:7c:42:01:19:4d:1c:3a:fb:
         4b:7c:3b:ac:4b:d3:92:80:ba:7d:a4:6c:2c:15:12:ff:97:ce:
         26:39:26:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiQtn9DS7vdrz0sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NmQxMDI2YzgtNGY4Yi00Mzg1LWJlN2YtNThiNGYxZTYyOGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicZ7Gf5pdZDf59JQszmaYqp/pPpY6DjSmIAO
q96RRbgf+F54linIXd5UbHmNgvbm8k04paryTfx5LcyfzZfr+tYBOcZ20Y9xoBDW
ZvRuY+jid1mqgWQAg5+xcNWIpsYAGXIbmEVrfotvC28iCNkpbuWNwAH79ou18Ymr
nDAS0Lv7od7q7LiB37EdrG+5r92PIL8fAkPHdlJAVgl0B2iwy7QNX1U3+wNyjZx9
N8tvJwJTXdp6CM0jJUJyXwz6hZQVLKK3RBUBAIDFGrUTyzRXOTNwQXRwnv2RSWno
qHmH24Mf+IqFpBKpzlVOReJzOWlQeqkJe6ivjoGLAqFpMXkLSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDnkqu4wvOhcKD2SUri7ef2Eo+IeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzdkOTdhZWMtNjRjZS0z
OTJlLWE1MGUtZjBiNmFmZmJhOGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIrmf4QEM3TnTeUK3+bUGDW/YfVEa1vMUY+4Os8KrT1LWwNmkavR
U6Kd2lJ4kkhgfW0TnTGb5KCyzx6ovFFU+17YHfpvsRKzfAXzjItzqO6wq9F4nflN
EZXJsvuJtisRom+Tz71upXJ6Z/jMSwWQKuTSHXZgB1slbmzl3kIZ/6Dzcod4ukt4
/Jy9jjdh0IdqSWETASVK3gZ8vQOiBrZ0Pb45lxyEKyeDGS+ZdfMIFtFyuFgvnBhW
MyFs8vGjZoOEinmLncwKi6LziF1LJnFQMxnmHyakzAik2AKNsSM8wvrMLhh8QgEZ
TRw6+0t8O6xL05KAun2kbCwVEv+XziY5JjQ=
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:11:15 2026 by rpki-client