Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79497564-fd0a-30a8-96d6-3b10372d03cb.roa
File:                     79497564-fd0a-30a8-96d6-3b10372d03cb.roa (raw, json)
Hash identifier:          D/bv93So7WLSNvi38ludnbVxCjRtwPodNr1KMC5N+HM=
Subject key identifier:   64:EF:13:34:C6:C7:5D:11:EF:08:AA:58:DB:43:C7:38:0A:4C:AF:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F067279092BC8B8388B483240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79497564-fd0a-30a8-96d6-3b10372d03cb.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396613
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:79:09:2b:c8:b8:38:8b:48:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=817f33a5-e097-4f39-81ab-4492edefee89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:65:30:98:ea:62:26:0d:9e:f6:b4:a7:1d:
                    c2:49:04:a0:44:3d:cf:53:42:a6:59:21:6c:cc:bf:
                    e3:89:54:22:c6:c9:f5:ff:59:af:48:fa:06:61:0b:
                    16:cd:31:39:0b:d9:70:f5:0e:d8:cc:6b:5c:09:27:
                    b0:c5:26:9a:a0:7c:cf:8e:46:ec:e8:3b:c9:d6:c8:
                    98:75:b1:29:c9:0b:2a:a8:c0:33:be:a1:47:b8:65:
                    26:f1:3e:3d:4a:34:d5:79:35:75:f6:19:a6:d4:ab:
                    c0:05:ca:00:80:e1:37:cb:9c:dc:96:36:42:9c:d5:
                    40:b4:69:bb:cf:06:5c:7d:9d:ae:f5:40:9a:f2:96:
                    72:65:53:c7:f7:f7:61:58:2b:8d:2a:71:81:26:c0:
                    09:84:96:f3:d4:29:e4:ca:78:45:2a:52:13:54:b7:
                    5f:84:25:94:44:d3:ac:09:fc:e2:ad:ae:c3:f9:34:
                    b6:b8:95:59:49:92:59:35:ca:5d:d8:ba:84:53:3d:
                    9a:2f:5f:2c:82:5f:c7:ff:a0:fd:2b:ec:48:64:8f:
                    87:0f:b8:60:54:8d:22:41:92:82:89:8f:40:97:c3:
                    64:21:44:f9:35:a7:78:ac:97:09:89:23:96:46:73:
                    18:77:df:52:41:60:21:dd:05:11:6c:5a:fc:de:8f:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EF:13:34:C6:C7:5D:11:EF:08:AA:58:DB:43:C7:38:0A:4C:AF:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79497564-fd0a-30a8-96d6-3b10372d03cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ac:ae:15:21:17:da:55:86:57:d0:fd:3b:aa:18:72:13:e9:
         54:d0:2e:db:8c:f6:60:32:4e:99:34:92:4e:d2:55:bd:e4:28:
         58:8e:e6:e7:fa:68:f4:c4:d6:1e:d0:c4:79:f7:18:b0:f0:b9:
         66:f5:46:70:43:e4:cc:7f:c1:de:5c:98:8d:a1:49:3c:3f:26:
         4a:b7:9a:dd:96:a5:d8:76:9b:e2:07:1c:36:6a:5b:ed:55:96:
         61:56:a1:a8:f1:b1:88:d8:ae:03:86:d8:f5:d8:ca:51:8b:2d:
         a0:f6:f8:2d:23:fc:4d:3d:40:ff:ce:c2:98:73:92:1f:77:85:
         77:fb:9a:f9:b6:50:60:40:83:b4:cf:31:63:0c:d0:ae:5c:27:
         c0:4a:29:ff:a8:e1:88:a0:cf:7e:8c:43:9b:d7:7e:3d:84:75:
         7c:8c:18:76:c2:46:2b:12:e4:5d:d3:0b:87:10:b6:a2:92:c7:
         5c:bc:cc:c2:f2:a1:26:a8:83:fc:97:32:2d:42:df:f2:a3:96:
         3f:61:d4:70:74:2b:ac:70:6c:b2:91:80:46:b2:dd:60:2f:a6:
         2e:31:84:50:39:39:a8:e4:9b:3c:d1:89:40:d0:d7:d2:14:79:
         7b:87:5f:0f:49:7e:53:17:db:c4:0e:63:0c:8b:ad:da:32:26:
         2a:15:44:e9
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcnkJK8i4OItIMkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
ODE3ZjMzYTUtZTA5Ny00ZjM5LTgxYWItNDQ5MmVkZWZlZTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvllMJjqYiYNnva0px3CSQSgRD3PU0KmWSFs
zL/jiVQixsn1/1mvSPoGYQsWzTE5C9lw9Q7YzGtcCSewxSaaoHzPjkbs6DvJ1siY
dbEpyQsqqMAzvqFHuGUm8T49SjTVeTV19hmm1KvABcoAgOE3y5zcljZCnNVAtGm7
zwZcfZ2u9UCa8pZyZVPH9/dhWCuNKnGBJsAJhJbz1CnkynhFKlITVLdfhCWURNOs
Cfzira7D+TS2uJVZSZJZNcpd2LqEUz2aL18sgl/H/6D9K+xIZI+HD7hgVI0iQZKC
iY9Al8NkIUT5Nad4rJcJiSOWRnMYd99SQWAh3QURbFr83o/t7QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGTvEzTGx10R7wiqWNtDxzgKTK9xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzk0OTc1NjQtZmQwYS0z
MGE4LTk2ZDYtM2IxMDM3MmQwM2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAtrK4VIRfaVYZX0P07qhhyE+lU0C7bjPZgMk6Z
NJJO0lW95ChYjubn+mj0xNYe0MR59xiw8Llm9UZwQ+TMf8HeXJiNoUk8PyZKt5rd
lqXYdpviBxw2alvtVZZhVqGo8bGI2K4Dhtj12MpRiy2g9vgtI/xNPUD/zsKYc5If
d4V3+5r5tlBgQIO0zzFjDNCuXCfASin/qOGIoM9+jEOb1349hHV8jBh2wkYrEuRd
0wuHELaiksdcvMzC8qEmqIP8lzItQt/yo5Y/YdRwdCuscGyykYBGst1gL6YuMYRQ
OTmo5Js80YlA0NfSFHl7h18PSX5TF9vEDmMMi63aMiYqFUTp
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:33:13 2026 by rpki-client