Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3acb1a-4cde-3114-b917-59f845f90356.roa
File:                     7f3acb1a-4cde-3114-b917-59f845f90356.roa (raw, json)
Hash identifier:          ETFmq/1/vtN7rM+wqxqRtke03MBXG6zYLNiVUuN+74A=
Subject key identifier:   14:A0:4C:12:D9:2C:1A:66:0F:D1:26:49:D9:66:7A:5D:B2:75:49:02
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FB70791D2ACDB78CA9560
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3acb1a-4cde-3114-b917-59f845f90356.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396578
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:b7:07:91:d2:ac:db:78:ca:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=60f508b6-cede-4753-9a5e-b3e777834ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:d6:cc:86:40:bf:1f:39:b6:e4:00:a6:09:
                    d5:44:7c:88:ad:bb:10:7e:02:7d:68:00:62:63:79:
                    ac:82:07:f7:b2:48:e1:5d:e1:e1:e7:96:98:d1:ad:
                    bd:a4:15:15:92:61:59:a2:43:dd:ba:d4:c5:db:df:
                    5c:9d:96:48:72:59:2f:e9:a5:71:e3:21:c2:c7:b0:
                    9a:5a:f0:37:4e:bb:1e:29:9f:da:f0:3a:1b:4b:a2:
                    a4:13:c2:c4:3a:11:89:1a:ac:51:cf:ca:db:91:a1:
                    36:25:12:90:b9:92:97:3f:4f:d0:f3:26:d7:c4:6f:
                    51:e6:95:08:9a:97:e0:c1:52:4c:de:39:22:e3:7f:
                    bf:04:f6:40:e3:d7:87:cb:63:47:68:3f:f0:02:6f:
                    ce:84:8c:2f:3c:cf:66:42:d4:09:91:ec:66:4b:a1:
                    67:03:d4:fe:e9:f7:36:89:25:91:3d:8e:44:ee:75:
                    db:3c:a5:92:6d:62:be:4e:c7:25:d7:1d:5e:0f:d7:
                    62:03:98:55:36:e5:ec:64:b0:c1:1a:e0:92:ef:ef:
                    72:26:e0:df:6a:74:c4:3d:0a:16:a4:c9:93:cc:79:
                    9d:06:bd:ed:22:98:b0:fe:5d:f5:ee:18:d2:83:d7:
                    77:90:7d:5c:2d:77:2a:c5:6f:05:f8:2e:b5:02:37:
                    de:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A0:4C:12:D9:2C:1A:66:0F:D1:26:49:D9:66:7A:5D:B2:75:49:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3acb1a-4cde-3114-b917-59f845f90356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ba:c6:ab:73:49:4f:70:17:c2:b9:98:55:01:7f:44:47:ff:
         a0:a8:07:b6:ba:54:bf:3a:34:51:30:53:28:b2:bd:02:5a:24:
         4c:9e:6f:0d:9c:b5:ae:58:2d:7b:90:45:d4:b9:37:8e:35:ec:
         19:e1:34:1c:2c:4a:40:92:fc:ff:a4:d7:d9:68:3d:9c:d4:fe:
         f8:f9:70:34:59:e5:31:59:c3:58:7e:a9:f1:af:58:46:8c:c7:
         5a:57:7a:d6:5f:12:3b:3f:c8:84:3f:96:df:31:27:db:24:9b:
         c3:df:8b:1c:93:5a:a0:54:23:d2:49:a6:ee:6e:5b:57:36:65:
         3e:46:6a:a3:55:d4:c7:64:da:ad:77:fc:3f:e2:8e:ce:8c:3c:
         73:42:d8:86:d8:a8:b8:12:e8:3e:e5:47:d1:5f:76:7c:14:0c:
         28:e4:0e:af:25:a5:36:1c:16:33:bb:ec:99:b7:f8:d2:65:fe:
         f3:ed:fe:1d:b0:01:60:99:72:a7:d0:cb:d4:94:45:2c:a1:a2:
         a5:88:55:6f:60:92:21:70:2b:27:fb:6e:d6:6b:e5:44:84:b8:
         df:01:f2:ae:c2:91:7e:ac:ca:ba:8a:18:d6:63:8a:b6:3f:6b:
         cf:af:a8:bf:f5:b9:1a:28:7f:5b:f2:a2:bf:1b:08:7c:fc:d6:
         7f:e1:8b:23
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5kD7cHkdKs23jKlWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
NjBmNTA4YjYtY2VkZS00NzUzLTlhNWUtYjNlNzc3ODM0ZWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jnWzIZAvx85tuQApgnVRHyIrbsQfgJ9aABi
Y3msggf3skjhXeHh55aY0a29pBUVkmFZokPdutTF299cnZZIclkv6aVx4yHCx7Ca
WvA3TrseKZ/a8DobS6KkE8LEOhGJGqxRz8rbkaE2JRKQuZKXP0/Q8ybXxG9R5pUI
mpfgwVJM3jki43+/BPZA49eHy2NHaD/wAm/OhIwvPM9mQtQJkexmS6FnA9T+6fc2
iSWRPY5E7nXbPKWSbWK+Tscl1x1eD9diA5hVNuXsZLDBGuCS7+9yJuDfanTEPQoW
pMmTzHmdBr3tIpiw/l317hjSg9d3kH1cLXcqxW8F+C61Ajfe4QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBSgTBLZLBpmD9EmSdlmel2ydUkCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2YzYWNiMWEtNGNkZS0z
MTE0LWI5MTctNTlmODQ1ZjkwMzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBqusarc0lPcBfCuZhVAX9ER/+gqAe2ulS/OjRR
MFMosr0CWiRMnm8NnLWuWC17kEXUuTeONewZ4TQcLEpAkvz/pNfZaD2c1P74+XA0
WeUxWcNYfqnxr1hGjMdaV3rWXxI7P8iEP5bfMSfbJJvD34sck1qgVCPSSabubltX
NmU+RmqjVdTHZNqtd/w/4o7OjDxzQtiG2Ki4Eug+5UfRX3Z8FAwo5A6vJaU2HBYz
u+yZt/jSZf7z7f4dsAFgmXKn0MvUlEUsoaKliFVvYJIhcCsn+27Wa+VEhLjfAfKu
wpF+rMq6ihjWY4q2P2vPr6i/9bkaKH9b8qK/Gwh8/NZ/4Ysj
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:41:03 2026 by rpki-client