Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/835546e6-5669-3952-ba0e-a5e15c609c88.roa
File:                     835546e6-5669-3952-ba0e-a5e15c609c88.roa (raw, json)
Hash identifier:          4jQ2C0Wfc4QqEagSxOFIyZ3304oBQT2S0kSv3G8/NLQ=
Subject key identifier:   C0:3C:FA:AA:50:F0:F5:4F:12:6C:83:E8:62:EC:8F:F4:C2:60:91:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497465D23087CEDC3E1AD280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/835546e6-5669-3952-ba0e-a5e15c609c88.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396553
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:65:d2:30:87:ce:dc:3e:1a:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=20b0f596-3ec9-4f93-8ad5-3a6431a49876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b4:b3:d9:2d:d1:e7:28:30:f2:eb:60:99:77:
                    ab:7d:ec:ce:68:ae:31:de:ad:92:16:e4:61:c7:90:
                    6b:08:e1:99:41:04:0a:a0:66:de:ea:45:ca:4e:62:
                    52:40:37:01:ef:99:92:11:e2:12:b0:17:b6:1f:30:
                    c7:35:87:63:2f:bb:21:32:90:e3:34:ba:96:7b:5f:
                    99:5e:13:29:4c:fe:95:b5:7b:79:6b:0c:04:cf:69:
                    58:66:6e:21:28:a5:ee:73:28:17:f2:97:98:e9:d7:
                    6a:c4:f6:37:cb:6e:4b:a8:85:9e:d6:81:79:9c:c5:
                    e3:74:ee:87:9e:59:70:c5:e1:50:5f:39:f3:d9:c2:
                    cb:48:e6:38:59:7e:bd:f4:9f:9a:09:f3:5f:37:8d:
                    fd:fb:72:e2:5b:0b:c2:26:a9:bc:5d:d9:f5:89:a3:
                    73:3b:f3:68:42:f6:5e:ee:04:df:57:4d:60:bf:8b:
                    34:8a:f8:50:c2:73:8d:f7:da:aa:1a:97:3e:71:5c:
                    c8:2a:92:cc:b7:d7:a0:37:6f:78:61:9c:08:79:0b:
                    60:bc:3d:dc:ec:8f:f6:d1:82:8d:69:5a:f7:8a:ef:
                    93:e2:4b:9a:1c:2f:62:47:e8:e2:7a:7a:f9:d0:6a:
                    4f:3e:24:c3:8d:bb:38:fe:8e:34:df:41:8e:bc:7d:
                    0d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3C:FA:AA:50:F0:F5:4F:12:6C:83:E8:62:EC:8F:F4:C2:60:91:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/835546e6-5669-3952-ba0e-a5e15c609c88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:13:f8:f6:a5:72:ea:65:e4:e1:12:c8:f6:01:33:97:20:33:
         56:d2:0f:54:a5:99:de:ef:7f:ac:f1:fd:d9:3a:50:57:57:90:
         b0:c6:37:88:51:30:e5:36:c1:ce:2b:9f:22:9e:19:a0:b8:ca:
         5a:45:33:40:28:1a:c2:20:0f:1e:7f:ba:af:47:a3:35:3e:d7:
         20:73:2f:35:04:59:db:56:57:9d:f0:cd:ba:20:e0:13:89:d0:
         fe:a3:40:11:83:bc:9c:b1:63:2d:75:a1:47:1d:5a:f0:c8:cc:
         dc:7a:be:bb:11:df:8a:e5:ec:8e:e5:d3:e4:aa:78:04:f5:ad:
         d0:90:e1:80:5c:7e:d0:cb:d8:4e:ed:05:6c:19:76:41:e1:67:
         37:74:6f:a5:ce:f0:6e:f7:43:db:97:83:00:1d:b5:5d:54:67:
         de:57:1c:fa:d7:39:37:70:bd:35:57:8a:48:94:70:ae:c8:d3:
         87:7c:70:35:ff:ee:df:bb:f8:1c:5e:a8:30:76:94:40:79:4d:
         09:55:74:a7:c1:b0:d5:ed:48:c3:56:98:98:08:71:de:e7:c2:
         a1:82:b2:ee:85:6a:80:76:26:73:4c:7c:ab:5d:33:9c:e9:31:
         2e:06:aa:0a:a8:c6:02:ca:39:64:35:a6:6a:9d:91:5d:1f:01:
         79:88:d7:63
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JdGXSMIfO3D4a0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MjBiMGY1OTYtM2VjOS00ZjkzLThhZDUtM2E2NDMxYTQ5ODc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrSz2S3R5ygw8utgmXerfezOaK4x3q2SFuRh
x5BrCOGZQQQKoGbe6kXKTmJSQDcB75mSEeISsBe2HzDHNYdjL7shMpDjNLqWe1+Z
XhMpTP6VtXt5awwEz2lYZm4hKKXucygX8peY6ddqxPY3y25LqIWe1oF5nMXjdO6H
nllwxeFQXznz2cLLSOY4WX699J+aCfNfN439+3LiWwvCJqm8Xdn1iaNzO/NoQvZe
7gTfV01gv4s0ivhQwnON99qqGpc+cVzIKpLMt9egN294YZwIeQtgvD3c7I/20YKN
aVr3iu+T4kuaHC9iR+jienr50GpPPiTDjbs4/o4030GOvH0NRQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMA8+qpQ8PVPEmyD6GLsj/TCYJGYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODM1NTQ2ZTYtNTY2OS0z
OTUyLWJhMGUtYTVlMTVjNjA5Yzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAJE/j2pXLqZeThEsj2ATOXIDNW0g9UpZne73+s
8f3ZOlBXV5CwxjeIUTDlNsHOK58inhmguMpaRTNAKBrCIA8ef7qvR6M1Ptcgcy81
BFnbVled8M26IOATidD+o0ARg7ycsWMtdaFHHVrwyMzcer67Ed+K5eyO5dPkqngE
9a3QkOGAXH7Qy9hO7QVsGXZB4Wc3dG+lzvBu90Pbl4MAHbVdVGfeVxz61zk3cL01
V4pIlHCuyNOHfHA1/+7fu/gcXqgwdpRAeU0JVXSnwbDV7UjDVpiYCHHe58KhgrLu
hWqAdiZzTHyrXTOc6TEuBqoKqMYCyjlkNaZqnZFdHwF5iNdj
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:51:38 2026 by rpki-client