Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83a68a18-a4bd-3266-90e8-086888a47451.roa
File:                     83a68a18-a4bd-3266-90e8-086888a47451.roa (raw, json)
Hash identifier:          hX1ekufUWmt265HEhb1pxDv1Ezy25R03m4ptOzPlvVc=
Subject key identifier:   FC:DC:85:9E:C7:91:1B:4C:56:76:A0:18:C8:91:B6:E9:FC:97:36:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F093CFFAB24DF843C663312C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83a68a18-a4bd-3266-90e8-086888a47451.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     36624
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:ff:ab:24:df:84:3c:66:33:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=b4d62937-70cb-413b-9db6-2ce811f7b6e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:72:6c:e2:aa:46:93:81:b0:60:ca:71:dc:38:
                    f0:c4:5a:a0:28:34:df:b7:46:12:5e:84:0f:bc:75:
                    34:cb:f9:73:88:b7:74:15:94:a0:c4:17:b0:7e:89:
                    95:49:7d:ca:1f:b4:48:5c:72:b6:e6:38:c2:e7:87:
                    1d:cc:2b:11:d9:ff:ac:2a:ba:ab:95:56:7e:38:8d:
                    1a:62:ca:39:46:dd:b2:09:d1:e8:7f:f7:2b:d6:a7:
                    b9:fd:8a:50:fe:ce:d6:9b:f7:ee:9c:05:37:1f:dd:
                    8c:88:8a:80:45:df:a4:27:39:1a:4a:2b:7f:77:22:
                    7c:21:29:5f:8a:72:4d:c2:0d:c0:d2:50:fc:ae:a2:
                    df:19:bd:28:22:46:20:48:4a:7f:d0:38:42:5a:63:
                    9b:d7:0b:63:b2:b4:3e:5e:f7:f4:cf:80:50:8f:48:
                    18:0f:6d:e5:20:04:2c:09:06:27:b1:fb:a4:8c:44:
                    7a:f2:ad:2d:59:77:a3:49:c8:65:49:c5:39:95:c9:
                    3b:83:ff:22:75:d8:e1:a1:d2:b2:50:7d:28:ef:e3:
                    ba:15:66:8f:29:c0:8f:9f:3b:3f:20:5e:35:4e:21:
                    09:bc:a2:9b:c5:82:5e:f5:dc:3c:6f:1c:e4:ac:39:
                    bc:59:99:ba:72:00:2e:64:0b:bb:b6:42:34:a7:1b:
                    c5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DC:85:9E:C7:91:1B:4C:56:76:A0:18:C8:91:B6:E9:FC:97:36:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83a68a18-a4bd-3266-90e8-086888a47451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:fd:87:90:d2:84:0e:0e:23:16:bf:9b:71:2d:0a:4e:a0:a1:
         85:2c:62:2b:cf:89:3e:fa:89:eb:d8:31:42:26:5b:04:84:11:
         3e:5a:98:d4:1b:02:57:4e:5f:6e:3a:0c:03:69:64:80:20:24:
         3b:41:bb:e9:28:a0:8a:a7:d9:e5:e2:08:85:fe:47:fb:f5:da:
         6f:04:26:41:2c:8e:5f:cb:35:28:9a:90:17:80:ac:86:c3:67:
         61:51:a6:40:6d:5c:fe:9b:b6:af:0a:8e:ad:b5:9d:ee:99:ff:
         f6:e0:7d:ca:a8:03:c4:c5:a1:40:52:29:1b:ce:02:15:41:7f:
         2a:04:75:f1:b0:00:a2:e7:6f:f2:2d:b9:3c:ec:04:80:0c:2a:
         9a:b2:ab:1f:9f:dc:34:4b:91:bb:d3:93:de:6c:02:ce:95:14:
         47:50:2a:56:9c:61:9d:44:27:77:03:f4:0b:94:73:42:88:d4:
         8d:23:ab:95:78:91:69:be:f5:5f:46:09:0e:31:6b:3e:8f:76:
         b0:9f:ed:32:37:44:d5:04:f2:57:14:52:37:eb:5b:b9:9c:95:
         46:b3:14:92:92:ac:1a:2a:4d:6c:60:28:a5:e1:94:32:8b:d5:
         b8:e8:80:f1:f0:61:fb:fd:48:d7:83:a3:bf:c7:0c:e4:17:e7:
         cf:0f:84:33
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8JPP+rJN+EPGYzEsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
YjRkNjI5MzctNzBjYi00MTNiLTlkYjYtMmNlODExZjdiNmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nJs4qpGk4GwYMpx3DjwxFqgKDTft0YSXoQP
vHU0y/lziLd0FZSgxBewfomVSX3KH7RIXHK25jjC54cdzCsR2f+sKrqrlVZ+OI0a
Yso5Rt2yCdHof/cr1qe5/YpQ/s7Wm/funAU3H92MiIqARd+kJzkaSit/dyJ8ISlf
inJNwg3A0lD8rqLfGb0oIkYgSEp/0DhCWmOb1wtjsrQ+Xvf0z4BQj0gYD23lIAQs
CQYnsfukjER68q0tWXejSchlScU5lck7g/8iddjhodKyUH0o7+O6FWaPKcCPnzs/
IF41TiEJvKKbxYJe9dw8bxzkrDm8WZm6cgAuZAu7tkI0pxvFLwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPzchZ7HkRtMVnagGMiRtun8lzaaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODNhNjhhMTgtYTRiZC0z
MjY2LTkwZTgtMDg2ODg4YTQ3NDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBV/YeQ0oQODiMWv5txLQpOoKGFLGIrz4k++onr
2DFCJlsEhBE+WpjUGwJXTl9uOgwDaWSAICQ7QbvpKKCKp9nl4giF/kf79dpvBCZB
LI5fyzUompAXgKyGw2dhUaZAbVz+m7avCo6ttZ3umf/24H3KqAPExaFAUikbzgIV
QX8qBHXxsACi52/yLbk87ASADCqasqsfn9w0S5G705PebALOlRRHUCpWnGGdRCd3
A/QLlHNCiNSNI6uVeJFpvvVfRgkOMWs+j3awn+0yN0TVBPJXFFI361u5nJVGsxSS
kqwaKk1sYCil4ZQyi9W46IDx8GH7/UjXg6O/xwzkF+fPD4Qz
-----END CERTIFICATE-----
Generated at Sun Oct 4 07:11:05 2026 by rpki-client