Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/989efb90-8fc1-3096-8925-4dc64f638d88.roa
File:                     989efb90-8fc1-3096-8925-4dc64f638d88.roa (raw, json)
Hash identifier:          6VfcpIj2imWn+K0C4pEwvVD94/m57+CdKY9yY3YgWJQ=
Subject key identifier:   01:B0:03:5E:C3:26:96:54:DE:46:EE:D5:2C:61:B7:4E:A3:04:2D:2F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497F8266AE624DEDBA3E88F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/989efb90-8fc1-3096-8925-4dc64f638d88.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396547
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:82:66:ae:62:4d:ed:ba:3e:88:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e2691f13-08a7-41d2-a928-331b361d7014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:33:72:8f:2e:1a:29:7c:fb:ec:35:06:c3:
                    1f:29:68:ee:98:f3:d4:cf:8a:88:1a:c0:9d:60:d1:
                    02:cc:ee:9e:1a:77:90:82:a8:0b:77:95:a3:99:67:
                    51:ed:32:0c:25:d5:40:a5:53:17:34:c0:bd:01:d4:
                    d5:b8:ff:1d:61:9b:df:98:e6:ab:49:2e:10:56:69:
                    10:c1:ce:ac:82:a6:01:35:cd:e1:d5:2b:9e:a6:d9:
                    ef:79:d3:8b:4f:4b:cb:cc:c8:05:a3:d8:9b:60:d2:
                    f7:0f:b4:56:58:71:d7:87:7b:a5:1e:7a:f9:01:cb:
                    3d:fa:85:95:b7:a9:80:e9:45:cf:76:bf:1c:87:8a:
                    e2:3a:c7:6c:96:29:7d:cf:81:ec:f7:8e:ab:31:a0:
                    5a:e7:d6:95:d2:b8:62:ee:0a:05:ff:b3:15:b7:42:
                    a4:3b:1c:05:e9:a3:26:57:dc:02:ad:e9:e3:86:48:
                    9e:9e:e2:9b:27:a7:05:0e:db:ca:f7:43:9e:17:13:
                    e6:4f:ba:d0:2e:ad:87:22:fb:ab:76:e2:0c:93:81:
                    78:ad:f0:82:34:5c:33:fe:95:6c:9c:60:96:7c:6e:
                    15:04:5e:45:bc:77:ed:07:0f:1f:f9:95:a1:de:80:
                    f4:3b:11:d0:84:03:38:9f:c3:fc:ca:0f:2f:06:75:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B0:03:5E:C3:26:96:54:DE:46:EE:D5:2C:61:B7:4E:A3:04:2D:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/989efb90-8fc1-3096-8925-4dc64f638d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:38:db:64:a5:6e:21:5b:90:d4:61:83:81:01:8a:a5:e3:ce:
         dc:5c:fe:46:4a:81:8c:5f:07:ce:54:27:71:4e:6f:ee:d2:52:
         3d:b0:b9:fa:1d:26:a1:ad:17:ee:c0:3b:59:99:28:53:a5:c8:
         8f:f9:e0:fd:ec:0d:10:97:03:b1:28:f6:d4:e3:1b:a9:7e:0d:
         4e:06:bf:9d:36:ce:d2:18:b9:cc:cf:f2:f9:3e:2c:dc:56:6e:
         2d:ae:35:2b:29:0d:a6:eb:de:72:16:14:7f:6f:c6:26:63:be:
         54:d0:7e:d1:0e:92:9b:12:21:c2:eb:86:68:d9:ae:b3:3c:3b:
         53:82:db:32:0f:3b:01:47:eb:95:1e:ae:0d:f7:f8:18:a3:63:
         a9:40:86:a7:22:4f:4a:73:0b:e7:ba:95:5c:4e:f8:48:09:b2:
         cf:4e:31:9e:d1:8d:b0:d6:87:ef:1a:78:69:5f:a6:d6:ff:52:
         40:9c:a1:ae:17:82:da:2b:a2:68:43:93:40:89:49:db:ed:3c:
         57:60:23:b3:11:55:0c:15:fd:99:95:b5:a8:29:b0:38:fe:4a:
         8b:90:d1:61:de:58:66:ea:53:1d:47:79:3c:da:43:a4:86:a9:
         41:b0:45:1f:55:5a:80:0d:f3:b0:71:29:7c:57:3e:02:f1:5d:
         c9:ab:b1:bf
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jf4JmrmJN7bo+iPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTI2OTFmMTMtMDhhNy00MWQyLWE5MjgtMzMxYjM2MWQ3MDE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOwzco8uGil8++w1BsMfKWjumPPUz4qIGsCd
YNECzO6eGneQgqgLd5WjmWdR7TIMJdVApVMXNMC9AdTVuP8dYZvfmOarSS4QVmkQ
wc6sgqYBNc3h1SueptnvedOLT0vLzMgFo9ibYNL3D7RWWHHXh3ulHnr5Acs9+oWV
t6mA6UXPdr8ch4riOsdslil9z4Hs946rMaBa59aV0rhi7goF/7MVt0KkOxwF6aMm
V9wCrenjhkienuKbJ6cFDtvK90OeFxPmT7rQLq2HIvurduIMk4F4rfCCNFwz/pVs
nGCWfG4VBF5FvHftBw8f+ZWh3oD0OxHQhAM4n8P8yg8vBnWGBQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAGwA17DJpZU3kbu1Sxht06jBC0vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTg5ZWZiOTAtOGZjMS0z
MDk2LTg5MjUtNGRjNjRmNjM4ZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAtONtkpW4hW5DUYYOBAYql487cXP5GSoGMXwfO
VCdxTm/u0lI9sLn6HSahrRfuwDtZmShTpciP+eD97A0QlwOxKPbU4xupfg1OBr+d
Ns7SGLnMz/L5PizcVm4trjUrKQ2m695yFhR/b8YmY75U0H7RDpKbEiHC64Zo2a6z
PDtTgtsyDzsBR+uVHq4N9/gYo2OpQIanIk9KcwvnupVcTvhICbLPTjGe0Y2w1ofv
GnhpX6bW/1JAnKGuF4LaK6JoQ5NAiUnb7TxXYCOzEVUMFf2ZlbWoKbA4/kqLkNFh
3lhm6lMdR3k82kOkhqlBsEUfVVqADfOwcSl8Vz4C8V3Jq7G/
-----END CERTIFICATE-----
Generated at Tue Oct 6 22:14:19 2026 by rpki-client