Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9aebe1b2-c32b-3569-9fb3-dd8de58c62d6.roa
File:                     9aebe1b2-c32b-3569-9fb3-dd8de58c62d6.roa (raw, json)
Hash identifier:          9VKUlvvduyHZXXzyBU2JE+oirtOGrvmZOqEydQ5yuxU=
Subject key identifier:   DA:A1:FD:C6:A0:58:38:98:27:C6:50:CE:32:63:AC:47:CE:1B:E0:DC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6DD4C19414FFA2603B7A3300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9aebe1b2-c32b-3569-9fb3-dd8de58c62d6.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     396550
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:c1:94:14:ff:a2:60:3b:7a:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=3cbf1ef9-bf59-430e-80c1-68d3518a7bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:75:7e:60:98:9b:9c:b1:01:b0:9c:0e:24:3d:
                    d9:a1:7b:c5:ea:d0:5a:f8:f9:89:c2:4e:17:1b:92:
                    b9:83:bf:54:80:87:41:56:d7:e1:64:99:b9:3b:80:
                    30:91:08:d3:4f:23:b7:bf:50:1a:62:17:1c:c0:62:
                    59:22:24:95:21:bb:19:78:99:12:3e:65:bd:61:69:
                    5f:30:4f:68:62:fe:d4:78:e7:81:79:b7:78:6e:25:
                    d0:6f:a9:c5:5c:cd:67:af:17:0d:e2:c1:af:e9:e1:
                    b5:05:4b:07:77:f3:2c:2b:20:a4:f4:af:6e:8c:70:
                    ec:b6:43:64:6c:6b:f6:5d:fd:d2:08:e9:0c:c9:9c:
                    c0:96:b6:74:d2:25:b2:75:c1:7b:d7:22:c5:e4:64:
                    2d:f2:2c:2f:57:0b:2d:44:42:fd:da:88:fe:39:a1:
                    34:24:1c:84:3d:fc:fc:42:d4:32:7f:20:c5:c2:74:
                    a2:05:86:82:98:40:67:35:9e:d5:83:1d:c1:00:4c:
                    2d:f0:6b:40:20:da:0d:fb:c7:c3:7b:89:f4:d1:ed:
                    4a:63:d3:a6:e0:7b:65:1f:98:c1:59:78:5f:97:88:
                    d2:5c:e8:99:31:6b:93:ac:a6:66:3d:89:a2:cb:2c:
                    d9:37:39:fb:18:f8:89:c2:6b:5b:20:84:b1:87:c7:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A1:FD:C6:A0:58:38:98:27:C6:50:CE:32:63:AC:47:CE:1B:E0:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9aebe1b2-c32b-3569-9fb3-dd8de58c62d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:df:bb:48:e4:24:09:09:15:49:93:2a:0c:69:c2:e9:d8:68:
         b8:24:13:df:59:fb:3b:b1:bd:23:1b:d6:e0:a3:b8:6b:1d:41:
         67:a1:64:fb:6d:ba:a0:02:17:67:a4:ca:33:9c:ba:4b:c1:3a:
         48:70:77:65:99:cf:5c:97:56:fc:41:05:31:42:94:b5:39:9a:
         04:3b:90:0f:71:fe:c7:33:92:36:e6:6e:35:33:7a:2c:cb:da:
         bf:71:13:ae:8c:ff:0d:0b:ba:a3:bd:d3:39:a0:33:21:8e:fe:
         83:e4:ad:03:f5:1c:2b:16:14:7c:36:aa:d0:98:4a:34:69:fe:
         ca:23:a7:ba:8f:f8:e0:11:9b:8c:3a:ca:26:c9:d7:e8:c4:3c:
         83:88:75:4a:f1:03:b0:fb:c7:e7:f0:67:37:ba:0f:30:fb:81:
         d9:bc:23:63:de:69:63:94:3f:5e:d8:a1:d5:3e:8a:61:8d:d4:
         04:1a:84:02:aa:18:a3:ea:e7:87:a5:4b:25:c5:04:cf:4a:88:
         29:2d:75:45:cf:70:bc:a0:8a:f4:f2:69:f9:a1:e2:6f:90:26:
         6e:de:92:e6:cb:61:ec:a7:01:a0:81:be:74:87:8e:29:c2:67:
         3e:9a:56:65:64:c3:b5:b5:44:5f:6e:da:f7:c4:a5:c8:60:26:
         a0:4b:f0:22
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5t1MGUFP+iYDt6MwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk
M2NiZjFlZjktYmY1OS00MzBlLTgwYzEtNjhkMzUxOGE3YmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHV+YJibnLEBsJwOJD3ZoXvF6tBa+PmJwk4X
G5K5g79UgIdBVtfhZJm5O4AwkQjTTyO3v1AaYhccwGJZIiSVIbsZeJkSPmW9YWlf
ME9oYv7UeOeBebd4biXQb6nFXM1nrxcN4sGv6eG1BUsHd/MsKyCk9K9ujHDstkNk
bGv2Xf3SCOkMyZzAlrZ00iWydcF71yLF5GQt8iwvVwstREL92oj+OaE0JByEPfz8
QtQyfyDFwnSiBYaCmEBnNZ7Vgx3BAEwt8GtAINoN+8fDe4n00e1KY9Om4HtlH5jB
WXhfl4jSXOiZMWuTrKZmPYmiyyzZNzn7GPiJwmtbIISxh8f10wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNqh/cagWDiYJ8ZQzjJjrEfOG+DcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWFlYmUxYjItYzMyYi0z
NTY5LTlmYjMtZGQ4ZGU1OGM2MmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAnCU
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAg37tI5CQJCRVJkyoMacLp2Gi4JBPfWfs7sb0j
G9bgo7hrHUFnoWT7bbqgAhdnpMoznLpLwTpIcHdlmc9cl1b8QQUxQpS1OZoEO5AP
cf7HM5I25m41M3osy9q/cROujP8NC7qjvdM5oDMhjv6D5K0D9RwrFhR8NqrQmEo0
af7KI6e6j/jgEZuMOsomydfoxDyDiHVK8QOw+8fn8Gc3ug8w+4HZvCNj3mljlD9e
2KHVPophjdQEGoQCqhij6ueHpUslxQTPSogpLXVFz3C8oIr08mn5oeJvkCZu3pLm
y2HspwGggb50h44pwmc+mlZlZMO1tURfbtr3xKXIYCagS/Ai
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:37:20 2026 by rpki-client