Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b8b2665-401f-327a-b5a3-7f5d259f93fb.roa
File:                     9b8b2665-401f-327a-b5a3-7f5d259f93fb.roa (raw, json)
Hash identifier:          AONDboBfbyxi3D5HyS6C7IpBNf16lQCD2wuyxAd/fgs=
Subject key identifier:   B0:4E:90:88:B9:9C:B9:F1:DF:03:EC:EA:6F:FF:AD:A1:F9:5F:4A:8E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498B482BFD91747E1B5DDF1C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b8b2665-401f-327a-b5a3-7f5d259f93fb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397205
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:48:2b:fd:91:74:7e:1b:5d:df:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0f0b0aa9-b281-432a-be87-e7cb0a2e5122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5f:28:80:3a:cc:bc:36:cc:61:71:fa:47:f1:
                    50:96:c4:eb:af:a0:5d:de:00:cc:26:f8:a9:88:2d:
                    aa:2d:db:c0:53:82:57:1b:e8:b9:f9:c0:36:ff:f8:
                    80:8a:00:d4:32:60:9d:71:6d:3c:ad:0a:d5:c9:09:
                    91:c1:46:df:da:fa:9d:9e:48:5f:9d:77:98:bd:34:
                    9f:0a:66:d3:89:fb:c7:d9:af:d9:85:72:d2:68:fc:
                    4a:9b:65:35:7a:5c:f2:5b:55:cf:06:1e:6d:f8:1b:
                    40:64:67:4a:35:e7:0f:ea:85:60:0c:00:99:69:c4:
                    20:32:81:33:4f:e4:ed:85:f7:a2:be:da:bd:aa:18:
                    d9:7c:4a:86:72:03:a9:f6:79:71:96:db:39:43:1d:
                    76:ac:5f:22:33:5b:3b:77:4c:21:73:d0:bc:b9:1b:
                    1e:73:56:21:c2:df:f1:a0:10:14:12:cc:f8:87:a2:
                    94:f1:86:44:44:f9:c1:9b:bb:13:48:90:1a:f8:fa:
                    d9:5b:67:8c:7c:fa:b9:3f:f5:b0:56:6b:68:16:20:
                    38:65:f3:7c:09:10:3f:9c:be:24:cd:bb:84:06:50:
                    c6:20:f8:28:53:1d:3e:30:76:5b:fd:cb:c4:4d:b0:
                    66:7f:a1:07:99:34:fb:0f:9a:41:7b:ff:c6:00:da:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4E:90:88:B9:9C:B9:F1:DF:03:EC:EA:6F:FF:AD:A1:F9:5F:4A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b8b2665-401f-327a-b5a3-7f5d259f93fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a0:89:ab:e0:fe:08:98:8a:bf:36:89:57:75:06:f5:40:77:
         5f:18:ad:9b:6d:25:5e:d5:97:3f:2f:d4:34:2e:f0:29:54:2f:
         e8:ee:ac:69:33:de:53:d2:c0:66:22:43:44:50:b7:e0:d7:6e:
         25:ef:19:9f:7f:fb:56:1c:d4:b5:db:4a:a7:28:f3:3c:e1:bd:
         dc:e8:59:3c:d7:54:f6:f4:c3:be:8a:5d:e5:1f:10:c3:0a:f3:
         a8:20:84:a0:0e:96:49:09:ba:9d:da:d5:aa:43:d1:9e:46:40:
         99:fc:2a:c8:eb:12:81:75:72:df:12:b1:59:c1:60:47:14:b7:
         94:42:f9:b9:c1:c9:e2:82:4e:b3:fb:1e:d3:0d:5a:2a:cc:4f:
         96:e8:df:9a:ca:2b:ed:14:01:0d:e3:b3:bf:ff:3e:59:8e:db:
         f4:57:69:71:8c:b0:cf:3f:9b:d7:9b:f9:3b:88:8d:ad:00:47:
         2e:be:7e:d4:2d:9c:cb:97:7c:26:3b:22:7a:df:71:5f:4b:b6:
         7e:54:9e:b5:9a:f6:a1:44:0b:ab:14:0f:b2:9d:c8:06:d2:cc:
         65:5c:ce:94:25:aa:6f:14:47:bf:bf:6f:00:9a:23:6b:36:c3:
         62:bb:fa:1f:6c:0f:4d:dc:ca:19:c5:11:3d:ac:6f:f0:cf:3d:
         c0:ca:68:8c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Ji0gr/ZF0fhtd3xwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MGYwYjBhYTktYjI4MS00MzJhLWJlODctZTdjYjBhMmU1MTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm18ogDrMvDbMYXH6R/FQlsTrr6Bd3gDMJvip
iC2qLdvAU4JXG+i5+cA2//iAigDUMmCdcW08rQrVyQmRwUbf2vqdnkhfnXeYvTSf
CmbTifvH2a/ZhXLSaPxKm2U1elzyW1XPBh5t+BtAZGdKNecP6oVgDACZacQgMoEz
T+Tthfeivtq9qhjZfEqGcgOp9nlxlts5Qx12rF8iM1s7d0whc9C8uRsec1Yhwt/x
oBAUEsz4h6KU8YZERPnBm7sTSJAa+PrZW2eMfPq5P/WwVmtoFiA4ZfN8CRA/nL4k
zbuEBlDGIPgoUx0+MHZb/cvETbBmf6EHmTT7D5pBe//GANrwLQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLBOkIi5nLnx3wPs6m//raH5X0qOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWI4YjI2NjUtNDAxZi0z
MjdhLWI1YTMtN2Y1ZDI1OWY5M2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAVoImr4P4ImIq/NolXdQb1QHdfGK2bbSVe1Zc/
L9Q0LvApVC/o7qxpM95T0sBmIkNEULfg124l7xmff/tWHNS120qnKPM84b3c6Fk8
11T29MO+il3lHxDDCvOoIISgDpZJCbqd2tWqQ9GeRkCZ/CrI6xKBdXLfErFZwWBH
FLeUQvm5wcnigk6z+x7TDVoqzE+W6N+ayivtFAEN47O//z5Zjtv0V2lxjLDPP5vX
m/k7iI2tAEcuvn7ULZzLl3wmOyJ633FfS7Z+VJ61mvahRAurFA+yncgG0sxlXM6U
JapvFEe/v28AmiNrNsNiu/ofbA9N3MoZxRE9rG/wzz3AymiM
-----END CERTIFICATE-----
Generated at Sun Sep 27 16:44:20 2026 by rpki-client