Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bf312e1-9f86-3ec7-aa9a-7f73c1c40a07.roa
File:                     9bf312e1-9f86-3ec7-aa9a-7f73c1c40a07.roa (raw, json)
Hash identifier:          /RkdCG8x7Lnnc00QFUg45PQR+T49yWjCJsfh+H69zkY=
Subject key identifier:   38:C2:A2:1E:E5:43:30:ED:02:40:34:F4:40:CB:8D:C5:C4:84:CE:22
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A78198674859715BE610E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bf312e1-9f86-3ec7-aa9a-7f73c1c40a07.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396555
IP address blocks:        2001:500:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:81:98:67:48:59:71:5b:e6:10:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=49762ce5-eb27-4a2a-8ecc-6035a135a2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a2:e7:1a:a8:dc:81:b4:75:09:3b:22:22:38:
                    a7:c0:df:4f:cb:e5:c5:e7:08:88:c9:38:84:4f:d6:
                    5b:06:d4:c5:b1:36:a8:d4:f7:61:85:f8:45:b4:c2:
                    93:83:3d:21:99:19:80:e2:67:06:06:49:33:bb:cd:
                    86:34:25:d4:80:55:c9:58:f0:13:10:8e:41:ee:12:
                    d7:88:ea:0a:67:d8:2f:e9:4d:31:08:61:ca:ac:44:
                    dc:e5:91:9f:fc:11:26:e0:e4:18:db:fc:60:86:ff:
                    88:a6:e5:8c:28:4b:e1:4e:26:a5:bc:18:97:7e:f5:
                    b7:07:b7:97:41:0a:1a:4b:d0:5c:d7:f1:cb:d8:6b:
                    b4:e9:a2:69:30:8d:5e:f3:5c:0c:84:ac:ad:88:2f:
                    96:fc:0d:43:21:27:d9:15:6b:64:16:8b:d6:d5:3a:
                    bf:e2:94:9c:ff:6a:30:57:72:71:c7:7d:79:eb:cb:
                    e9:fd:46:d4:26:bb:77:8f:99:15:35:38:48:1b:c7:
                    98:ae:76:de:f7:fc:f9:00:0b:15:aa:c4:46:09:3a:
                    3b:60:31:e3:8e:c4:95:4a:d2:41:53:2a:52:86:86:
                    6c:3b:2d:14:b8:22:cc:ee:aa:b4:b3:f4:49:17:04:
                    d3:c3:da:21:36:97:f2:18:06:f3:c1:54:ff:ee:99:
                    75:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C2:A2:1E:E5:43:30:ED:02:40:34:F4:40:CB:8D:C5:C4:84:CE:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bf312e1-9f86-3ec7-aa9a-7f73c1c40a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:4b:bd:73:ba:fb:96:d6:fe:d2:ed:21:ca:28:d8:b1:ad:d1:
         e1:d3:02:f6:ae:74:22:7f:80:13:43:e4:47:50:b9:d0:98:c5:
         5d:42:a3:6b:9b:57:f5:7d:74:a3:27:8c:70:3c:5d:48:9a:1b:
         02:31:5f:88:8b:f0:4b:cc:a9:e3:aa:81:8f:f3:3a:d6:ee:c0:
         4a:6d:03:5c:cc:b7:5e:31:57:4f:16:c5:6f:0d:15:26:14:48:
         ca:7f:66:e1:01:80:83:61:f5:69:65:61:30:bd:d1:f5:ef:5d:
         cb:6c:70:53:ac:c0:34:53:49:6b:ef:fe:34:20:8c:dd:49:95:
         e2:a3:00:aa:3d:e7:d0:26:98:6d:e0:21:d2:e6:05:5a:17:ef:
         04:8c:47:f8:e7:ab:07:68:80:12:b5:95:d1:62:28:c7:53:29:
         f6:5e:e6:c5:1d:ec:f0:19:bf:8e:03:ba:28:4f:06:92:06:8c:
         70:52:a9:49:b8:7c:78:f7:fd:14:98:3d:64:a5:58:04:02:24:
         7b:f4:02:bb:62:7a:80:45:dc:60:6b:3c:1f:e0:60:dd:2b:f3:
         39:cb:18:e1:3a:f2:03:d8:5e:58:72:27:61:36:14:d6:a3:8b:
         5b:17:0f:9f:94:23:80:cb:58:22:5e:3d:4f:57:2e:9d:6d:e9:
         46:80:a6:c9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Dp4GYZ0hZcVvmEOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
NDk3NjJjZTUtZWIyNy00YTJhLThlY2MtNjAzNWExMzVhMmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKLnGqjcgbR1CTsiIjinwN9Py+XF5wiIyTiE
T9ZbBtTFsTao1PdhhfhFtMKTgz0hmRmA4mcGBkkzu82GNCXUgFXJWPATEI5B7hLX
iOoKZ9gv6U0xCGHKrETc5ZGf/BEm4OQY2/xghv+IpuWMKEvhTialvBiXfvW3B7eX
QQoaS9Bc1/HL2Gu06aJpMI1e81wMhKytiC+W/A1DISfZFWtkFovW1Tq/4pSc/2ow
V3Jxx31568vp/UbUJrt3j5kVNThIG8eYrnbe9/z5AAsVqsRGCTo7YDHjjsSVStJB
UypShoZsOy0UuCLM7qq0s/RJFwTTw9ohNpfyGAbzwVT/7pl1GQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDjCoh7lQzDtAkA09EDLjcXEhM4iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWJmMzEyZTEtOWY4Ni0z
ZWM3LWFhOWEtN2Y3M2MxYzQwYTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACRLvXO6+5bW/tLtIcoo2LGt0eHTAvaudCJ/gBND5EdQudCYxV1C
o2ubV/V9dKMnjHA8XUiaGwIxX4iL8EvMqeOqgY/zOtbuwEptA1zMt14xV08WxW8N
FSYUSMp/ZuEBgINh9WllYTC90fXvXctscFOswDRTSWvv/jQgjN1JleKjAKo959Am
mG3gIdLmBVoX7wSMR/jnqwdogBK1ldFiKMdTKfZe5sUd7PAZv44DuihPBpIGjHBS
qUm4fHj3/RSYPWSlWAQCJHv0ArtieoBF3GBrPB/gYN0r8znLGOE68gPYXlhyJ2E2
FNaji1sXD5+UI4DLWCJePU9XLp1t6UaApsk=
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:15:58 2026 by rpki-client