Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc739e4-40a7-3c37-8dc9-243d52f2ac21.roa
File:                     9fc739e4-40a7-3c37-8dc9-243d52f2ac21.roa (raw, json)
Hash identifier:          xl6rLeTdVL18MOt+XulZIZr7ccQ6fUwfyc1m3Ln3KhE=
Subject key identifier:   32:F2:F7:73:87:FC:B9:BF:DD:DB:3B:1A:C4:42:D0:26:21:E6:54:2D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4974F351EDEF7D37C6758E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc739e4-40a7-3c37-8dc9-243d52f2ac21.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396605
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:f3:51:ed:ef:7d:37:c6:75:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=359a840f-9831-4599-8a1b-e66be0810e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:75:40:1d:f7:ea:94:74:2f:a9:71:37:41:
                    82:a2:b5:56:10:29:cb:75:b5:40:a7:99:0b:ae:ae:
                    a4:ae:25:cf:83:31:32:b8:df:ad:a0:bc:83:7c:63:
                    93:46:1d:01:1c:a0:0b:84:57:58:08:7c:c4:ce:02:
                    3b:7b:6d:0a:76:99:fc:dc:e5:b7:4f:dc:8d:00:49:
                    82:04:37:48:3a:df:dd:06:ea:28:e5:bd:5a:94:03:
                    ad:3e:94:b7:1a:34:03:99:f4:be:71:87:b7:cd:1e:
                    85:f4:db:66:31:5d:5b:68:69:32:2e:ad:03:12:92:
                    ef:c9:aa:c0:ba:5e:f5:73:db:74:81:b7:34:92:27:
                    c5:d9:f1:c1:bc:ee:50:8c:72:d5:47:db:68:2b:d7:
                    f5:d2:01:c0:6b:4f:67:4b:1a:e4:b0:3d:85:2c:2e:
                    cd:32:5b:e3:cc:e0:5f:f1:ce:2d:93:5b:64:9f:25:
                    aa:a0:27:6a:7e:77:b3:d4:87:0a:7b:db:d9:82:a3:
                    b1:e6:f7:6e:32:12:7e:47:c9:51:11:94:22:2e:e4:
                    a6:89:6b:ee:ee:1e:73:83:8d:93:e0:f2:80:d0:4b:
                    b6:3a:f3:d2:f8:48:39:22:d0:3a:49:c2:54:67:94:
                    16:14:16:35:a9:dc:72:97:c4:83:b7:eb:11:04:4a:
                    13:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F2:F7:73:87:FC:B9:BF:DD:DB:3B:1A:C4:42:D0:26:21:E6:54:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc739e4-40a7-3c37-8dc9-243d52f2ac21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:3e:d2:ae:52:6a:7a:d6:40:8b:97:9b:28:23:ea:7c:de:77:
         9e:b6:da:d7:f3:b8:2e:14:e4:85:1e:55:61:2f:85:f6:7c:bb:
         73:20:cf:4c:ff:92:36:d8:e5:89:b1:cf:ee:48:e0:5d:62:77:
         d1:ed:9b:53:ee:90:c6:a9:ae:37:8c:4d:de:69:25:e5:02:63:
         00:f6:9e:fa:d4:cb:a0:25:a9:87:ea:89:53:e4:db:92:a8:0b:
         d6:a7:67:43:76:99:ec:6c:36:90:b6:70:cf:4a:19:9a:de:ad:
         60:39:63:9f:20:18:64:1b:fa:2f:8a:90:6c:1a:af:ee:54:6b:
         51:1a:ff:4e:d5:8c:bc:88:7e:42:4a:24:f3:25:1b:c4:cb:b0:
         2d:1b:db:19:05:54:0f:c3:91:92:1d:9c:a5:0d:8b:a2:8e:0d:
         6f:86:39:27:86:9e:58:ed:7a:97:ef:74:b3:70:33:0b:a2:5b:
         33:08:cc:35:d9:24:82:4f:a4:1b:da:45:b6:5d:56:6e:7d:a5:
         fb:94:b4:10:00:95:aa:00:4a:e3:ba:75:81:0f:71:ce:80:cc:
         dd:15:22:d8:f6:9a:43:cd:1e:e6:ce:c5:f6:4d:b0:6c:a4:45:
         a0:07:99:ca:9a:46:40:bf:ea:cd:1b:28:21:12:2f:d8:50:93:
         9d:b0:aa:5d
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JdPNR7e99N8Z1jgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzU5YTg0MGYtOTgzMS00NTk5LThhMWItZTY2YmUwODEwZTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKB1QB336pR0L6lxN0GCorVWECnLdbVAp5kL
rq6kriXPgzEyuN+toLyDfGOTRh0BHKALhFdYCHzEzgI7e20Kdpn83OW3T9yNAEmC
BDdIOt/dBuoo5b1alAOtPpS3GjQDmfS+cYe3zR6F9NtmMV1baGkyLq0DEpLvyarA
ul71c9t0gbc0kifF2fHBvO5QjHLVR9toK9f10gHAa09nSxrksD2FLC7NMlvjzOBf
8c4tk1tknyWqoCdqfnez1IcKe9vZgqOx5vduMhJ+R8lREZQiLuSmiWvu7h5zg42T
4PKA0Eu2OvPS+Eg5ItA6ScJUZ5QWFBY1qdxyl8SDt+sRBEoTBwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDLy93OH/Lm/3ds7GsRC0CYh5lQtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWZjNzM5ZTQtNDBhNy0z
YzM3LThkYzktMjQzZDUyZjJhYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAmPtKuUmp61kCLl5soI+p83neettrX87guFOSF
HlVhL4X2fLtzIM9M/5I22OWJsc/uSOBdYnfR7ZtT7pDGqa43jE3eaSXlAmMA9p76
1MugJamH6olT5NuSqAvWp2dDdpnsbDaQtnDPShma3q1gOWOfIBhkG/ovipBsGq/u
VGtRGv9O1Yy8iH5CSiTzJRvEy7AtG9sZBVQPw5GSHZylDYuijg1vhjknhp5Y7XqX
73SzcDMLolszCMw12SSCT6Qb2kW2XVZufaX7lLQQAJWqAErjunWBD3HOgMzdFSLY
9ppDzR7mzsX2TbBspEWgB5nKmkZAv+rNGyghEi/YUJOdsKpd
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:59:32 2026 by rpki-client