Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fcc4673-bd19-372e-81e9-9bcdb5bd76c0.roa
File:                     9fcc4673-bd19-372e-81e9-9bcdb5bd76c0.roa (raw, json)
Hash identifier:          Svx46hQOJVmaYbf/3ICnhP6wSDFV/Iz0my8zDVkYt5g=
Subject key identifier:   40:14:DB:76:8B:84:05:29:8D:B7:F4:40:DE:B5:46:D2:62:CA:27:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA11AE2CD72DB44AA66BDD180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fcc4673-bd19-372e-81e9-9bcdb5bd76c0.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     22547
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:e2:cd:72:db:44:aa:66:bd:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=24cac023-0b5d-467c-83d6-6d7eae671ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2e:5e:08:0f:c6:08:83:54:f1:bc:88:a3:f8:
                    43:ef:72:3f:38:6d:31:57:09:37:26:5e:b5:03:4d:
                    73:e6:68:43:b0:a5:48:6f:92:92:6e:0f:e6:03:d8:
                    f1:9e:4e:10:c4:de:48:12:70:b5:f4:2e:e0:7b:da:
                    d0:fb:69:e0:e9:f9:fd:18:db:4c:8b:f0:17:29:d1:
                    fa:29:12:d8:54:f6:d1:e8:64:4f:2a:c8:3f:46:a4:
                    0d:79:73:94:94:55:e7:0e:98:e5:69:cc:80:1e:c3:
                    c0:94:d2:1c:bb:ea:8a:f2:4d:58:31:f4:1b:dc:af:
                    2b:18:c3:5b:bc:00:8c:10:32:2b:a7:f9:cc:bb:b0:
                    0d:38:a2:54:a9:ba:93:3e:e5:74:2d:f2:89:89:53:
                    91:63:47:c5:d2:cc:6a:aa:a7:1a:79:b1:86:b0:c0:
                    f9:df:bf:98:e2:68:49:63:f4:37:21:a4:ed:8b:6b:
                    3a:29:a9:e7:f1:17:54:8e:e0:30:f3:45:27:85:11:
                    d9:9b:6e:99:02:b0:56:d0:44:62:ec:ff:28:38:2c:
                    a6:ff:49:64:65:77:2b:85:b0:97:cd:c9:eb:c0:aa:
                    50:a2:73:b6:a7:a3:e0:b8:6a:d0:4f:b7:fe:ce:42:
                    f9:fe:75:1f:6d:f5:84:67:11:38:73:00:4f:0a:e8:
                    68:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:14:DB:76:8B:84:05:29:8D:B7:F4:40:DE:B5:46:D2:62:CA:27:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fcc4673-bd19-372e-81e9-9bcdb5bd76c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:fc:c8:e4:0f:f7:ad:4a:99:d3:61:bf:39:3c:61:c0:a2:29:
         ab:12:48:d4:ad:9f:7d:ca:ef:04:ef:72:7e:1f:3d:67:af:8f:
         7a:bf:65:bc:ce:74:a0:d3:26:a3:85:49:f1:58:63:fc:e4:15:
         52:2a:4b:c2:45:09:89:b8:e9:f7:81:15:06:4d:a6:c4:d4:9f:
         3d:67:a1:cb:17:b6:fc:3a:dd:ce:35:ef:e2:1f:4a:d1:b2:44:
         b3:77:d1:18:2a:65:98:92:f6:61:55:75:32:7f:e7:18:d3:6f:
         1a:f3:7a:4d:ad:bb:97:1d:df:f2:e4:06:d3:5b:16:c4:3c:d1:
         89:9d:9d:76:11:40:39:89:50:a2:b3:5a:63:c2:da:8b:98:66:
         01:66:f4:ea:51:0d:8c:d1:05:e2:a0:6e:cb:de:68:5f:b6:ad:
         25:18:79:dc:fa:72:df:c0:7c:03:1a:8e:9c:ec:90:b9:5c:28:
         ec:a8:13:d0:9c:9e:b7:4b:b2:aa:fc:dd:6a:90:28:7f:7a:f3:
         06:d9:99:c2:dd:89:1a:f0:66:9c:8a:a9:ef:d6:10:3b:a5:57:
         a7:53:b7:94:23:4b:95:e8:66:d3:f7:c2:cd:3f:dc:0a:ae:05:
         54:21:0a:31:f9:4d:fd:0b:43:85:2f:88:f4:c3:e1:94:81:60:
         2e:37:46:bd
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2hGuLNcttEqma90YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk
MjRjYWMwMjMtMGI1ZC00NjdjLTgzZDYtNmQ3ZWFlNjcxYWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky5eCA/GCINU8byIo/hD73I/OG0xVwk3Jl61
A01z5mhDsKVIb5KSbg/mA9jxnk4QxN5IEnC19C7ge9rQ+2ng6fn9GNtMi/AXKdH6
KRLYVPbR6GRPKsg/RqQNeXOUlFXnDpjlacyAHsPAlNIcu+qK8k1YMfQb3K8rGMNb
vACMEDIrp/nMu7ANOKJUqbqTPuV0LfKJiVORY0fF0sxqqqcaebGGsMD537+Y4mhJ
Y/Q3IaTti2s6Kann8RdUjuAw80UnhRHZm26ZArBW0ERi7P8oOCym/0lkZXcrhbCX
zcnrwKpQonO2p6PguGrQT7f+zkL5/nUfbfWEZxE4cwBPCuho5QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEAU23aLhAUpjbf0QN61RtJiyidpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWZjYzQ2NzMtYmQxOS0z
NzJlLTgxZTktOWJjZGI1YmQ3NmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBe/MjkD/etSpnTYb85PGHAoimrEkjUrZ99yu8E
73J+Hz1nr496v2W8znSg0yajhUnxWGP85BVSKkvCRQmJuOn3gRUGTabE1J89Z6HL
F7b8Ot3ONe/iH0rRskSzd9EYKmWYkvZhVXUyf+cY028a83pNrbuXHd/y5AbTWxbE
PNGJnZ12EUA5iVCis1pjwtqLmGYBZvTqUQ2M0QXioG7L3mhftq0lGHnc+nLfwHwD
Go6c7JC5XCjsqBPQnJ63S7Kq/N1qkCh/evMG2ZnC3Yka8Gaciqnv1hA7pVenU7eU
I0uV6GbT98LNP9wKrgVUIQox+U39C0OFL4j0w+GUgWAuN0a9
-----END CERTIFICATE-----
Generated at Wed May 13 06:46:58 2026 by rpki-client