Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3fc415a-b800-397d-9956-3558e1562447.roa
File:                     a3fc415a-b800-397d-9956-3558e1562447.roa (raw, json)
Hash identifier:          aXz1VtZdIA3bRqR7VFOj+1c0T7R6qSJBzGOjpDGUDSI=
Subject key identifier:   0C:29:AE:A3:F6:24:35:D6:45:3A:8A:63:AE:E5:A1:FB:87:98:E0:D9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498885A1D5E03BD86ABA5F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3fc415a-b800-397d-9956-3558e1562447.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397204
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:85:a1:d5:e0:3b:d8:6a:ba:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=06ef81b4-0c7a-47c6-99e9-7e783b13eb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:f1:0b:43:b2:fb:87:f6:d2:b6:d7:2c:c3:
                    a4:7f:b9:fc:08:4a:28:a7:4c:39:8b:af:9a:bb:8f:
                    fd:bc:5c:d8:70:61:76:44:a0:0f:77:12:d6:6e:50:
                    8d:d9:bd:ee:73:a9:68:8b:44:7d:ab:42:16:fb:37:
                    a8:ae:9b:0a:00:c9:dd:22:46:10:0c:8e:8b:8a:0a:
                    24:85:25:1e:f8:5f:7b:6c:20:95:cc:b4:61:f7:fe:
                    7a:be:97:4a:34:68:11:a3:ec:f2:10:fd:f7:d4:44:
                    44:3b:54:27:bb:f7:cb:90:da:62:ae:41:a0:13:27:
                    3c:b1:0f:9c:a2:db:6e:ce:e5:54:9e:0a:8c:65:d1:
                    62:55:b4:50:f8:46:25:80:e2:bc:06:22:91:17:40:
                    09:b6:00:09:6c:a4:3d:64:e4:79:dd:6c:31:0c:23:
                    12:a0:89:ae:06:f8:2b:87:3a:fd:ee:06:89:2b:50:
                    d1:f8:25:29:90:2f:d2:68:0d:48:30:16:6b:07:16:
                    8b:09:59:ba:5f:b9:87:ee:bd:14:7e:9a:57:9b:5a:
                    83:25:f5:26:1d:5c:2c:dd:8e:f2:24:c2:5e:7f:d1:
                    61:53:d3:c8:bb:64:0f:21:22:6c:75:20:59:3a:64:
                    79:82:6f:a6:c0:74:cf:2f:f9:48:97:80:33:13:79:
                    c6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:29:AE:A3:F6:24:35:D6:45:3A:8A:63:AE:E5:A1:FB:87:98:E0:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3fc415a-b800-397d-9956-3558e1562447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:44:b9:eb:c3:b8:19:4e:ae:c3:11:21:63:19:3d:39:9c:2d:
         5b:77:da:69:7b:30:7e:45:01:23:60:c0:ac:c5:2e:59:72:e1:
         f3:ff:68:4f:6c:26:2f:da:71:9f:41:1d:77:a8:03:b2:3c:28:
         59:11:65:4d:4f:13:db:48:83:56:d9:36:fb:e5:da:c5:9c:ab:
         a6:b8:a8:75:e2:4b:90:8c:fc:08:6e:fd:9f:57:60:c8:ac:c1:
         6a:e8:41:a4:1d:42:7c:38:b8:a5:6f:7e:83:01:72:a6:1a:dc:
         b0:40:dd:fc:ab:76:f1:4e:f2:f1:81:6d:fc:b4:e9:3d:a3:d2:
         45:8e:f5:10:ba:40:2a:b1:8a:e3:c7:35:3a:ab:3f:73:b9:fe:
         ce:b5:40:b7:a5:70:49:dd:82:82:5c:17:1a:71:e7:78:17:da:
         ad:64:2d:f5:a8:f8:09:e9:18:91:07:93:8c:65:fd:92:fb:b1:
         e6:b6:2a:a5:f3:4f:25:f6:c2:11:4b:10:50:47:24:66:76:d6:
         a1:1b:78:eb:4b:4e:e9:6f:b1:bf:81:1a:57:69:db:6e:49:ed:
         3e:c7:35:6e:38:fa:b1:5e:48:fb:30:0a:3e:28:5a:bf:06:ed:
         01:c7:36:7f:14:06:3c:51:a7:e8:aa:5f:5c:73:85:a0:f1:1d:
         52:88:e5:52
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JiIWh1eA72Gq6X4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDZlZjgxYjQtMGM3YS00N2M2LTk5ZTktN2U3ODNiMTNlYjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTHxC0Oy+4f20rbXLMOkf7n8CEoop0w5i6+a
u4/9vFzYcGF2RKAPdxLWblCN2b3uc6loi0R9q0IW+zeorpsKAMndIkYQDI6Ligok
hSUe+F97bCCVzLRh9/56vpdKNGgRo+zyEP331EREO1Qnu/fLkNpirkGgEyc8sQ+c
ottuzuVUngqMZdFiVbRQ+EYlgOK8BiKRF0AJtgAJbKQ9ZOR53WwxDCMSoImuBvgr
hzr97gaJK1DR+CUpkC/SaA1IMBZrBxaLCVm6X7mH7r0UfppXm1qDJfUmHVws3Y7y
JMJef9FhU9PIu2QPISJsdSBZOmR5gm+mwHTPL/lIl4AzE3nGhQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAwprqP2JDXWRTqKY67lofuHmODZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTNmYzQxNWEtYjgwMC0z
OTdkLTk5NTYtMzU1OGUxNTYyNDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBGRLnrw7gZTq7DESFjGT05nC1bd9ppezB+RQEj
YMCsxS5ZcuHz/2hPbCYv2nGfQR13qAOyPChZEWVNTxPbSINW2Tb75drFnKumuKh1
4kuQjPwIbv2fV2DIrMFq6EGkHUJ8OLilb36DAXKmGtywQN38q3bxTvLxgW38tOk9
o9JFjvUQukAqsYrjxzU6qz9zuf7OtUC3pXBJ3YKCXBcaced4F9qtZC31qPgJ6RiR
B5OMZf2S+7Hmtiql808l9sIRSxBQRyRmdtahG3jrS07pb7G/gRpXadtuSe0+xzVu
OPqxXkj7MAo+KFq/Bu0BxzZ/FAY8Uafoql9cc4Wg8R1SiOVS
-----END CERTIFICATE-----
Generated at Fri Oct 2 19:56:47 2026 by rpki-client