Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4138e5a-b05a-3c16-aac9-f087fb885729.roa
File:                     a4138e5a-b05a-3c16-aac9-f087fb885729.roa (raw, json)
Hash identifier:          ztrhMm+eJOkCNtuxYtYjlmaTYSiudNTIPg5yOynFivM=
Subject key identifier:   ED:20:FA:47:23:B3:71:79:1F:96:7E:32:4A:90:CC:C2:C5:FA:1A:CD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E736A2FEAFCD1D7D37E83AEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4138e5a-b05a-3c16-aac9-f087fb885729.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     396564
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:2f:ea:fc:d1:d7:d3:7e:83:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=9ecb122c-32b3-4da0-a05a-23b620148602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fa:00:32:3f:20:36:11:b0:e8:f2:11:71:9b:
                    be:2d:91:fe:51:f3:73:8d:f6:31:51:84:a6:83:17:
                    8f:d6:ab:cd:24:8a:eb:80:7a:1b:2c:77:1c:57:fd:
                    9d:86:86:ce:1a:42:c3:25:95:f9:74:9b:37:25:8b:
                    05:d7:ea:58:23:cf:57:40:e7:ae:8b:fe:cd:96:6e:
                    30:e9:a7:7d:94:93:16:5e:43:a4:7f:5a:29:c3:48:
                    a1:c9:ad:b2:67:f6:aa:bb:29:b9:70:45:22:72:fb:
                    5a:19:b7:b4:d1:bd:d8:d5:77:6e:eb:9b:aa:33:f2:
                    67:a1:7c:11:94:38:c2:3b:65:56:a8:75:66:03:a5:
                    bf:4b:5c:3b:94:b0:8f:a9:e9:7b:20:f7:54:44:f2:
                    ca:ed:34:5f:a7:f5:d6:1a:81:5e:43:74:e5:0d:60:
                    5e:ea:23:a4:a6:23:b5:ad:2e:6f:89:1f:a6:16:a5:
                    bb:cf:45:c9:0d:c4:72:62:ad:74:b7:12:27:f8:50:
                    99:c5:64:e5:8f:4d:9b:90:98:c4:4c:42:31:96:55:
                    d4:d8:3f:4b:29:a9:cc:39:d6:5d:4f:b7:9f:b7:bb:
                    15:3e:a1:b0:af:a5:ec:91:e9:87:99:b1:48:c9:41:
                    a5:fb:7d:18:a8:ff:42:bf:eb:76:50:1d:25:3c:44:
                    be:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:20:FA:47:23:B3:71:79:1F:96:7E:32:4A:90:CC:C2:C5:FA:1A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4138e5a-b05a-3c16-aac9-f087fb885729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f2:13:cc:4e:be:b2:16:f5:a7:be:a5:d6:40:59:fb:53:1d:
         7b:33:5e:44:cf:f9:0d:f6:03:2e:77:9a:6e:61:a0:aa:2b:7d:
         be:37:06:35:2a:2a:e0:67:1d:c7:3a:a5:4b:9f:16:c2:c0:00:
         b3:52:d5:1c:c3:e1:f3:17:b1:b4:07:eb:5c:04:48:70:86:e2:
         1b:f9:0c:45:00:ee:e6:5d:d2:21:cd:af:df:a3:92:9d:50:0e:
         5e:77:e6:a1:58:35:05:7e:10:b3:61:d7:66:48:99:6c:40:9f:
         51:96:ed:79:fc:a0:f6:fd:c8:06:ba:bf:81:89:e4:b4:88:06:
         bd:85:6f:c2:20:fd:0e:55:37:4e:8b:87:3e:10:51:19:99:d0:
         fb:ac:bf:71:85:7c:c4:96:99:77:76:fa:76:bc:0f:8b:21:97:
         b2:3c:50:15:e9:25:90:47:f4:8a:a2:dc:0e:7a:0f:18:fd:f0:
         76:54:d8:39:22:d2:57:28:15:77:a0:3a:80:3d:6e:cc:44:a5:
         20:84:1d:b1:9d:db:e9:39:e6:35:a1:39:5f:78:fe:26:25:aa:
         34:1b:63:cd:f7:02:4d:54:8b:07:4a:ef:2a:04:cc:ce:bb:33:
         83:e3:dc:08:dc:b1:36:91:7f:1d:0d:1c:83:47:ca:48:66:96:
         72:6c:30:57
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5zai/q/NHX036DrsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk
OWVjYjEyMmMtMzJiMy00ZGEwLWEwNWEtMjNiNjIwMTQ4NjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfoAMj8gNhGw6PIRcZu+LZH+UfNzjfYxUYSm
gxeP1qvNJIrrgHobLHccV/2dhobOGkLDJZX5dJs3JYsF1+pYI89XQOeui/7Nlm4w
6ad9lJMWXkOkf1opw0ihya2yZ/aquym5cEUicvtaGbe00b3Y1Xdu65uqM/JnoXwR
lDjCO2VWqHVmA6W/S1w7lLCPqel7IPdURPLK7TRfp/XWGoFeQ3TlDWBe6iOkpiO1
rS5viR+mFqW7z0XJDcRyYq10txIn+FCZxWTlj02bkJjETEIxllXU2D9LKanMOdZd
T7eft7sVPqGwr6XskemHmbFIyUGl+30YqP9Cv+t2UB0lPES+zQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFO0g+kcjs3F5H5Z+MkqQzMLF+hrNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTQxMzhlNWEtYjA1YS0z
YzE2LWFhYzktZjA4N2ZiODg1NzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBE8hPMTr6yFvWnvqXWQFn7Ux17M15Ez/kN9gMu
d5puYaCqK32+NwY1KirgZx3HOqVLnxbCwACzUtUcw+HzF7G0B+tcBEhwhuIb+QxF
AO7mXdIhza/fo5KdUA5ed+ahWDUFfhCzYddmSJlsQJ9Rlu15/KD2/cgGur+BieS0
iAa9hW/CIP0OVTdOi4c+EFEZmdD7rL9xhXzElpl3dvp2vA+LIZeyPFAV6SWQR/SK
otwOeg8Y/fB2VNg5ItJXKBV3oDqAPW7MRKUghB2xndvpOeY1oTlfeP4mJao0G2PN
9wJNVIsHSu8qBMzOuzOD49wI3LE2kX8dDRyDR8pIZpZybDBX
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:24 2026 by rpki-client