Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6e2b73c-9d5c-3d41-aeef-f11d3508df3e.roa
File:                     a6e2b73c-9d5c-3d41-aeef-f11d3508df3e.roa (raw, json)
Hash identifier:          mqs2dy2G0P9bxJyeZNCYGysNCn7myxXv+To/64uxCD0=
Subject key identifier:   8E:87:50:81:C2:BA:71:D0:8C:B5:76:B8:32:0E:3A:64:83:2F:73:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4973806E85C171EE03ADF7E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6e2b73c-9d5c-3d41-aeef-f11d3508df3e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396578
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:80:6e:85:c1:71:ee:03:ad:f7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5885143f-43c9-4100-adef-34ed300f54d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:08:c7:23:e0:a5:86:8b:de:f6:64:b8:88:c4:
                    58:34:82:de:1f:f2:41:e0:5d:b7:fb:6c:23:cd:c6:
                    b9:72:5d:9b:10:e2:ac:94:6b:f8:de:2e:de:e2:58:
                    e9:d9:29:bb:bb:a0:c4:0d:7a:2d:ad:51:b5:9b:ff:
                    07:a5:89:7c:8a:78:47:a7:62:dc:2d:ba:15:c1:39:
                    44:4a:8f:cd:a6:00:9c:74:d4:89:2a:0b:66:c6:9d:
                    44:0f:3f:b8:4b:d2:79:f8:c4:4d:08:6a:3d:ed:a0:
                    ea:ea:90:36:ce:f5:06:47:fa:ce:b1:99:92:c6:52:
                    c8:60:91:c7:8f:0b:1f:09:ad:aa:80:1c:3d:ce:00:
                    7a:85:37:ef:cf:ae:5f:c6:0e:57:d0:bb:db:f9:42:
                    12:2d:74:1e:01:31:1d:ea:95:ed:85:48:a0:25:e3:
                    ad:d0:a2:62:33:93:19:f9:bc:4e:c0:e0:f4:bc:02:
                    6a:a9:88:fd:9f:72:65:96:fd:bf:e2:c9:54:17:bc:
                    e8:22:05:51:f1:3c:71:eb:4e:5b:29:9a:73:96:8b:
                    03:cb:a0:33:99:b4:d1:68:cf:74:28:ce:f0:54:43:
                    37:a6:eb:e1:4b:a5:58:8c:2e:6d:1b:bc:e4:b0:e9:
                    68:f5:73:8c:fb:16:1b:ff:21:24:02:8d:e0:84:50:
                    d7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:87:50:81:C2:BA:71:D0:8C:B5:76:B8:32:0E:3A:64:83:2F:73:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6e2b73c-9d5c-3d41-aeef-f11d3508df3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:88:6b:76:d8:fc:86:3a:72:d8:fa:9e:d5:98:64:86:fa:3a:
         06:bd:bb:2a:87:ee:f6:c1:52:b3:ce:49:a9:4f:7f:fe:4d:2d:
         86:cd:ba:0d:5c:b8:13:cc:d7:03:fc:d8:98:eb:00:7e:81:77:
         7c:5e:c3:6e:c3:01:f1:50:c7:0d:50:13:67:1a:c0:61:c6:1e:
         f8:46:39:9c:ab:ac:4d:71:57:cc:6d:74:30:7d:4b:5b:4e:3e:
         fd:e8:ba:db:8c:39:3f:ef:d3:06:80:21:63:b9:be:00:ad:20:
         99:3f:f1:b3:0f:a5:3a:82:48:a1:e7:06:94:9d:cd:24:dd:c7:
         fb:71:25:bc:df:7a:47:79:ec:a3:d9:bb:4d:50:3e:b5:8f:95:
         e2:4d:25:ba:87:53:ee:78:5f:b6:67:c3:1b:e0:25:1c:8c:46:
         6d:fb:9a:86:d0:59:2c:53:5b:4b:c6:e4:70:c9:78:15:ae:58:
         2d:dc:44:df:f9:f9:8a:54:37:4f:62:9d:45:ce:4a:d2:bc:31:
         23:79:36:3d:ef:8c:a7:ac:b4:7e:bc:01:03:b4:3b:a3:d7:37:
         aa:f4:6e:35:57:ca:44:66:0b:ac:21:c7:31:0e:53:8d:e7:13:
         1a:e1:aa:77:07:b8:97:9e:44:63:12:f7:eb:cb:c7:c7:c6:1d:
         0e:2a:24:f6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9Jc4BuhcFx7gOt9+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTg4NTE0M2YtNDNjOS00MTAwLWFkZWYtMzRlZDMwMGY1NGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQjHI+Clhove9mS4iMRYNILeH/JB4F23+2wj
zca5cl2bEOKslGv43i7e4ljp2Sm7u6DEDXotrVG1m/8HpYl8inhHp2LcLboVwTlE
So/NpgCcdNSJKgtmxp1EDz+4S9J5+MRNCGo97aDq6pA2zvUGR/rOsZmSxlLIYJHH
jwsfCa2qgBw9zgB6hTfvz65fxg5X0Lvb+UISLXQeATEd6pXthUigJeOt0KJiM5MZ
+bxOwOD0vAJqqYj9n3Jllv2/4slUF7zoIgVR8Txx605bKZpzlosDy6AzmbTRaM90
KM7wVEM3puvhS6VYjC5tG7zksOlo9XOM+xYb/yEkAo3ghFDXRwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFI6HUIHCunHQjLV2uDIOOmSDL3NfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTZlMmI3M2MtOWQ1Yy0z
ZDQxLWFlZWYtZjExZDM1MDhkZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAQiGt22PyGOnLY+p7VmGSG+joGvbsqh+72wVKz
zkmpT3/+TS2GzboNXLgTzNcD/NiY6wB+gXd8XsNuwwHxUMcNUBNnGsBhxh74Rjmc
q6xNcVfMbXQwfUtbTj796LrbjDk/79MGgCFjub4ArSCZP/GzD6U6gkih5waUnc0k
3cf7cSW833pHeeyj2btNUD61j5XiTSW6h1PueF+2Z8Mb4CUcjEZt+5qG0FksU1tL
xuRwyXgVrlgt3ETf+fmKVDdPYp1FzkrSvDEjeTY974ynrLR+vAEDtDuj1zeq9G41
V8pEZgusIccxDlON5xMa4ap3B7iXnkRjEvfry8fHxh0OKiT2
-----END CERTIFICATE-----
Generated at Mon Sep 28 02:28:28 2026 by rpki-client