Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afbb963c-dd58-3589-a899-407135d8dbcf.roa
File:                     afbb963c-dd58-3589-a899-407135d8dbcf.roa (raw, json)
Hash identifier:          8PS+/orNGYvPwqL9noZvy7EXHDGXACfkrILBD3xIlyw=
Subject key identifier:   60:AD:DE:76:15:D6:1A:7C:A8:0C:D1:05:A9:8A:0F:81:AD:FB:61:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498633C2A2FFD4AC23AECA20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afbb963c-dd58-3589-a899-407135d8dbcf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396566
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:33:c2:a2:ff:d4:ac:23:ae:ca:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5bad194a-28c9-4825-a2d5-b87390950117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:56:ad:2a:3d:f6:53:f5:03:da:28:ac:33:
                    d1:d4:0a:1a:ce:3b:97:c0:b9:15:d0:72:c7:c3:db:
                    08:67:64:af:22:d5:2b:00:4a:ee:17:79:40:a8:31:
                    c7:84:9b:60:96:6b:d9:52:86:e5:cd:d3:87:3e:21:
                    a8:b0:75:20:2e:83:97:8b:0d:5c:22:ee:44:93:9c:
                    94:79:e1:36:1a:1c:4b:08:8f:d3:fc:4e:15:29:46:
                    c2:bb:bf:fb:d4:b2:49:8d:33:dd:5c:64:29:f2:37:
                    99:e7:30:e8:df:8b:ef:b8:54:09:13:76:95:90:21:
                    02:04:a0:89:63:4e:5e:e8:ad:0d:a8:26:71:db:48:
                    7c:8b:57:c0:0e:3b:6f:53:5a:a3:18:2e:04:9c:cc:
                    db:eb:86:1b:ee:0b:85:1e:91:81:dc:f6:22:0a:a9:
                    ae:37:4c:6f:1b:03:0c:c7:e3:66:29:a9:55:e9:c0:
                    d0:df:9d:90:ae:5b:0f:1c:d5:6c:df:2c:58:9b:e3:
                    45:8b:7e:88:c0:cf:73:d7:b8:8d:4e:0a:9e:84:2a:
                    17:0f:6b:d3:fa:6b:64:03:86:7b:c6:fe:57:3b:7e:
                    9c:e8:35:ec:a9:ea:2a:bc:ee:3b:96:98:11:32:d8:
                    2c:10:9a:07:38:a4:a6:fd:1d:48:b0:66:ce:88:0c:
                    b6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AD:DE:76:15:D6:1A:7C:A8:0C:D1:05:A9:8A:0F:81:AD:FB:61:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afbb963c-dd58-3589-a899-407135d8dbcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:26:fd:bd:99:cb:ac:77:2d:3b:4d:30:2f:54:d2:ab:a8:5f:
         4a:73:08:3c:94:79:50:bb:1e:34:b4:d1:1d:da:88:68:bd:4d:
         f0:3c:ae:94:27:83:5f:63:ab:62:94:9f:30:c2:27:5b:d2:2f:
         98:c7:15:7a:a4:2e:34:f8:36:0e:ec:bf:40:a8:a7:55:39:b8:
         49:c4:0d:38:80:dc:e9:20:66:8a:2e:98:8b:17:06:35:76:4d:
         69:4a:ea:13:cf:29:3d:1c:aa:90:13:c8:0a:aa:a3:47:ba:19:
         1d:1e:6a:f6:db:89:61:c8:d3:2b:d5:31:56:0a:f8:35:3a:69:
         a6:55:88:94:93:07:fa:b0:d0:08:e1:8c:37:3e:85:84:18:6c:
         04:df:f3:83:1b:7e:b0:b8:7b:d8:7f:3a:f8:a9:d2:bf:2b:c2:
         7d:59:f4:20:1d:04:5d:73:42:ba:87:a1:68:f8:8d:a1:31:44:
         08:77:7e:98:aa:f5:86:dc:f2:5f:40:a1:75:ae:6a:35:7c:c2:
         ba:48:46:e5:74:a0:9c:de:b8:b4:67:3d:08:db:28:4f:94:91:
         a6:32:81:92:79:73:c6:85:be:9f:44:a6:49:ce:d5:cc:1f:bd:
         6f:4a:d4:ad:89:92:3c:fc:20:9b:36:89:05:7c:9f:7f:b9:63:
         eb:80:02:f4
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JhjPCov/UrCOuyiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NWJhZDE5NGEtMjhjOS00ODI1LWEyZDUtYjg3MzkwOTUwMTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvNWrSo99lP1A9oorDPR1AoazjuXwLkV0HLH
w9sIZ2SvItUrAEruF3lAqDHHhJtglmvZUoblzdOHPiGosHUgLoOXiw1cIu5Ek5yU
eeE2GhxLCI/T/E4VKUbCu7/71LJJjTPdXGQp8jeZ5zDo34vvuFQJE3aVkCECBKCJ
Y05e6K0NqCZx20h8i1fADjtvU1qjGC4EnMzb64Yb7guFHpGB3PYiCqmuN0xvGwMM
x+NmKalV6cDQ352QrlsPHNVs3yxYm+NFi36IwM9z17iNTgqehCoXD2vT+mtkA4Z7
xv5XO36c6DXsqeoqvO47lpgRMtgsEJoHOKSm/R1IsGbOiAy2mQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGCt3nYV1hp8qAzRBamKD4Gt+2FhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWZiYjk2M2MtZGQ1OC0z
NTg5LWE4OTktNDA3MTM1ZDhkYmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCCJv29mcusdy07TTAvVNKrqF9Kcwg8lHlQux40
tNEd2ohovU3wPK6UJ4NfY6tilJ8wwidb0i+YxxV6pC40+DYO7L9AqKdVObhJxA04
gNzpIGaKLpiLFwY1dk1pSuoTzyk9HKqQE8gKqqNHuhkdHmr224lhyNMr1TFWCvg1
OmmmVYiUkwf6sNAI4Yw3PoWEGGwE3/ODG36wuHvYfzr4qdK/K8J9WfQgHQRdc0K6
h6Fo+I2hMUQId36YqvWG3PJfQKF1rmo1fMK6SEbldKCc3ri0Zz0I2yhPlJGmMoGS
eXPGhb6fRKZJztXMH71vStStiZI8/CCbNokFfJ9/uWPrgAL0
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:55:55 2026 by rpki-client