Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0616dd3-31ab-32c1-b0cb-dc9d6809894c.roa
File:                     b0616dd3-31ab-32c1-b0cb-dc9d6809894c.roa (raw, json)
Hash identifier:          d7fSjMjw2R0Jp9Z2vKgjiYE8p85+70SZUceJYDaAAQo=
Subject key identifier:   5D:17:0A:62:20:15:AA:EE:4F:3A:B9:9D:4F:91:4B:71:81:83:CE:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E66DA2C243A748F0C08DAF680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0616dd3-31ab-32c1-b0cb-dc9d6809894c.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     396564
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:2c:24:3a:74:8f:0c:08:da:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=95d97161-4fe9-46dc-aec7-100e5baed6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:2e:06:68:79:df:12:d9:ab:9a:f4:7f:12:
                    52:02:6b:1e:48:82:fd:21:dc:32:e4:a4:56:36:42:
                    7c:ae:54:df:6c:24:f7:6c:55:9a:38:d3:71:fb:74:
                    d9:11:c4:5b:33:0f:42:54:1f:90:0a:3a:5a:09:86:
                    48:bc:97:6b:3b:88:2e:ae:f1:15:fd:f0:76:b3:f5:
                    a6:f0:ae:69:34:3a:4b:6d:40:47:08:f1:38:5b:6b:
                    89:b8:97:48:a7:c2:ec:82:eb:c4:f5:ea:66:7f:ac:
                    eb:c9:ea:9b:c0:d8:bd:64:bf:70:7c:7b:0e:b8:f5:
                    33:c7:7a:05:35:70:2b:4f:c4:b2:af:4c:81:9a:fa:
                    ac:ee:29:d0:7a:ac:73:39:a3:b8:5e:41:e9:5b:d1:
                    ec:d0:ef:46:9a:c0:61:52:06:d8:2e:b3:87:bd:57:
                    52:51:df:2c:69:22:fd:5f:15:28:7a:53:06:a2:cc:
                    3d:17:42:3a:e0:02:b0:6d:6c:f1:3a:93:3e:eb:74:
                    14:40:c6:86:14:0c:29:db:4e:92:71:3a:d2:57:62:
                    ef:ee:0b:f1:30:17:cd:56:93:75:84:22:b5:e2:d4:
                    66:9a:d2:b5:62:c3:2d:33:b1:27:db:03:74:7d:c0:
                    9a:f0:9a:de:ea:fb:43:85:36:00:ef:c0:13:0e:d3:
                    66:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:17:0A:62:20:15:AA:EE:4F:3A:B9:9D:4F:91:4B:71:81:83:CE:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0616dd3-31ab-32c1-b0cb-dc9d6809894c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:df:81:87:9d:77:3b:96:ae:96:87:31:03:8f:3f:3a:cc:81:
         b9:ed:5b:f1:bc:86:5f:62:4f:57:aa:91:d6:36:fc:78:88:2a:
         d0:8a:4b:d5:dc:cf:1e:ee:5a:fe:8d:01:2d:b1:ae:f0:8f:5e:
         4a:52:48:43:24:47:95:c8:d6:e4:d7:93:d3:4f:76:9e:45:eb:
         b2:6d:ec:7e:68:1f:68:9c:8d:ba:14:8e:99:19:de:7c:11:18:
         1c:db:7c:c8:aa:5a:7d:1f:e1:6d:b5:85:dc:18:fe:74:38:4a:
         7a:06:50:c4:bd:8e:dd:2f:ff:39:4e:32:e4:38:8b:fb:bd:4d:
         95:63:03:c1:43:d9:e9:35:cd:49:45:eb:a8:fe:dc:e6:8f:5c:
         bd:e3:c2:4b:f4:42:f7:ed:dd:d3:c0:77:9c:5e:d5:c0:90:9b:
         a7:10:14:11:64:e3:83:4e:ab:d7:e1:45:0b:1d:7a:24:49:99:
         cb:45:38:06:85:9e:e5:1a:e4:65:ca:84:42:f0:23:e0:72:55:
         0a:a0:17:83:b8:87:90:2f:03:87:dc:08:bd:93:cf:48:0d:33:
         34:71:a1:64:f5:03:9c:f6:a7:0d:7c:ed:2b:f2:34:00:62:33:
         c4:cb:36:31:73:21:f8:02:7e:7a:b6:2d:85:35:9a:ac:c8:3f:
         a3:4c:bb:4c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5m2iwkOnSPDAja9oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
OTVkOTcxNjEtNGZlOS00NmRjLWFlYzctMTAwZTViYWVkNmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx14uBmh53xLZq5r0fxJSAmseSIL9Idwy5KRW
NkJ8rlTfbCT3bFWaONNx+3TZEcRbMw9CVB+QCjpaCYZIvJdrO4gurvEV/fB2s/Wm
8K5pNDpLbUBHCPE4W2uJuJdIp8LsguvE9epmf6zryeqbwNi9ZL9wfHsOuPUzx3oF
NXArT8Syr0yBmvqs7inQeqxzOaO4XkHpW9Hs0O9GmsBhUgbYLrOHvVdSUd8saSL9
XxUoelMGosw9F0I64AKwbWzxOpM+63QUQMaGFAwp206ScTrSV2Lv7gvxMBfNVpN1
hCK14tRmmtK1YsMtM7En2wN0fcCa8Jre6vtDhTYA78ATDtNmHwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFF0XCmIgFaruTzq5nU+RS3GBg868MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjA2MTZkZDMtMzFhYi0z
MmMxLWIwY2ItZGM5ZDY4MDk4OTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBp34GHnXc7lq6WhzEDjz86zIG57VvxvIZfYk9X
qpHWNvx4iCrQikvV3M8e7lr+jQEtsa7wj15KUkhDJEeVyNbk15PTT3aeReuybex+
aB9onI26FI6ZGd58ERgc23zIqlp9H+FttYXcGP50OEp6BlDEvY7dL/85TjLkOIv7
vU2VYwPBQ9npNc1JReuo/tzmj1y948JL9EL37d3TwHecXtXAkJunEBQRZOODTqvX
4UULHXokSZnLRTgGhZ7lGuRlyoRC8CPgclUKoBeDuIeQLwOH3Ai9k89IDTM0caFk
9QOc9qcNfO0r8jQAYjPEyzYxcyH4An56ti2FNZqsyD+jTLtM
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:48:44 2026 by rpki-client