Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b770c675-c999-3119-9b3d-2ee3b47b20bb.roa
File:                     b770c675-c999-3119-9b3d-2ee3b47b20bb.roa (raw, json)
Hash identifier:          0J9nI3iTLzkw/w97UGG3JB2kAvhKajQYRfyLVXKPNYc=
Subject key identifier:   BA:BB:3F:E6:1A:AD:A9:ED:3B:89:F1:38:33:87:3B:2A:3C:48:1F:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06727BE0225AE578819300E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b770c675-c999-3119-9b3d-2ee3b47b20bb.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396542
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:7b:e0:22:5a:e5:78:81:93:00:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=052cd272-b3ec-4331-9c3f-6a0127ffaae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:d4:62:36:63:2a:b8:89:a2:48:e4:b8:37:
                    f2:c8:18:c3:9c:68:8e:b7:da:69:8c:9f:5b:13:95:
                    ea:c0:44:ab:8f:9b:26:b3:c0:c6:d5:25:55:35:2e:
                    66:9a:b2:1a:41:05:d7:30:24:bd:24:e7:4a:81:a6:
                    2c:a2:a1:06:e8:b4:26:de:0c:7c:c9:4e:a7:32:59:
                    51:af:66:9a:6b:af:e5:8f:7b:68:70:8f:da:bb:69:
                    64:54:ca:14:a7:07:01:2a:2f:44:b2:50:af:0f:09:
                    8e:03:68:cc:1a:66:75:87:f1:49:4b:89:d5:75:db:
                    63:ac:55:24:c9:03:53:c7:6f:7b:2b:00:51:0f:09:
                    3a:a5:4b:ef:f5:33:3b:3a:86:3b:a0:73:1c:ff:75:
                    0c:a7:02:9d:a7:13:cf:9b:a1:12:77:5e:4c:af:e5:
                    5a:77:c7:3b:c5:10:d5:a4:4b:92:62:e9:90:d8:50:
                    b7:0a:87:9c:96:f1:96:e8:d1:db:bb:44:41:99:1d:
                    f4:5b:1c:ab:c4:93:f7:01:27:28:2b:85:b1:b9:a7:
                    e1:b9:06:11:9c:68:16:d9:de:17:f4:1b:20:0d:90:
                    f7:cc:5f:da:cd:7c:83:ec:90:e3:86:cf:80:e4:ca:
                    00:ce:94:96:b7:52:c2:94:64:4d:55:8b:f8:00:30:
                    54:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BB:3F:E6:1A:AD:A9:ED:3B:89:F1:38:33:87:3B:2A:3C:48:1F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b770c675-c999-3119-9b3d-2ee3b47b20bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:fb:2f:22:ef:e3:b6:7d:39:30:b3:f7:a3:44:97:c7:2c:
         59:4d:80:77:15:69:82:11:15:64:a7:51:ba:b9:4d:91:2c:13:
         51:5c:cf:19:9a:6b:d1:12:42:a1:cb:19:67:e2:79:28:09:0f:
         f7:4b:a0:a6:d6:4e:11:ca:82:e0:b8:0b:19:9e:e9:1b:db:b2:
         53:5f:76:ca:51:dd:7a:b6:6f:73:08:fe:58:d6:0f:1b:8f:23:
         06:90:77:52:9d:1e:74:91:0f:c2:8b:15:7c:1b:1d:8a:92:54:
         b8:82:b4:ba:e1:85:30:2c:73:7a:7a:ab:ad:9a:12:1d:b2:9e:
         1d:ff:86:15:7e:e9:10:14:32:74:d9:45:b1:37:e4:54:e0:2c:
         9b:9d:9c:f6:cb:0a:ac:55:be:3f:68:68:53:39:c2:a1:3a:93:
         f4:80:7a:cf:3f:46:3f:d2:04:3b:82:05:5e:39:6e:af:f9:6a:
         d0:cf:c9:0e:60:4c:c2:e7:dc:19:d4:0c:51:d7:fd:40:12:f2:
         60:0c:cb:da:91:75:e5:be:c9:65:2a:ae:fa:d4:96:f2:30:38:
         86:11:2c:d6:97:cf:24:a0:c6:44:31:0d:6e:3c:cf:6b:b3:76:
         26:a5:82:ea:1a:b3:7b:e6:6c:9b:0c:19:80:51:68:ee:cd:b1:
         c5:1d:8f:89
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8GcnvgIlrleIGTAOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
MDUyY2QyNzItYjNlYy00MzMxLTljM2YtNmEwMTI3ZmZhYWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApafUYjZjKriJokjkuDfyyBjDnGiOt9ppjJ9b
E5XqwESrj5sms8DG1SVVNS5mmrIaQQXXMCS9JOdKgaYsoqEG6LQm3gx8yU6nMllR
r2aaa6/lj3tocI/au2lkVMoUpwcBKi9EslCvDwmOA2jMGmZ1h/FJS4nVddtjrFUk
yQNTx297KwBRDwk6pUvv9TM7OoY7oHMc/3UMpwKdpxPPm6ESd15Mr+Vad8c7xRDV
pEuSYumQ2FC3CoeclvGW6NHbu0RBmR30WxyrxJP3AScoK4WxuafhuQYRnGgW2d4X
9BsgDZD3zF/azXyD7JDjhs+A5MoAzpSWt1LClGRNVYv4ADBUQwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLq7P+YarantO4nxODOHOyo8SB9tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjc3MGM2NzUtYzk5OS0z
MTE5LTliM2QtMmVlM2I0N2IyMGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQACxPsvIu/jtn05MLP3o0SXxyxZTYB3FWmCERVk
p1G6uU2RLBNRXM8ZmmvREkKhyxln4nkoCQ/3S6Cm1k4RyoLguAsZnukb27JTX3bK
Ud16tm9zCP5Y1g8bjyMGkHdSnR50kQ/CixV8Gx2KklS4grS64YUwLHN6equtmhId
sp4d/4YVfukQFDJ02UWxN+RU4CybnZz2ywqsVb4/aGhTOcKhOpP0gHrPP0Y/0gQ7
ggVeOW6v+WrQz8kOYEzC59wZ1AxR1/1AEvJgDMvakXXlvsllKq761JbyMDiGESzW
l88koMZEMQ1uPM9rs3YmpYLqGrN75mybDBmAUWjuzbHFHY+J
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:57:01 2026 by rpki-client