Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf282ed3-09e9-365e-a30d-61fd7fe652d0.roa
File:                     bf282ed3-09e9-365e-a30d-61fd7fe652d0.roa (raw, json)
Hash identifier:          u2nRwSHSAmnABI383h8K44InDk8y4992Dr1FZY1T2B4=
Subject key identifier:   88:81:F7:B9:8B:8E:AA:F5:EC:7B:09:DA:16:60:00:F4:25:67:87:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E736A2F21592E7BBB23ECF300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf282ed3-09e9-365e-a30d-61fd7fe652d0.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     397199
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:2f:21:59:2e:7b:bb:23:ec:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=8c224651-c4bf-447b-912a-5c0bb07291ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e9:23:be:77:4f:a0:81:7a:0d:fa:d0:77:4a:
                    82:ac:da:2c:be:35:cc:03:65:60:92:3d:4f:53:c8:
                    62:ca:0e:3c:39:0b:56:67:58:50:14:66:6e:fa:af:
                    4f:5c:6d:6a:ae:e0:7a:c5:0f:b0:4f:be:03:38:cd:
                    fb:a5:57:20:0b:dd:da:aa:15:e7:4c:b3:39:ce:1c:
                    36:7f:d0:00:6e:b6:47:1e:17:e1:09:ac:94:f0:8b:
                    e4:50:f5:14:a2:1a:2e:27:66:de:13:f5:4e:9d:ad:
                    9d:09:2e:2c:af:44:79:f3:c4:e1:ed:56:9c:f6:5c:
                    1d:02:e2:2b:a9:35:b6:82:04:d5:85:09:cc:29:22:
                    bf:e7:63:ee:8c:71:6a:09:e7:09:5f:49:31:b5:eb:
                    ba:e1:4f:54:5e:d2:71:44:28:74:f3:12:c8:9d:7e:
                    d9:82:87:8a:8e:ee:1b:ee:53:de:d5:0b:e9:c8:e3:
                    93:26:d1:73:19:b7:b5:bc:9d:ab:fa:bb:32:95:89:
                    80:bc:db:58:99:7f:a2:cc:6c:b7:ca:1e:ca:6b:cc:
                    84:08:40:d1:05:a1:80:1f:bb:7e:c6:ad:fe:35:9c:
                    cb:90:ea:83:48:02:4e:fe:f7:7a:93:a8:59:cc:0e:
                    c9:85:ba:01:86:24:8f:08:87:6f:39:e9:9a:6d:90:
                    bf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:81:F7:B9:8B:8E:AA:F5:EC:7B:09:DA:16:60:00:F4:25:67:87:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf282ed3-09e9-365e-a30d-61fd7fe652d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f0:9f:52:ff:11:31:57:67:aa:61:69:0c:22:a6:32:76:ff:
         a7:cc:38:7b:6e:d5:8d:4f:28:82:ba:a5:45:41:77:9c:88:83:
         d7:ec:78:b0:99:20:31:3c:6f:d2:0b:50:d8:97:1c:bf:05:c6:
         1f:48:f6:ea:3d:68:67:17:37:99:79:9b:cf:64:91:aa:58:4f:
         d4:0e:3e:fc:0a:76:12:5f:cd:1b:3c:42:b4:6d:53:16:e4:e3:
         37:62:d3:a4:65:d3:fc:8e:f3:3d:0b:c3:22:08:ea:27:08:b7:
         74:5a:02:1e:93:29:18:8e:f2:28:b4:26:82:35:13:89:f9:af:
         f4:66:21:d6:98:3b:dc:24:a5:6b:d7:41:46:9b:2a:87:92:4f:
         1e:f8:35:f2:f0:9a:e8:ba:74:73:57:61:b6:90:46:d9:02:b8:
         0c:9e:48:4b:81:a4:21:c8:ec:6f:77:a0:6e:5c:b6:aa:8e:fe:
         60:a3:62:2b:6c:fb:dc:7b:3c:58:b1:e1:d4:4d:36:76:ef:a2:
         77:6d:c5:08:96:e5:d1:69:00:79:b5:e4:db:b1:a2:d8:cd:c7:
         a7:14:19:5e:22:7c:f3:ca:ae:c4:7a:80:58:26:87:38:27:3b:
         f8:41:2a:88:2c:27:3e:3a:dc:2c:ea:bb:81:10:3f:27:bb:29:
         23:0b:d5:36
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5zai8hWS57uyPs8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk
OGMyMjQ2NTEtYzRiZi00NDdiLTkxMmEtNWMwYmIwNzI5MWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgukjvndPoIF6DfrQd0qCrNosvjXMA2Vgkj1P
U8hiyg48OQtWZ1hQFGZu+q9PXG1qruB6xQ+wT74DOM37pVcgC93aqhXnTLM5zhw2
f9AAbrZHHhfhCayU8IvkUPUUohouJ2beE/VOna2dCS4sr0R588Th7Vac9lwdAuIr
qTW2ggTVhQnMKSK/52PujHFqCecJX0kxteu64U9UXtJxRCh08xLInX7ZgoeKju4b
7lPe1QvpyOOTJtFzGbe1vJ2r+rsylYmAvNtYmX+izGy3yh7Ka8yECEDRBaGAH7t+
xq3+NZzLkOqDSAJO/vd6k6hZzA7JhboBhiSPCIdvOemabZC/VwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFIiB97mLjqr17HsJ2hZgAPQlZ4fJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYyODJlZDMtMDllOS0z
NjVlLWEzMGQtNjFmZDdmZTY1MmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBJ8J9S/xExV2eqYWkMIqYydv+nzDh7btWNTyiC
uqVFQXeciIPX7HiwmSAxPG/SC1DYlxy/BcYfSPbqPWhnFzeZeZvPZJGqWE/UDj78
CnYSX80bPEK0bVMW5OM3YtOkZdP8jvM9C8MiCOonCLd0WgIekykYjvIotCaCNROJ
+a/0ZiHWmDvcJKVr10FGmyqHkk8e+DXy8JrounRzV2G2kEbZArgMnkhLgaQhyOxv
d6BuXLaqjv5go2IrbPvcezxYseHUTTZ276J3bcUIluXRaQB5teTbsaLYzcenFBle
Inzzyq7EeoBYJoc4Jzv4QSqILCc+Otws6ruBED8nuykjC9U2
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:56:45 2026 by rpki-client