Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2dcdf02-c382-3593-aa5c-d2ca27f9de43.roa
File:                     c2dcdf02-c382-3593-aa5c-d2ca27f9de43.roa (raw, json)
Hash identifier:          5EXIAUo32Bk2oGNXK4HJs2nCuDtiZ06wyl1x+H7+rVg=
Subject key identifier:   EA:75:85:2E:A8:8E:5D:A0:D0:B4:06:F7:4E:A6:DF:93:3B:8A:2D:1B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497432D5FDAB6674D958EEE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2dcdf02-c382-3593-aa5c-d2ca27f9de43.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396602
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:32:d5:fd:ab:66:74:d9:58:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=41ae2b40-dd20-468c-92d6-7e3d7e9fc49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:f8:4a:fc:25:cf:95:46:4c:53:39:f0:6b:
                    5d:e7:71:75:4d:4f:ce:62:3b:a5:3c:40:9d:42:3f:
                    a2:29:80:e3:4b:34:e9:3a:3c:a6:3c:cc:20:71:a5:
                    9b:ce:9d:26:c1:8a:a1:da:ab:46:3b:52:61:9c:75:
                    a2:ba:ed:0a:98:73:b5:5f:ff:1f:c0:20:3a:95:c1:
                    3e:33:35:4d:ec:24:b8:f9:cd:9a:b6:a9:78:69:bf:
                    51:ce:39:91:8f:dd:e8:83:35:45:b1:28:8e:66:09:
                    16:92:6c:c7:db:0f:78:d6:a8:3d:84:f1:c2:da:8b:
                    3f:d2:48:f8:f4:4f:44:44:a7:b8:4a:e7:33:95:f6:
                    1b:de:9e:6c:cd:f3:d0:73:74:de:ee:6e:25:e6:d1:
                    ce:f2:d8:51:47:32:45:6f:4d:db:fe:7b:ac:de:c5:
                    8e:31:6b:18:03:93:50:0c:dc:fd:61:ed:e3:1b:88:
                    23:76:88:35:cc:61:04:7c:5e:28:17:22:6e:a5:e5:
                    23:f8:29:62:c3:2d:fa:94:2d:2a:68:6d:79:30:52:
                    05:14:8c:57:0f:7d:ae:c2:9b:a2:89:60:63:9a:f3:
                    89:83:b0:a4:c9:84:47:31:e6:b0:ff:5d:15:38:c1:
                    bd:3d:ac:57:d5:ab:bf:84:34:d1:37:ad:61:29:c4:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:75:85:2E:A8:8E:5D:A0:D0:B4:06:F7:4E:A6:DF:93:3B:8A:2D:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2dcdf02-c382-3593-aa5c-d2ca27f9de43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:66:37:47:48:60:bd:bb:f6:6c:7c:b1:14:89:d8:f8:ce:c4:
         1e:1e:37:c4:96:04:3c:50:4f:50:6b:9b:eb:63:6b:32:17:5e:
         ed:13:df:95:df:7c:f1:c8:ae:e4:27:04:c8:df:86:c8:e7:db:
         3b:e7:2d:23:6c:62:0b:43:f9:ac:03:6f:51:b1:11:0f:e4:2c:
         e6:ec:e0:19:d7:b3:ea:e6:01:2c:c0:74:41:08:2f:4a:1d:ef:
         aa:4c:92:33:44:04:ff:2c:82:48:64:00:e0:2e:fd:0f:93:88:
         ad:f3:7d:90:35:d1:a4:f7:f5:a8:48:cb:a0:f4:ba:0e:c5:62:
         ff:c8:d3:6c:be:f3:c5:00:a7:b6:22:ce:64:be:cd:2b:c5:32:
         2c:b8:1f:98:b4:9d:1e:8b:fb:21:99:db:93:bd:be:45:5d:00:
         39:41:48:ca:53:5e:b4:ba:36:6a:e6:36:f8:8d:32:0a:97:4b:
         97:bc:98:d9:3d:86:8e:a7:58:42:4a:05:25:25:08:6d:d1:ad:
         bd:7d:42:45:cc:64:e1:40:a7:2b:c9:45:3b:0c:34:ab:7f:1d:
         25:9a:da:24:2f:2e:06:0a:99:60:bc:d8:ad:b1:da:a8:2c:ea:
         6e:0a:c3:ec:86:44:21:6f:9f:bf:7f:84:ac:ec:7a:24:47:ee:
         5a:63:d3:1a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JdDLV/atmdNlY7uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDFhZTJiNDAtZGQyMC00NjhjLTkyZDYtN2UzZDdlOWZjNDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf/4Svwlz5VGTFM58Gtd53F1TU/OYjulPECd
Qj+iKYDjSzTpOjymPMwgcaWbzp0mwYqh2qtGO1JhnHWiuu0KmHO1X/8fwCA6lcE+
MzVN7CS4+c2atql4ab9RzjmRj93ogzVFsSiOZgkWkmzH2w941qg9hPHC2os/0kj4
9E9ERKe4SuczlfYb3p5szfPQc3Te7m4l5tHO8thRRzJFb03b/nus3sWOMWsYA5NQ
DNz9Ye3jG4gjdog1zGEEfF4oFyJupeUj+Cliwy36lC0qaG15MFIFFIxXD32uwpui
iWBjmvOJg7CkyYRHMeaw/10VOMG9PaxX1au/hDTRN61hKcTZxwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOp1hS6ojl2g0LQG906m35M7ii0bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzJkY2RmMDItYzM4Mi0z
NTkzLWFhNWMtZDJjYTI3ZjlkZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBXZjdHSGC9u/ZsfLEUidj4zsQeHjfElgQ8UE9Q
a5vrY2syF17tE9+V33zxyK7kJwTI34bI59s75y0jbGILQ/msA29RsREP5Czm7OAZ
17Pq5gEswHRBCC9KHe+qTJIzRAT/LIJIZADgLv0Pk4it832QNdGk9/WoSMug9LoO
xWL/yNNsvvPFAKe2Is5kvs0rxTIsuB+YtJ0ei/shmduTvb5FXQA5QUjKU160ujZq
5jb4jTIKl0uXvJjZPYaOp1hCSgUlJQht0a29fUJFzGThQKcryUU7DDSrfx0lmtok
Ly4GCplgvNitsdqoLOpuCsPshkQhb5+/f4Ss7HokR+5aY9Ma
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:58:09 2026 by rpki-client