Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e43ffd-fa6c-3d54-bcd6-cceeeae2bebc.roa
File:                     c2e43ffd-fa6c-3d54-bcd6-cceeeae2bebc.roa (raw, json)
Hash identifier:          88He9Xqrmmpe2mrMKiR/Hta6LBtjM/0mBEz1Yvg0KAE=
Subject key identifier:   E1:07:F0:51:19:5B:09:E3:61:9A:2A:F5:FA:8E:B9:02:81:C3:3D:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584FA85E236ABA537B775BC40F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e43ffd-fa6c-3d54-bcd6-cceeeae2bebc.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     36620
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5e:23:6a:ba:53:7b:77:5b:c4:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=aa2fc838-8f31-4318-82e2-fca8f65cbcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d0:a1:df:e4:99:7a:30:1a:38:52:33:2e:96:
                    eb:ce:f0:2f:fa:2e:5c:47:4b:ab:99:86:47:7a:2d:
                    8f:03:ca:be:b7:73:6b:ec:37:83:a3:83:78:33:29:
                    16:df:01:e5:89:83:b3:34:3d:0c:d2:d1:9b:b7:a3:
                    20:83:e2:18:ff:4b:b6:18:38:19:39:47:59:7d:d0:
                    08:e5:eb:b9:da:79:92:5b:00:30:3c:fa:c1:59:87:
                    47:af:53:21:99:ad:bb:a5:74:4b:83:e3:d3:6b:49:
                    31:f2:71:b9:26:24:6d:37:17:41:08:d0:43:26:41:
                    b8:fb:e4:a7:eb:3e:99:5f:a0:7c:1b:9a:4a:bd:09:
                    f8:3e:e0:52:47:61:d1:86:bc:a7:a4:f8:ce:71:60:
                    8d:f7:56:1c:ce:08:88:ca:09:da:a0:41:90:02:39:
                    e4:33:20:f3:58:2c:fd:d4:b1:3f:69:1b:f9:1f:a4:
                    2b:a5:d2:cb:bc:cf:89:6a:49:5b:1a:bd:c6:56:a0:
                    f7:07:62:21:2a:82:ad:28:53:0f:64:54:cc:a7:7d:
                    da:a5:be:0c:26:2d:10:fb:16:c7:b0:9a:26:08:0a:
                    a2:29:09:53:bc:f0:3f:8d:64:42:6c:df:b8:0c:13:
                    87:5f:67:26:8b:87:20:1a:43:d4:92:05:de:b6:32:
                    7d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:07:F0:51:19:5B:09:E3:61:9A:2A:F5:FA:8E:B9:02:81:C3:3D:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e43ffd-fa6c-3d54-bcd6-cceeeae2bebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:7a:09:4d:a1:d5:fa:40:52:c8:93:d8:52:4d:3e:b0:60:8c:
         5f:f0:32:19:45:de:0c:d9:c2:5d:f0:e5:61:c9:9c:df:5b:b3:
         6d:eb:59:80:bd:db:74:37:5e:dd:f1:09:a0:77:8e:12:cb:af:
         64:51:d6:c0:c2:0c:06:38:91:28:e6:b5:51:b1:96:15:5f:a4:
         f9:48:70:18:a8:16:57:ff:5b:35:13:99:1d:a9:ea:07:9d:e5:
         01:e8:1b:27:fb:76:05:67:48:22:e5:ef:dc:bd:a3:49:b4:1a:
         7c:e5:2f:f3:50:c4:98:45:00:e3:43:1d:40:df:c4:bb:8a:ff:
         85:11:ce:27:f0:8e:b8:93:12:23:d4:f3:6e:8c:ca:5c:ca:67:
         63:4d:eb:36:fa:d9:39:cc:26:e8:03:54:09:90:a9:d6:02:27:
         f6:1e:08:a2:9d:bc:06:4f:aa:66:e5:2f:e8:10:ac:19:37:b8:
         60:29:19:64:92:d0:d1:79:ac:8d:74:88:30:16:e8:41:77:b0:
         c2:c3:c7:e7:70:79:2c:58:8a:3e:b7:c5:2b:13:a4:5c:d5:5e:
         d2:33:db:49:72:e4:f8:a0:f9:1f:ba:ac:e5:98:66:29:b5:72:
         b8:e9:63:f6:86:fa:aa:33:d2:01:f1:45:27:05:fb:66:4e:91:
         2a:d2:a9:34
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE+oXiNqulN7d1vEDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk
YWEyZmM4MzgtOGYzMS00MzE4LTgyZTItZmNhOGY2NWNiY2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltCh3+SZejAaOFIzLpbrzvAv+i5cR0urmYZH
ei2PA8q+t3Nr7DeDo4N4MykW3wHliYOzND0M0tGbt6Mgg+IY/0u2GDgZOUdZfdAI
5eu52nmSWwAwPPrBWYdHr1Mhma27pXRLg+PTa0kx8nG5JiRtNxdBCNBDJkG4++Sn
6z6ZX6B8G5pKvQn4PuBSR2HRhrynpPjOcWCN91YczgiIygnaoEGQAjnkMyDzWCz9
1LE/aRv5H6QrpdLLvM+JaklbGr3GVqD3B2IhKoKtKFMPZFTMp33apb4MJi0Q+xbH
sJomCAqiKQlTvPA/jWRCbN+4DBOHX2cmi4cgGkPUkgXetjJ9fQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOEH8FEZWwnjYZoq9fqOuQKBwz2vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzJlNDNmZmQtZmE2Yy0z
ZDU0LWJjZDYtY2NlZWVhZTJiZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCDeglNodX6QFLIk9hSTT6wYIxf8DIZRd4M2cJd
8OVhyZzfW7Nt61mAvdt0N17d8Qmgd44Sy69kUdbAwgwGOJEo5rVRsZYVX6T5SHAY
qBZX/1s1E5kdqeoHneUB6Bsn+3YFZ0gi5e/cvaNJtBp85S/zUMSYRQDjQx1A38S7
iv+FEc4n8I64kxIj1PNujMpcymdjTes2+tk5zCboA1QJkKnWAif2HgiinbwGT6pm
5S/oEKwZN7hgKRlkktDReayNdIgwFuhBd7DCw8fncHksWIo+t8UrE6Rc1V7SM9tJ
cuT4oPkfuqzlmGYptXK46WP2hvqqM9IB8UUnBftmTpEq0qk0
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:34:42 2026 by rpki-client