Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5d9b47b-e08c-3e0f-970c-48e8e5256bba.roa
File:                     c5d9b47b-e08c-3e0f-970c-48e8e5256bba.roa (raw, json)
Hash identifier:          yaoWRuZY191Vt1TQI4Qi8GdWJiqpowJB5mPjnwoocq4=
Subject key identifier:   8D:C8:F2:D5:ED:D0:25:09:A3:01:BF:0A:FB:AB:86:2E:5D:99:85:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4F0807019B994F28685A5C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5d9b47b-e08c-3e0f-970c-48e8e5256bba.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     396733
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:07:01:9b:99:4f:28:68:5a:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=aac088cc-1b86-4134-afd9-9fd6b23c3915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:31:6f:1b:9d:dc:71:01:ed:7c:83:09:ad:2e:
                    75:6c:1e:e9:74:8c:fc:bd:aa:b9:2d:53:a8:ef:1f:
                    8d:96:f4:b2:d5:35:a8:57:e2:8a:1b:45:2b:91:95:
                    ee:00:fc:29:39:e0:b7:05:bd:8e:9c:ae:73:9d:12:
                    40:a7:62:ce:f5:f8:b6:41:96:d4:b8:d5:3c:d7:d1:
                    50:be:d0:64:76:92:05:94:63:d2:8b:37:04:cb:8a:
                    7a:ce:81:d6:9c:d3:9c:60:58:a6:03:00:95:93:19:
                    81:21:1e:4f:80:b0:33:05:a4:2f:7f:9e:14:e3:c6:
                    1c:2e:26:9b:b9:e4:5e:68:dc:be:3e:7b:96:22:5f:
                    37:61:63:c8:ec:a1:05:fd:c9:80:a6:89:87:f7:cc:
                    5f:72:77:28:66:3a:fa:ab:ff:91:6a:66:06:25:95:
                    b3:0b:18:00:ec:52:4f:30:12:6a:b9:a7:02:dd:4b:
                    fd:7f:09:1d:08:f4:77:c3:63:1b:fe:3a:eb:94:eb:
                    81:c4:8f:4a:c1:56:02:fe:3c:09:13:c1:a2:f9:61:
                    0c:57:cd:5a:c5:4c:83:14:9e:a6:09:42:7a:15:61:
                    77:66:a7:fa:ba:18:c3:0a:a9:48:95:0f:8d:bb:65:
                    71:b6:f5:59:92:a9:60:e9:2e:93:8d:eb:a7:b4:14:
                    e7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C8:F2:D5:ED:D0:25:09:A3:01:BF:0A:FB:AB:86:2E:5D:99:85:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5d9b47b-e08c-3e0f-970c-48e8e5256bba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9d:fd:4a:e7:0b:6d:19:3d:35:28:c9:b8:4d:b1:15:e7:0c:
         26:db:4f:fc:6e:fc:0c:1a:21:cd:a1:41:85:65:be:d8:27:ed:
         ed:ab:86:c6:29:e6:d1:a0:6b:97:52:ac:c1:8f:f2:fe:86:94:
         d0:8e:04:b0:cd:5f:6d:b7:e9:2b:e3:0e:9d:83:9e:3c:6a:85:
         88:13:c2:6b:15:f4:04:06:0e:07:a3:31:96:0f:17:3f:6e:36:
         12:f5:ad:21:79:ba:ed:d3:2a:81:d6:49:51:ee:97:fc:12:aa:
         2e:7d:a8:0a:88:03:a3:68:bb:ce:fb:bf:39:53:49:e3:b9:4d:
         73:b0:ce:45:c2:cf:f8:67:57:1e:7f:82:68:89:44:46:bb:71:
         8c:5b:54:24:fb:1b:a5:64:dc:fb:ac:89:7d:c4:51:d1:2b:cd:
         1b:6b:93:4c:53:b5:b3:0f:4c:d3:af:e7:c9:de:b7:dd:d4:0f:
         bd:ab:87:31:9a:bf:57:73:4a:2d:72:f9:f2:df:d6:6b:b7:67:
         52:f3:e2:cb:c7:9e:19:ca:e8:b1:13:12:5c:c6:d8:1e:b9:27:
         96:36:92:d9:39:67:e7:4a:bb:90:6e:60:db:56:3c:e6:ba:58:
         60:e8:e3:06:37:56:ef:cd:a4:30:62:81:c8:57:55:16:f5:2f:
         9d:b2:40:73
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9PCAcBm5lPKGhaXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
YWFjMDg4Y2MtMWI4Ni00MTM0LWFmZDktOWZkNmIyM2MzOTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDFvG53ccQHtfIMJrS51bB7pdIz8vaq5LVOo
7x+NlvSy1TWoV+KKG0UrkZXuAPwpOeC3Bb2OnK5znRJAp2LO9fi2QZbUuNU819FQ
vtBkdpIFlGPSizcEy4p6zoHWnNOcYFimAwCVkxmBIR5PgLAzBaQvf54U48YcLiab
ueReaNy+PnuWIl83YWPI7KEF/cmApomH98xfcncoZjr6q/+RamYGJZWzCxgA7FJP
MBJquacC3Uv9fwkdCPR3w2Mb/jrrlOuBxI9KwVYC/jwJE8Gi+WEMV81axUyDFJ6m
CUJ6FWF3Zqf6uhjDCqlIlQ+Nu2VxtvVZkqlg6S6TjeuntBTnLQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI3I8tXt0CUJowG/Cvurhi5dmYVaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzVkOWI0N2ItZTA4Yy0z
ZTBmLTk3MGMtNDhlOGU1MjU2YmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHid/UrnC20ZPTUoybhNsRXnDCbbT/xu/AwaIc2hQYVlvtgn7e2r
hsYp5tGga5dSrMGP8v6GlNCOBLDNX2236SvjDp2DnjxqhYgTwmsV9AQGDgejMZYP
Fz9uNhL1rSF5uu3TKoHWSVHul/wSqi59qAqIA6Nou877vzlTSeO5TXOwzkXCz/hn
Vx5/gmiJREa7cYxbVCT7G6Vk3PusiX3EUdErzRtrk0xTtbMPTNOv58net93UD72r
hzGav1dzSi1y+fLf1mu3Z1Lz4svHnhnK6LETElzG2B65J5Y2ktk5Z+dKu5BuYNtW
POa6WGDo4wY3Vu/NpDBigchXVRb1L52yQHM=
-----END CERTIFICATE-----
Generated at Mon Oct 5 07:18:35 2026 by rpki-client