Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ceccabe4-2f23-35ef-ae6d-a55e4b15866f.roa
File:                     ceccabe4-2f23-35ef-ae6d-a55e4b15866f.roa (raw, json)
Hash identifier:          NtwD5WjA2C3yE00TD5ZCsCY9Dcjm/LFYgEsshEUGiRU=
Subject key identifier:   A2:35:66:F0:EA:3D:3D:10:EC:72:3D:6E:F1:47:68:32:25:A6:D5:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FB2D38632D728AA9F0F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ceccabe4-2f23-35ef-ae6d-a55e4b15866f.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396545
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:b2:d3:86:32:d7:28:aa:9f:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=09842f7d-a0c1-4bc9-a6a5-dc3fc3776b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:56:32:49:57:8d:ad:f6:4a:c4:aa:ac:f7:93:
                    f8:95:52:82:09:77:5e:58:0f:52:4a:2f:21:a3:43:
                    cd:24:c6:9d:6f:cd:2b:08:4c:22:10:ed:14:9e:06:
                    f7:58:f9:69:da:4f:c6:49:46:42:dd:01:a1:a8:3b:
                    5b:22:a9:1e:c6:bf:09:ac:c5:fe:bd:2f:43:46:80:
                    69:c2:70:95:db:66:78:35:81:ca:c2:38:ff:0f:17:
                    71:c2:54:e7:fc:2e:55:89:36:b5:c6:7a:c6:27:c9:
                    14:c3:10:f4:f5:6a:e5:88:37:4b:e3:1f:e2:bd:43:
                    af:1a:d1:a9:e6:2c:b0:a2:a3:5f:b2:ec:2a:58:d7:
                    21:e2:1f:b7:38:de:01:08:3f:b0:60:b5:bb:f7:06:
                    b3:9b:c3:82:e4:b9:d0:9d:04:e8:52:f7:bd:47:9c:
                    8d:36:de:12:2b:30:a8:c4:9d:4a:1c:4a:65:b4:80:
                    79:c5:b6:d8:d9:60:75:d4:99:0b:10:33:c8:aa:0d:
                    34:48:6b:ed:86:1d:89:e3:98:35:20:2d:8d:c7:90:
                    3e:af:2d:5b:71:c6:8c:6c:86:79:89:fa:5e:6d:55:
                    27:50:eb:7f:a7:54:e3:47:ec:3c:1c:01:23:ff:5d:
                    f7:f0:e1:f7:74:fa:8b:31:85:9a:1e:a6:bb:e2:46:
                    82:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:35:66:F0:EA:3D:3D:10:EC:72:3D:6E:F1:47:68:32:25:A6:D5:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ceccabe4-2f23-35ef-ae6d-a55e4b15866f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:64:a1:09:f7:40:62:f3:1a:1d:5b:7d:d9:45:ba:26:fc:98:
         9e:94:ef:6a:dd:6a:fb:12:32:c6:32:d7:ee:d5:51:6a:3f:9c:
         1a:3e:e7:ea:11:d7:1c:7c:12:07:b3:bb:8f:17:9f:95:8e:9c:
         29:c0:e7:6a:39:5e:96:d5:a9:a2:34:9c:4e:99:99:9a:d5:5f:
         40:f1:42:66:09:22:45:ce:22:5b:ed:4e:51:4f:58:9e:e0:6c:
         92:06:72:53:70:af:78:5d:74:0c:51:c1:c8:98:94:8c:92:f8:
         91:ac:1a:03:2f:1c:7e:32:a2:b2:a1:70:2c:ad:36:e5:02:f0:
         d0:54:48:e0:73:61:34:60:1d:b7:b2:5d:b7:0c:e3:fa:82:40:
         8e:8b:9f:3e:2a:8b:4c:b2:d4:41:57:a5:c5:7f:70:85:96:bf:
         99:49:19:af:b8:4a:57:3f:80:aa:74:53:21:af:1f:90:fa:3a:
         a4:d0:0d:9c:a9:63:c3:9b:45:4d:d5:f7:0c:6e:1d:a9:4a:50:
         5c:3a:c9:38:cf:cc:dc:db:05:5b:46:1b:23:5c:31:35:e4:70:
         c6:68:83:4a:b4:0f:d8:30:38:21:30:22:8a:4e:05:3e:ec:09:
         c6:a8:f1:38:23:c2:21:aa:9d:2e:5a:38:f7:2b:6e:62:40:25:
         67:6d:fc:f7
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE5kD7LThjLXKKqfD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
MDk4NDJmN2QtYTBjMS00YmM5LWE2YTUtZGMzZmMzNzc2Yjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVYySVeNrfZKxKqs95P4lVKCCXdeWA9SSi8h
o0PNJMadb80rCEwiEO0Ungb3WPlp2k/GSUZC3QGhqDtbIqkexr8JrMX+vS9DRoBp
wnCV22Z4NYHKwjj/DxdxwlTn/C5ViTa1xnrGJ8kUwxD09WrliDdL4x/ivUOvGtGp
5iywoqNfsuwqWNch4h+3ON4BCD+wYLW79wazm8OC5LnQnQToUve9R5yNNt4SKzCo
xJ1KHEpltIB5xbbY2WB11JkLEDPIqg00SGvthh2J45g1IC2Nx5A+ry1bccaMbIZ5
ifpebVUnUOt/p1TjR+w8HAEj/1338OH3dPqLMYWaHqa74kaCNQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKI1ZvDqPT0Q7HI9bvFHaDIlptWzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2VjY2FiZTQtMmYyMy0z
NWVmLWFlNmQtYTU1ZTRiMTU4NjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCiZKEJ90Bi8xodW33ZRbom/JielO9q3Wr7EjLG
Mtfu1VFqP5waPufqEdccfBIHs7uPF5+VjpwpwOdqOV6W1amiNJxOmZma1V9A8UJm
CSJFziJb7U5RT1ie4GySBnJTcK94XXQMUcHImJSMkviRrBoDLxx+MqKyoXAsrTbl
AvDQVEjgc2E0YB23sl23DOP6gkCOi58+KotMstRBV6XFf3CFlr+ZSRmvuEpXP4Cq
dFMhrx+Q+jqk0A2cqWPDm0VN1fcMbh2pSlBcOsk4z8zc2wVbRhsjXDE15HDGaINK
tA/YMDghMCKKTgU+7AnGqPE4I8Ihqp0uWjj3K25iQCVnbfz3
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:41 2026 by rpki-client