Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf427ffd-de9a-357e-9695-68b9971007a0.roa
File:                     cf427ffd-de9a-357e-9695-68b9971007a0.roa (raw, json)
Hash identifier:          NPeNLT58xHr95hXW+01dwVGvYvKzmQ2GjOCnqlr2QHA=
Subject key identifier:   2C:AF:B0:4E:7D:24:5B:BE:4F:AA:82:AF:D2:FD:0A:E8:4E:2B:6D:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4974A74D082D211FFDF09000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf427ffd-de9a-357e-9695-68b9971007a0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396561
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:a7:4d:08:2d:21:1f:fd:f0:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=982bbf18-ddaf-4669-96f5-40b562d20ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:32:a5:27:39:16:02:28:d6:c3:49:ae:31:
                    ed:40:6b:34:82:ba:1e:c3:ea:ed:95:23:fe:8f:44:
                    2e:c2:14:5b:ca:0d:bf:78:b2:6e:34:17:9b:f2:ae:
                    82:01:ba:93:67:f8:a3:71:5b:94:27:99:ca:02:45:
                    a7:06:13:02:4a:81:a3:3d:87:78:d4:f4:73:14:39:
                    f3:ca:a6:ab:4e:b8:34:ba:63:4e:e3:3b:05:6a:85:
                    0f:10:63:d5:e5:22:78:ef:52:9a:c6:26:fc:7e:39:
                    90:52:88:70:54:a8:21:6e:7a:9c:95:c9:89:eb:71:
                    d5:37:d6:39:77:a1:15:f9:ed:70:67:b2:b1:d9:12:
                    72:b6:ff:6a:db:4a:0c:67:08:10:72:e9:b9:74:92:
                    e4:c2:ec:06:1e:6c:cd:0d:85:61:a7:df:84:ee:cb:
                    19:17:c6:7c:c5:8e:d9:78:e5:b5:ec:66:ea:62:c2:
                    f9:7c:6c:22:d3:7c:33:9d:55:54:4e:09:ce:4a:cc:
                    81:e9:5f:6e:b0:f9:42:e2:06:b3:d6:fa:f6:93:21:
                    6b:a5:e8:72:f3:20:d8:3e:6b:d7:50:50:30:75:b1:
                    97:5b:ac:2a:6a:6d:98:cc:54:52:5c:8f:c6:7c:c2:
                    47:53:11:d9:22:8a:3c:ad:ae:01:53:e2:c0:74:eb:
                    0d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AF:B0:4E:7D:24:5B:BE:4F:AA:82:AF:D2:FD:0A:E8:4E:2B:6D:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf427ffd-de9a-357e-9695-68b9971007a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:77:ea:37:04:a0:c5:f9:f8:b6:d5:e0:09:70:be:26:6d:41:
         19:11:ce:89:13:b5:26:d1:08:c4:89:30:61:77:4c:3f:a2:f0:
         b2:53:1f:f1:99:2a:ea:8b:f6:37:08:f1:ab:67:9f:c5:d5:dc:
         bd:b4:f5:cb:3f:68:c1:d2:9e:25:94:bb:75:d9:3f:5a:0a:1c:
         78:7c:a0:1f:52:bf:0d:42:7b:82:08:f2:4b:10:3a:28:be:60:
         72:13:2f:22:34:0a:bd:58:5e:b4:e3:1c:f2:17:69:68:21:14:
         d7:b2:ba:54:68:c4:e2:e5:f2:c6:1f:12:b5:09:25:6b:f5:c7:
         74:d9:61:5b:95:74:9a:d4:27:6c:13:89:d4:42:c2:b9:11:da:
         23:6e:c4:0b:3b:f0:29:cc:9d:29:35:b4:32:a7:d7:45:f9:c9:
         0b:b5:67:91:29:9a:26:9d:9d:93:b4:f6:0e:67:58:44:6f:ea:
         7e:45:f3:0b:30:25:68:32:4b:be:b7:5a:9e:7f:33:41:ec:52:
         44:cf:df:9b:58:f0:a1:d8:6b:ca:5f:43:ee:97:df:05:54:9f:
         92:d5:20:ba:51:a6:cc:81:c6:a6:36:d7:0a:ab:cf:0b:25:a9:
         0b:cc:24:bd:e1:9d:af:ab:3c:a1:78:c1:99:4d:43:e4:e5:8f:
         eb:96:bb:78
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JdKdNCC0hH/3wkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTgyYmJmMTgtZGRhZi00NjY5LTk2ZjUtNDBiNTYyZDIwY2ViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutkypSc5FgIo1sNJrjHtQGs0groew+rtlSP+
j0QuwhRbyg2/eLJuNBeb8q6CAbqTZ/ijcVuUJ5nKAkWnBhMCSoGjPYd41PRzFDnz
yqarTrg0umNO4zsFaoUPEGPV5SJ471Kaxib8fjmQUohwVKghbnqclcmJ63HVN9Y5
d6EV+e1wZ7Kx2RJytv9q20oMZwgQcum5dJLkwuwGHmzNDYVhp9+E7ssZF8Z8xY7Z
eOW17GbqYsL5fGwi03wznVVUTgnOSsyB6V9usPlC4gaz1vr2kyFrpehy8yDYPmvX
UFAwdbGXW6wqam2YzFRSXI/GfMJHUxHZIoo8ra4BU+LAdOsNmQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCyvsE59JFu+T6qCr9L9CuhOK21dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Y0MjdmZmQtZGU5YS0z
NTdlLTk2OTUtNjhiOTk3MTAwN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB7d+o3BKDF+fi21eAJcL4mbUEZEc6JE7Um0QjE
iTBhd0w/ovCyUx/xmSrqi/Y3CPGrZ5/F1dy9tPXLP2jB0p4llLt12T9aChx4fKAf
Ur8NQnuCCPJLEDoovmByEy8iNAq9WF604xzyF2loIRTXsrpUaMTi5fLGHxK1CSVr
9cd02WFblXSa1CdsE4nUQsK5EdojbsQLO/ApzJ0pNbQyp9dF+ckLtWeRKZomnZ2T
tPYOZ1hEb+p+RfMLMCVoMku+t1qefzNB7FJEz9+bWPCh2GvKX0Pul98FVJ+S1SC6
UabMgcamNtcKq88LJakLzCS94Z2vqzyheMGZTUPk5Y/rlrt4
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:35:37 2026 by rpki-client