Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d70c0f01-c375-35e7-8ab2-046c0371188d.roa
File:                     d70c0f01-c375-35e7-8ab2-046c0371188d.roa (raw, json)
Hash identifier:          uZN0oDmH8NXUtiIAOB4O2PYOzVHaQJ0wl6oFtbClc98=
Subject key identifier:   BF:6C:E4:42:CC:21:93:91:49:65:7B:27:40:3C:37:D0:D4:A8:A9:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498BDF67C59F9E083194B100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d70c0f01-c375-35e7-8ab2-046c0371188d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22547
IP address blocks:        2001:501:8a29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:df:67:c5:9f:9e:08:31:94:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cef92093-e0cf-4268-837b-d7685ac8312a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:21:72:7c:4d:4a:59:84:a3:3a:24:1e:08:d6:
                    11:f2:c4:63:70:63:03:b8:84:65:96:ee:99:2a:2b:
                    67:54:4b:76:84:31:25:62:10:33:cb:3c:92:f7:63:
                    c5:d4:6e:04:31:be:07:00:c0:d6:96:49:ba:d1:11:
                    64:c5:d6:84:1f:c2:d1:15:d6:93:a1:17:7f:36:22:
                    62:2d:22:a5:66:c1:9f:9a:64:77:5e:2e:81:82:5e:
                    9c:67:21:fd:01:dc:c8:a3:31:a4:67:d2:20:56:4d:
                    a6:12:ab:f7:11:a4:31:dd:96:59:fc:d0:ca:e7:33:
                    59:b8:fa:2b:b2:02:e5:1b:12:11:89:c0:37:0a:2d:
                    04:fc:b7:f7:4f:c8:eb:14:d0:e0:27:84:cf:c8:30:
                    55:bb:a6:88:85:58:93:ad:03:ad:87:07:da:cf:c6:
                    ea:90:14:9e:61:2b:4e:01:ea:4d:73:67:7c:3f:72:
                    52:a3:39:82:f0:8a:d2:0f:c4:b9:f9:59:13:8b:93:
                    de:1b:35:94:7c:de:d7:18:d9:1a:4d:04:64:f0:97:
                    f0:ab:c9:07:a4:90:c6:a3:65:32:76:78:e1:45:53:
                    01:7e:57:a3:dd:95:23:de:56:4c:83:92:d7:36:5b:
                    94:d5:25:a7:df:7b:bf:00:d5:0f:42:3a:c7:62:6a:
                    da:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6C:E4:42:CC:21:93:91:49:65:7B:27:40:3C:37:D0:D4:A8:A9:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d70c0f01-c375-35e7-8ab2-046c0371188d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:12:d6:f6:4c:45:21:cc:d1:4a:28:65:9b:7c:4e:da:7c:c4:
         f0:13:b5:49:f7:ad:1a:97:b7:ea:0a:6c:53:b8:67:80:2c:88:
         8f:fb:87:8a:5c:1c:1b:15:fb:44:b4:bc:6a:26:16:ab:f9:07:
         61:81:81:6f:1f:d7:3a:83:8e:81:39:ff:95:f1:49:bf:5d:d9:
         f9:b0:5d:5e:e8:2c:b8:31:06:27:4f:10:8e:53:d0:03:37:6c:
         6e:b1:a7:9d:fd:66:3a:cb:08:9b:ac:b2:8b:6e:12:d0:c4:39:
         7c:55:d6:49:d6:c3:c6:4a:f3:cb:12:88:21:af:4c:7a:a9:dd:
         3e:fa:2c:63:be:f5:0e:4d:22:78:f8:24:0a:0d:54:72:91:d9:
         19:c7:a5:d1:9f:ee:da:71:ae:21:41:a3:bd:11:5f:32:71:d9:
         64:8c:cc:a4:24:0d:97:f5:96:53:1a:11:5e:fa:eb:c1:29:6b:
         0a:6e:c8:d4:a6:c7:48:f8:82:3d:e0:84:47:26:71:8c:ac:ca:
         45:87:03:bf:b6:44:dc:20:e1:e0:93:4c:3e:00:ab:8e:92:2b:
         3c:d3:5d:28:42:03:bc:0f:3d:14:e6:a9:e8:13:52:53:31:50:
         ae:d2:fd:59:ff:60:7b:c5:a3:28:06:9c:70:3e:7d:3d:68:1a:
         6c:95:d5:7b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji99nxZ+eCDGUsQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2VmOTIwOTMtZTBjZi00MjY4LTgzN2ItZDc2ODVhYzgzMTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliFyfE1KWYSjOiQeCNYR8sRjcGMDuIRllu6Z
KitnVEt2hDElYhAzyzyS92PF1G4EMb4HAMDWlkm60RFkxdaEH8LRFdaToRd/NiJi
LSKlZsGfmmR3Xi6Bgl6cZyH9AdzIozGkZ9IgVk2mEqv3EaQx3ZZZ/NDK5zNZuPor
sgLlGxIRicA3Ci0E/Lf3T8jrFNDgJ4TPyDBVu6aIhViTrQOthwfaz8bqkBSeYStO
AepNc2d8P3JSozmC8IrSD8S5+VkTi5PeGzWUfN7XGNkaTQRk8Jfwq8kHpJDGo2Uy
dnjhRVMBflej3ZUj3lZMg5LXNluU1SWn33u/ANUPQjrHYmraMQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL9s5ELMIZORSWV7J0A8N9DUqKl8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDcwYzBmMDEtYzM3NS0z
NWU3LThhYjItMDQ2YzAzNzExODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGES1vZMRSHM0UooZZt8Ttp8xPATtUn3rRqXt+oKbFO4Z4AsiI/7
h4pcHBsV+0S0vGomFqv5B2GBgW8f1zqDjoE5/5XxSb9d2fmwXV7oLLgxBidPEI5T
0AM3bG6xp539ZjrLCJussotuEtDEOXxV1knWw8ZK88sSiCGvTHqp3T76LGO+9Q5N
Inj4JAoNVHKR2RnHpdGf7tpxriFBo70RXzJx2WSMzKQkDZf1llMaEV7668Epawpu
yNSmx0j4gj3ghEcmcYysykWHA7+2RNwg4eCTTD4Aq46SKzzTXShCA7wPPRTmqegT
UlMxUK7S/Vn/YHvFoygGnHA+fT1oGmyV1Xs=
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:59:28 2026 by rpki-client