Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da249cf7-3c8b-3ce9-b8b7-d919013e658b.roa
File:                     da249cf7-3c8b-3ce9-b8b7-d919013e658b.roa (raw, json)
Hash identifier:          qX7jtvbjgDa30O3E+RjG+SvNAIwDBe3gqOcMC1/d5PU=
Subject key identifier:   D6:21:55:87:75:CE:07:F0:92:7E:86:B7:F8:DA:BF:81:29:F4:44:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A64F05FA3F8110DAEEA6000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da249cf7-3c8b-3ce9-b8b7-d919013e658b.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     396549
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:f0:5f:a3:f8:11:0d:ae:ea:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=378b9560-9a9f-490b-a55d-4d8a0a524b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:79:b3:5d:1a:17:0a:d4:a2:30:df:1c:a7:
                    3a:14:44:56:19:0b:40:09:33:2c:c8:93:ff:d2:f8:
                    a5:69:90:66:e6:e5:bf:e8:86:0c:13:75:6a:47:48:
                    bd:2f:c4:ad:2f:83:db:84:f6:c1:16:f8:ba:17:b3:
                    c1:8b:76:53:40:63:0b:2b:89:b2:78:a1:82:4b:f2:
                    47:5b:fc:ed:68:dd:7a:fd:de:7a:4a:3c:4b:81:5f:
                    9c:5c:03:c9:4c:4f:6b:4f:60:aa:62:de:2c:61:5a:
                    8f:1d:be:c4:8c:82:8e:05:eb:ff:ad:99:f2:77:50:
                    30:01:68:aa:23:88:da:9a:31:8a:12:7d:ef:4d:7b:
                    a2:44:d0:9b:f9:4b:71:14:75:37:96:a1:57:07:2d:
                    e8:39:2b:bf:8b:20:64:13:e6:f2:3f:19:b9:f1:b7:
                    a8:2f:95:6f:89:56:0e:e4:97:5a:fb:8e:5d:8b:63:
                    f4:18:16:b1:49:76:a8:d6:7d:85:b5:98:b4:5d:2d:
                    f6:95:f2:c2:da:91:52:89:e1:3f:06:17:a7:ba:30:
                    38:59:34:75:bc:af:45:00:f4:c4:fb:ce:c5:2b:14:
                    03:35:85:d1:39:8b:f2:d9:23:27:01:1e:97:49:72:
                    70:93:53:c1:27:4f:6b:f6:91:75:a6:12:e5:2f:a9:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:21:55:87:75:CE:07:F0:92:7E:86:B7:F8:DA:BF:81:29:F4:44:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da249cf7-3c8b-3ce9-b8b7-d919013e658b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:03:51:46:3d:95:f5:f0:34:41:c2:73:06:30:16:ec:ba:d5:
         ce:39:19:85:26:dc:a6:8f:ed:b4:bf:1f:d9:d3:1c:48:55:4f:
         e0:27:58:4e:9e:10:64:9b:a3:f8:d9:7b:ab:52:a1:e6:6c:26:
         9b:3c:25:8e:c4:e2:25:8d:dc:ed:c0:f1:64:fa:c4:20:06:02:
         60:4c:24:a8:ab:b4:5b:c8:25:44:68:f8:8f:96:66:af:8f:0b:
         14:b4:76:cf:9b:fb:93:20:ad:74:83:b9:2d:ae:e1:68:ca:af:
         d7:64:4c:26:43:99:72:cc:47:d1:d2:25:f4:56:af:7c:21:aa:
         cf:43:32:19:f1:8f:00:74:95:f7:06:ec:d9:93:62:bb:0c:55:
         17:4b:0a:c2:8f:e6:eb:75:dd:84:da:9b:f2:00:39:38:9b:66:
         c2:f4:00:49:7b:a8:2c:36:22:89:e8:b0:58:fe:d0:8d:6d:4c:
         8c:bb:b9:de:81:5d:4e:60:8e:2d:88:f7:36:3e:5a:3b:68:5f:
         33:6e:37:39:7c:f3:dd:78:1f:50:a7:26:aa:01:bd:3c:17:dc:
         16:55:6a:8a:43:99:56:8c:a2:51:9a:bf:72:0f:0f:0f:d8:e4:
         5c:d0:8f:ed:58:3b:ee:24:d1:9f:45:ec:77:9e:3c:bd:77:b3:
         13:89:80:8b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE56ZPBfo/gRDa7qYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
Mzc4Yjk1NjAtOWE5Zi00OTBiLWE1NWQtNGQ4YTBhNTI0YjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIx5s10aFwrUojDfHKc6FERWGQtACTMsyJP/
0vilaZBm5uW/6IYME3VqR0i9L8StL4PbhPbBFvi6F7PBi3ZTQGMLK4myeKGCS/JH
W/ztaN16/d56SjxLgV+cXAPJTE9rT2CqYt4sYVqPHb7EjIKOBev/rZnyd1AwAWiq
I4jamjGKEn3vTXuiRNCb+UtxFHU3lqFXBy3oOSu/iyBkE+byPxm58beoL5VviVYO
5Jda+45di2P0GBaxSXao1n2FtZi0XS32lfLC2pFSieE/BhenujA4WTR1vK9FAPTE
+87FKxQDNYXROYvy2SMnAR6XSXJwk1PBJ09r9pF1phLlL6kvKwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNYhVYd1zgfwkn6Gt/jav4Ep9ERxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGEyNDljZjctM2M4Yi0z
Y2U5LWI4YjctZDkxOTAxM2U2NThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA0A1FGPZX18DRBwnMGMBbsutXOORmFJtymj+20
vx/Z0xxIVU/gJ1hOnhBkm6P42XurUqHmbCabPCWOxOIljdztwPFk+sQgBgJgTCSo
q7RbyCVEaPiPlmavjwsUtHbPm/uTIK10g7ktruFoyq/XZEwmQ5lyzEfR0iX0Vq98
IarPQzIZ8Y8AdJX3BuzZk2K7DFUXSwrCj+brdd2E2pvyADk4m2bC9ABJe6gsNiKJ
6LBY/tCNbUyMu7negV1OYI4tiPc2Plo7aF8zbjc5fPPdeB9QpyaqAb08F9wWVWqK
Q5lWjKJRmr9yDw8P2ORc0I/tWDvuJNGfRex3njy9d7MTiYCL
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:27:39 2026 by rpki-client