Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2293cb1-864b-3837-86c1-0db31e24ce22.roa
File:                     e2293cb1-864b-3837-86c1-0db31e24ce22.roa (raw, json)
Hash identifier:          ugyW8yyKnKlHPx4LG5plPSJ2mfFr9rcWJBZ75+vrvtk=
Subject key identifier:   F0:D1:42:37:73:1C:51:A5:9E:12:AE:FA:83:42:1F:24:24:27:42:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F6292D3F680E0D24422EC8400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2293cb1-864b-3837-86c1-0db31e24ce22.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396583
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:d3:f6:80:e0:d2:44:22:ec:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=50cb2925-5796-458a-a93c-3945425bc71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:55:9e:e2:46:1d:af:72:ba:6b:30:c6:0a:
                    57:16:62:f2:cf:e9:7f:f0:9d:1c:90:58:51:f6:ef:
                    c0:51:79:0f:df:22:6f:4d:48:89:45:a2:c7:0b:5c:
                    bd:99:f0:ee:f6:d3:ac:39:c8:ea:b2:2e:05:b4:37:
                    b6:3e:b6:5f:00:06:2f:13:39:80:32:98:62:66:b0:
                    e9:3c:2e:4a:3c:b8:e2:4d:aa:3a:f4:2d:79:f6:09:
                    ff:9a:7e:4d:ad:d5:9f:3a:18:6b:92:ac:ce:fe:72:
                    a6:c3:94:8a:d9:50:fc:b1:e7:fc:a0:64:0d:74:48:
                    21:98:44:f5:20:d3:df:20:b9:f1:17:d2:f0:b4:b5:
                    62:ad:db:59:27:26:56:8a:13:83:6b:e6:aa:57:a0:
                    70:df:fd:dc:6d:c5:f1:6d:9c:f6:b1:33:00:ed:db:
                    f5:85:cf:15:a0:27:eb:c7:b5:67:21:68:4b:d4:e1:
                    60:82:73:56:11:7a:70:54:ea:5f:16:8b:75:6d:45:
                    42:f4:34:41:1a:94:32:f5:a3:69:03:17:21:31:24:
                    92:5d:a9:43:0a:48:c5:6f:8b:ba:56:d0:20:f2:87:
                    8b:bc:75:17:da:71:b4:e1:57:a1:2e:a6:d0:2d:20:
                    13:28:7d:ce:7d:b6:13:f7:19:0a:35:68:9c:6e:3f:
                    90:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D1:42:37:73:1C:51:A5:9E:12:AE:FA:83:42:1F:24:24:27:42:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2293cb1-864b-3837-86c1-0db31e24ce22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:d7:b9:d6:e2:e8:f8:e2:4d:16:b9:e0:fe:1f:dc:4a:e7:69:
         da:bf:7b:de:86:dc:cc:90:61:0e:74:6c:fd:c2:df:06:88:69:
         6f:e5:da:b1:23:8f:05:02:3a:8b:01:0a:62:4b:af:df:29:dd:
         b6:5a:5d:88:1b:ab:39:2e:aa:9e:a3:21:e5:8c:12:e2:e8:22:
         2c:1a:6a:ab:e0:01:ea:a8:db:d1:69:e2:bc:f6:18:f9:43:f5:
         bd:e2:0f:94:80:de:9e:44:2e:fa:a4:f9:77:72:b5:5b:3a:e3:
         fa:39:07:54:b7:35:1b:89:0c:1d:32:d6:3e:93:c5:ed:43:a9:
         27:c9:a5:6c:2a:1e:19:d3:c5:53:46:6f:0a:70:ea:8d:13:ee:
         c2:ca:2c:38:31:3f:b7:99:80:d8:32:b2:34:54:c2:74:53:f6:
         56:2d:c6:57:8f:0e:b2:7c:81:cb:2a:04:92:de:e5:24:de:f5:
         61:68:24:b5:fb:7c:5b:a0:06:e8:eb:36:6d:52:e8:33:6e:41:
         ab:ff:b5:4a:71:92:4b:cf:e1:01:0f:25:86:cc:c1:d6:9f:b2:
         e5:c6:81:02:b8:53:da:aa:d5:66:0c:db:f8:c3:1a:63:5d:54:
         3a:87:fa:7d:6f:5d:b4:eb:37:77:eb:0a:bb:cc:af:98:72:6d:
         20:65:ba:25
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9iktP2gODSRCLshAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
NTBjYjI5MjUtNTc5Ni00NThhLWE5M2MtMzk0NTQyNWJjNzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9BVnuJGHa9yumswxgpXFmLyz+l/8J0ckFhR
9u/AUXkP3yJvTUiJRaLHC1y9mfDu9tOsOcjqsi4FtDe2PrZfAAYvEzmAMphiZrDp
PC5KPLjiTao69C159gn/mn5NrdWfOhhrkqzO/nKmw5SK2VD8sef8oGQNdEghmET1
INPfILnxF9LwtLVirdtZJyZWihODa+aqV6Bw3/3cbcXxbZz2sTMA7dv1hc8VoCfr
x7VnIWhL1OFggnNWEXpwVOpfFot1bUVC9DRBGpQy9aNpAxchMSSSXalDCkjFb4u6
VtAg8oeLvHUX2nG04VehLqbQLSATKH3OfbYT9xkKNWicbj+QbwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPDRQjdzHFGlnhKu+oNCHyQkJ0LPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTIyOTNjYjEtODY0Yi0z
ODM3LTg2YzEtMGRiMzFlMjRjZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAK/Xudbi6PjiTRa54P4f3Ernadq/e96G3MyQYQ50bP3C3waIaW/l
2rEjjwUCOosBCmJLr98p3bZaXYgbqzkuqp6jIeWMEuLoIiwaaqvgAeqo29Fp4rz2
GPlD9b3iD5SA3p5ELvqk+XdytVs64/o5B1S3NRuJDB0y1j6Txe1DqSfJpWwqHhnT
xVNGbwpw6o0T7sLKLDgxP7eZgNgysjRUwnRT9lYtxlePDrJ8gcsqBJLe5STe9WFo
JLX7fFugBujrNm1S6DNuQav/tUpxkkvP4QEPJYbMwdafsuXGgQK4U9qq1WYM2/jD
GmNdVDqH+n1vXbTrN3frCrvMr5hybSBluiU=
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:17:21 2026 by rpki-client