Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec1c0174-5dbe-3345-ac61-ef0cca301a91.roa
File:                     ec1c0174-5dbe-3345-ac61-ef0cca301a91.roa (raw, json)
Hash identifier:          F/OAL4HnsA3sl0mZbOlBP4zlHpTzLuXNZP2LZ5nXOGk=
Subject key identifier:   ED:62:64:02:26:B5:5B:D4:C5:64:83:6C:8F:96:AB:F3:9A:34:3F:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F093CFB157DB665FDFEC5ABA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec1c0174-5dbe-3345-ac61-ef0cca301a91.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     397193
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:fb:15:7d:b6:65:fd:fe:c5:ab:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=668a6313-b4dd-4eeb-8e56-c13e636c586d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3d:e2:d0:0e:c3:62:25:33:45:52:b0:7c:38:
                    76:0b:d7:e9:04:0b:08:87:65:e7:7c:2a:4c:de:ef:
                    b4:bb:0f:54:07:2b:09:5c:ee:ba:21:1a:20:50:63:
                    8a:da:6c:75:94:75:ce:e1:2f:70:98:b6:42:f8:d0:
                    f4:fe:92:b8:a0:80:68:28:8b:54:0f:2e:21:73:96:
                    a5:be:b3:fc:cd:11:3c:8f:1f:79:c8:18:c8:2b:99:
                    f5:e9:af:53:08:08:9c:76:c1:a2:2e:ff:ed:af:cd:
                    a2:c2:3a:82:9f:f2:ab:d2:3a:41:21:d6:d2:06:0a:
                    10:e6:93:1a:18:a3:c9:32:f8:a8:f7:94:6d:d4:cb:
                    9d:fe:2c:40:19:71:34:93:2c:c0:77:cc:34:67:3f:
                    ca:89:f3:4d:c5:6b:ce:a5:99:f9:ae:5c:da:74:70:
                    ea:14:05:f7:43:37:9a:06:26:50:16:c9:d8:47:0b:
                    fd:40:a3:6c:f3:6a:bc:75:85:9f:0b:1d:4c:8c:96:
                    51:8a:ee:25:cb:a7:07:bf:4a:ca:2b:d6:6f:a7:75:
                    a7:8e:02:d0:5d:88:4c:cd:57:99:c8:fd:66:65:15:
                    6e:99:f1:c5:7c:c1:91:86:b5:d7:a9:b6:02:aa:e6:
                    1b:08:3b:57:e9:f4:28:c2:c7:f6:68:bb:cc:83:4b:
                    a6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:62:64:02:26:B5:5B:D4:C5:64:83:6C:8F:96:AB:F3:9A:34:3F:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec1c0174-5dbe-3345-ac61-ef0cca301a91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:04:a5:3b:3d:2e:98:03:9c:97:99:58:d3:ff:41:2e:9f:8a:
         26:1f:2d:b5:d0:b9:ae:01:42:94:bf:27:38:51:c0:c8:b5:cd:
         2c:ef:9f:38:ed:6d:56:4e:85:17:e0:2b:df:40:72:63:40:8e:
         1e:b8:be:59:57:2c:9e:87:3d:98:c1:62:6b:56:71:dd:67:ce:
         ab:a4:9d:f3:bd:e7:00:67:d5:70:9e:ab:95:5c:d9:83:63:9a:
         9d:e9:76:ac:bd:61:4c:fa:4d:01:4b:91:28:3c:6a:f7:67:c0:
         05:3a:63:38:68:4c:35:72:66:83:74:b3:3a:38:98:3f:4f:42:
         1a:40:c4:b8:7e:b3:41:bf:01:4f:fd:a5:ff:21:aa:f4:ed:f0:
         31:42:b5:da:4c:d4:87:5d:17:1e:a6:db:70:db:8e:90:d5:40:
         6d:59:29:7c:e9:9a:2f:03:63:1c:06:30:26:da:2f:a0:8a:50:
         aa:2f:04:fe:2b:4c:40:02:47:2e:61:5f:a0:1c:9f:39:57:a6:
         09:a8:f4:2a:a0:98:7e:d2:c9:52:3e:7c:4e:9e:4b:39:0f:d5:
         c7:13:6e:ec:67:ba:3c:f7:cc:00:e3:c7:b7:0d:a4:6e:7e:8c:
         7b:ea:c4:45:2c:8e:51:9d:bd:57:db:98:fc:c4:ed:3c:9f:29:
         51:05:28:09
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8JPPsVfbZl/f7Fq6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
NjY4YTYzMTMtYjRkZC00ZWViLThlNTYtYzEzZTYzNmM1ODZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj3i0A7DYiUzRVKwfDh2C9fpBAsIh2XnfCpM
3u+0uw9UBysJXO66IRogUGOK2mx1lHXO4S9wmLZC+ND0/pK4oIBoKItUDy4hc5al
vrP8zRE8jx95yBjIK5n16a9TCAicdsGiLv/tr82iwjqCn/Kr0jpBIdbSBgoQ5pMa
GKPJMvio95Rt1Mud/ixAGXE0kyzAd8w0Zz/KifNNxWvOpZn5rlzadHDqFAX3Qzea
BiZQFsnYRwv9QKNs82q8dYWfCx1MjJZRiu4ly6cHv0rKK9Zvp3WnjgLQXYhMzVeZ
yP1mZRVumfHFfMGRhrXXqbYCquYbCDtX6fQowsf2aLvMg0umdwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFO1iZAImtVvUxWSDbI+Wq/OaND8oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWMxYzAxNzQtNWRiZS0z
MzQ1LWFjNjEtZWYwY2NhMzAxYTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCtBKU7PS6YA5yXmVjT/0Eun4omHy210LmuAUKU
vyc4UcDItc0s75847W1WToUX4CvfQHJjQI4euL5ZVyyehz2YwWJrVnHdZ86rpJ3z
vecAZ9VwnquVXNmDY5qd6XasvWFM+k0BS5EoPGr3Z8AFOmM4aEw1cmaDdLM6OJg/
T0IaQMS4frNBvwFP/aX/Iar07fAxQrXaTNSHXRcepttw246Q1UBtWSl86ZovA2Mc
BjAm2i+gilCqLwT+K0xAAkcuYV+gHJ85V6YJqPQqoJh+0slSPnxOnks5D9XHE27s
Z7o898wA48e3DaRufox76sRFLI5Rnb1X25j8xO08nylRBSgJ
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:57:56 2026 by rpki-client