Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efb59253-4313-3d79-8460-2ff12f546ec1.roa
File:                     efb59253-4313-3d79-8460-2ff12f546ec1.roa (raw, json)
Hash identifier:          9Fk4/Rc0Q+PPomM0PU7SaY+1CkDqE9Of6WYWmhzYRVM=
Subject key identifier:   C3:69:6C:07:C1:5C:D2:3C:14:4D:59:23:1B:F4:46:C6:E0:D6:79:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49890ED1D923EEEA0394C500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efb59253-4313-3d79-8460-2ff12f546ec1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36629
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:0e:d1:d9:23:ee:ea:03:94:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=03eb3c51-54e8-45e7-b560-247ad7e0351e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:a8:c1:b6:61:33:ca:52:8a:4f:ef:e5:db:
                    80:73:46:95:45:14:e0:64:38:47:65:9f:31:a6:d7:
                    e3:6d:c3:28:88:c4:6f:27:03:68:7b:cb:f8:fe:bd:
                    ee:71:98:23:f9:99:87:c4:90:c2:0d:34:cc:e1:a3:
                    46:23:1f:a1:65:20:7c:df:78:4f:54:e7:98:78:54:
                    2d:e6:19:ab:23:b8:e4:10:f9:25:94:2f:7a:0e:a7:
                    0d:be:bd:be:c5:a4:7a:1e:50:81:7c:e3:ed:5f:a2:
                    07:d1:76:33:7d:a9:ab:c4:44:0e:a8:78:16:6a:7b:
                    65:05:63:f3:55:08:47:63:9f:9c:27:5f:ed:a7:09:
                    f6:ff:b9:6a:95:ec:ab:3f:86:d3:0f:f5:31:d2:8f:
                    7e:37:f8:eb:f2:53:10:db:a6:68:bb:71:a4:d0:35:
                    9a:2d:97:8f:62:b9:bb:0b:80:1e:59:8f:59:60:ae:
                    1a:04:f8:6a:02:fd:e1:1d:ed:ff:98:d0:69:8f:64:
                    16:63:f1:ab:20:f3:d7:7a:57:3a:67:2a:28:0c:29:
                    f6:f4:d2:5f:a7:63:ab:14:ca:f9:9f:dc:d7:eb:e8:
                    a4:dd:fa:07:75:26:1b:f2:10:17:6d:7b:89:50:dc:
                    b3:bd:9e:de:16:f5:17:e9:f2:c0:39:f6:59:39:5a:
                    22:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:69:6C:07:C1:5C:D2:3C:14:4D:59:23:1B:F4:46:C6:E0:D6:79:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efb59253-4313-3d79-8460-2ff12f546ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:f0:25:2c:aa:5b:71:a4:27:2a:ea:3d:ee:eb:b3:ba:a4:78:
         e2:84:57:85:97:ba:17:85:56:4b:0b:b0:a6:85:80:8e:7c:01:
         80:8d:44:6f:fc:60:a0:e2:9a:3f:1e:56:d2:4d:e6:42:a8:54:
         6c:7f:61:07:b3:2a:70:22:48:f2:ec:1b:22:a4:8c:57:a3:1c:
         35:c6:1f:6e:d4:db:e0:44:e0:7b:6c:9a:a4:6c:fc:7a:29:ba:
         cb:4f:b7:ac:0b:9f:e9:86:48:95:86:0d:8e:96:76:d4:64:8b:
         58:95:fc:95:1d:38:6e:59:40:ad:a1:d3:63:32:2e:a4:57:93:
         ce:38:3b:a3:6c:0c:3b:3a:a1:1b:63:c9:97:bd:c0:72:33:c8:
         ae:22:a8:69:00:69:67:cb:fc:1a:d2:aa:8c:8e:06:eb:d2:45:
         d4:12:af:50:1a:cf:e5:93:b6:e2:90:6c:9b:23:25:81:7f:54:
         46:48:43:8b:05:c3:04:98:f1:79:27:01:0f:94:7e:2e:b7:df:
         6e:34:87:ec:cd:0e:dc:e3:b5:fc:80:9b:0c:d1:31:13:d9:6f:
         d8:f9:37:6e:4d:78:59:35:34:ba:87:ee:3a:7d:ca:a7:7f:39:
         fd:0d:b1:71:3d:3c:00:63:82:68:dd:cb:cd:c4:e8:5b:34:6d:
         a2:8d:c7:90
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JiQ7R2SPu6gOUxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDNlYjNjNTEtNTRlOC00NWU3LWI1NjAtMjQ3YWQ3ZTAzNTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnKowbZhM8pSik/v5duAc0aVRRTgZDhHZZ8x
ptfjbcMoiMRvJwNoe8v4/r3ucZgj+ZmHxJDCDTTM4aNGIx+hZSB833hPVOeYeFQt
5hmrI7jkEPkllC96DqcNvr2+xaR6HlCBfOPtX6IH0XYzfamrxEQOqHgWantlBWPz
VQhHY5+cJ1/tpwn2/7lqleyrP4bTD/Ux0o9+N/jr8lMQ26Zou3Gk0DWaLZePYrm7
C4AeWY9ZYK4aBPhqAv3hHe3/mNBpj2QWY/GrIPPXelc6ZyooDCn29NJfp2OrFMr5
n9zX6+ik3foHdSYb8hAXbXuJUNyzvZ7eFvUX6fLAOfZZOVoi8QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMNpbAfBXNI8FE1ZIxv0Rsbg1nmvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWZiNTkyNTMtNDMxMy0z
ZDc5LTg0NjAtMmZmMTJmNTQ2ZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBj8CUsqltxpCcq6j3u67O6pHjihFeFl7oXhVZL
C7CmhYCOfAGAjURv/GCg4po/HlbSTeZCqFRsf2EHsypwIkjy7BsipIxXoxw1xh9u
1NvgROB7bJqkbPx6KbrLT7esC5/phkiVhg2OlnbUZItYlfyVHThuWUCtodNjMi6k
V5POODujbAw7OqEbY8mXvcByM8iuIqhpAGlny/wa0qqMjgbr0kXUEq9QGs/lk7bi
kGybIyWBf1RGSEOLBcMEmPF5JwEPlH4ut99uNIfszQ7c47X8gJsM0TET2W/Y+Tdu
TXhZNTS6h+46fcqnfzn9DbFxPTwAY4Jo3cvNxOhbNG2ijceQ
-----END CERTIFICATE-----
Generated at Sat Sep 26 19:07:02 2026 by rpki-client