Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f563c169-14af-3bdc-a2ce-727526c05eba.roa
File:                     f563c169-14af-3bdc-a2ce-727526c05eba.roa (raw, json)
Hash identifier:          +vqLBhr2NB4JbkgCA1J+Rr6DUZm9WejxhX63SJhzxZI=
Subject key identifier:   70:D1:6F:A8:82:6F:1E:CD:25:3B:87:0F:8E:F6:35:5B:33:99:B2:99
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A64EFAA0749FDD21EAA7940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f563c169-14af-3bdc-a2ce-727526c05eba.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     396605
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:ef:aa:07:49:fd:d2:1e:aa:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=84c408fc-d355-40e8-a59a-3e2a176de941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:cd:9f:bc:04:50:81:78:8c:d9:9d:4d:10:
                    17:96:b9:91:61:b4:a1:6b:eb:14:8f:b0:e1:56:c1:
                    48:b1:b2:2c:87:72:57:7b:80:af:8a:4c:dd:f4:bb:
                    a0:52:b7:6e:86:ed:4b:b2:30:83:5d:c2:a9:8d:6f:
                    c5:5e:6b:6a:89:1a:97:1f:56:43:92:29:73:ad:01:
                    43:48:62:99:4e:94:fd:64:25:5a:95:01:6f:5b:25:
                    8a:0f:65:6e:b7:2f:c5:1f:2b:5a:d4:12:eb:5b:1f:
                    a9:67:27:4b:7e:ed:7a:35:db:51:bb:e1:7a:4d:cb:
                    b3:dc:0e:ad:82:b2:8f:fb:ed:c6:e7:a0:6b:5c:03:
                    f6:6e:b1:d1:a6:87:e7:c8:01:5a:dd:3f:3d:d7:bd:
                    71:2c:98:f2:7d:ef:e2:ff:bc:51:3d:50:24:83:c1:
                    68:49:b3:4d:87:a0:70:e2:37:83:f2:f1:d6:71:ed:
                    a3:23:3b:1b:03:a9:2d:fc:2a:66:73:42:04:f1:16:
                    ef:5f:78:47:e3:5c:6c:99:32:2e:2c:9c:2e:c2:7a:
                    3f:3a:58:ff:52:9f:c7:89:42:0e:84:79:77:24:28:
                    56:a9:3a:c4:74:de:bc:ec:4e:2e:e7:a8:e5:5e:04:
                    82:50:3e:d6:46:76:c6:9c:40:72:46:6e:7e:06:32:
                    46:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D1:6F:A8:82:6F:1E:CD:25:3B:87:0F:8E:F6:35:5B:33:99:B2:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f563c169-14af-3bdc-a2ce-727526c05eba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e8:de:34:5c:e6:c3:68:0f:ab:4f:28:eb:74:4c:30:7c:ae:
         53:cb:81:73:08:86:da:b2:5f:11:c9:8e:03:e3:18:f3:90:5a:
         eb:91:01:be:cf:dc:0a:7b:12:0c:9a:58:a3:92:a1:3f:e1:c8:
         33:47:25:37:28:be:df:ea:13:4a:61:d2:d0:6c:ae:f5:80:31:
         f8:57:0d:17:e8:11:18:b9:ae:ce:e9:2f:33:01:a5:69:b1:d3:
         60:b4:d9:4b:65:2e:7e:3a:50:d6:34:a2:cc:ab:78:06:c3:8a:
         9d:97:53:bc:e7:01:57:ac:36:06:9d:52:18:11:3d:e6:d5:e7:
         54:b5:40:66:2f:c8:12:b0:bf:0b:5b:23:fb:fe:e2:05:d2:67:
         30:0c:a6:06:36:dd:4d:e0:8a:00:8a:a6:b4:ea:80:b3:9f:4d:
         60:78:99:69:9a:88:f9:3e:14:90:c6:08:5d:64:d6:3c:1f:a2:
         dd:88:2c:11:15:6d:c9:b1:0d:e2:e9:54:53:fd:8d:ce:a7:0c:
         7a:61:9a:cc:4e:ad:45:04:e0:59:3c:d4:13:3a:84:80:14:21:
         15:75:0b:c6:30:f1:31:58:4e:bb:9e:3e:b4:ea:7a:ac:b8:ff:
         08:70:36:6d:92:8a:56:50:16:63:6b:2f:1c:16:4f:17:88:40:
         b2:b0:38:7a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE56ZO+qB0n90h6qeUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
ODRjNDA4ZmMtZDM1NS00MGU4LWE1OWEtM2UyYTE3NmRlOTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6DNn7wEUIF4jNmdTRAXlrmRYbSha+sUj7Dh
VsFIsbIsh3JXe4Cvikzd9LugUrduhu1LsjCDXcKpjW/FXmtqiRqXH1ZDkilzrQFD
SGKZTpT9ZCValQFvWyWKD2Vuty/FHyta1BLrWx+pZydLfu16NdtRu+F6Tcuz3A6t
grKP++3G56BrXAP2brHRpofnyAFa3T89171xLJjyfe/i/7xRPVAkg8FoSbNNh6Bw
4jeD8vHWce2jIzsbA6kt/Cpmc0IE8RbvX3hH41xsmTIuLJwuwno/Olj/Up/HiUIO
hHl3JChWqTrEdN687E4u56jlXgSCUD7WRnbGnEByRm5+BjJG/wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHDRb6iCbx7NJTuHD472NVszmbKZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjU2M2MxNjktMTRhZi0z
YmRjLWEyY2UtNzI3NTI2YzA1ZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAm6N40XObDaA+rTyjrdEwwfK5Ty4FzCIbasl8R
yY4D4xjzkFrrkQG+z9wKexIMmlijkqE/4cgzRyU3KL7f6hNKYdLQbK71gDH4Vw0X
6BEYua7O6S8zAaVpsdNgtNlLZS5+OlDWNKLMq3gGw4qdl1O85wFXrDYGnVIYET3m
1edUtUBmL8gSsL8LWyP7/uIF0mcwDKYGNt1N4IoAiqa06oCzn01geJlpmoj5PhSQ
xghdZNY8H6LdiCwRFW3JsQ3i6VRT/Y3Opwx6YZrMTq1FBOBZPNQTOoSAFCEVdQvG
MPExWE67nj606nqsuP8IcDZtkopWUBZjay8cFk8XiECysDh6
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:04:54 2026 by rpki-client