Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/086b2275-7c7b-31c8-8a5e-95b24252749e.roa
File:                     086b2275-7c7b-31c8-8a5e-95b24252749e.roa (raw, json)
Hash identifier:          KEXYojUCtztWV+Sa+Um9z7ub/3g4e9+2MqeQEWEoAu0=
Subject key identifier:   E7:6C:9D:C7:E4:25:14:EC:01:FD:C3:5F:24:DE:A0:11:4C:BA:50:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584FA85E3AD1FB872A6C91C7FFD0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/086b2275-7c7b-31c8-8a5e-95b24252749e.roa
Signing time:             Thu 29 Oct 2026 01:00:12 +0000
ROA not before:           Thu 29 Oct 2026 01:00:12 +0000
ROA not after:            Wed 27 Jan 2027 02:00:12 +0000
asID:                     20172
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a8:5e:3a:d1:fb:87:2a:6c:91:c7:ff:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:12 2026 GMT
            Not After : Jan 27 02:00:12 2027 GMT
        Subject: CN=04fde61b-f6be-4ce4-9f8d-b4985893a1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:e5:09:80:5f:1c:05:30:11:62:a3:0c:5b:
                    ee:92:4b:e5:0a:1e:a3:80:fa:86:72:74:db:c5:4d:
                    24:68:85:8a:f5:09:5d:ee:b4:8a:60:77:3c:27:6d:
                    5d:3d:f6:fd:5e:84:30:e6:68:26:b8:c0:e5:68:98:
                    8c:ef:c8:a7:7c:c7:3b:56:df:9e:d4:6a:70:b8:fc:
                    a5:ae:21:d0:b4:38:61:d8:95:cb:82:df:a1:63:3c:
                    75:b3:79:9e:e5:f2:65:a6:73:fe:55:0b:1c:7d:63:
                    ae:9b:1a:cb:22:82:7e:20:0b:a8:13:cf:7b:39:68:
                    8e:b0:a1:27:cd:90:ab:64:b1:2c:13:54:ca:5a:3b:
                    c6:ac:70:cd:c6:85:97:23:a8:b6:68:44:01:ed:fe:
                    04:7f:8f:77:a9:f4:b5:59:47:af:73:c5:42:00:dc:
                    53:2f:f2:cf:c5:90:cc:0f:d0:f2:f8:32:9a:db:95:
                    b6:c9:23:92:2c:b8:c5:ef:7b:4f:65:ca:7e:30:6c:
                    fa:21:5f:1b:d9:53:81:26:08:f9:24:ec:da:e5:81:
                    f3:09:e1:ac:a3:b1:78:c6:1c:06:4d:19:fb:d2:f6:
                    23:be:f3:57:fc:e4:44:e7:7e:58:8c:ba:2e:80:c5:
                    b2:23:2d:f7:c6:88:4b:8f:4d:29:5b:e5:7c:ae:87:
                    96:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6C:9D:C7:E4:25:14:EC:01:FD:C3:5F:24:DE:A0:11:4C:BA:50:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/086b2275-7c7b-31c8-8a5e-95b24252749e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:da:93:61:53:2c:c8:a9:94:90:00:e3:55:0a:ea:9e:df:b6:
         30:40:cf:78:50:7f:d4:b7:63:57:f8:7e:10:6e:c2:49:2c:24:
         09:f0:e9:31:f9:7f:56:18:9b:37:b0:42:c3:1d:6c:39:29:05:
         fa:70:f7:85:13:71:65:02:35:da:1c:44:4d:4f:03:7f:80:4b:
         e4:c1:c5:61:42:1e:5e:4a:46:31:da:09:06:4d:03:ca:ba:85:
         b7:7c:7e:7c:fe:43:36:38:df:44:7c:9e:cd:18:21:5f:64:9a:
         a9:d2:2e:19:b1:d3:52:cf:e3:e1:75:c4:0e:a3:80:b1:a3:d4:
         d1:b0:9f:77:0a:ae:9c:f0:3b:ac:59:6b:62:30:82:9e:fb:d1:
         d4:2b:9a:13:76:db:22:cb:7d:43:79:3b:76:56:7a:e9:73:fc:
         8d:91:fa:a6:c0:6c:77:8a:73:f7:59:f6:2a:9d:98:c4:c9:b1:
         a5:4f:e9:2c:0b:08:8e:96:65:09:bc:a8:de:33:3b:f9:8e:43:
         5b:09:b7:7a:88:b3:71:8a:c3:01:fa:a7:31:ba:02:21:0d:e6:
         23:9d:e2:f0:0e:45:f1:46:8b:fd:4c:3f:e1:f4:9d:89:d8:49:
         7e:71:93:8a:92:da:b8:c1:a4:da:65:92:59:a5:85:83:88:2a:
         bd:93:32:2a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE+oXjrR+4cqbJHH/9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk
MDRmZGU2MWItZjZiZS00Y2U0LTlmOGQtYjQ5ODU4OTNhMWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaHlCYBfHAUwEWKjDFvukkvlCh6jgPqGcnTb
xU0kaIWK9Qld7rSKYHc8J21dPfb9XoQw5mgmuMDlaJiM78infMc7Vt+e1GpwuPyl
riHQtDhh2JXLgt+hYzx1s3me5fJlpnP+VQscfWOumxrLIoJ+IAuoE897OWiOsKEn
zZCrZLEsE1TKWjvGrHDNxoWXI6i2aEQB7f4Ef493qfS1WUevc8VCANxTL/LPxZDM
D9Dy+DKa25W2ySOSLLjF73tPZcp+MGz6IV8b2VOBJgj5JOza5YHzCeGso7F4xhwG
TRn70vYjvvNX/ORE535YjLougMWyIy33xohLj00pW+V8roeW3wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOdsncfkJRTsAf3DXyTeoBFMulAmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDg2YjIyNzUtN2M3Yi0z
MWM4LThhNWUtOTViMjQyNTI3NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAu2pNhUyzIqZSQAONVCuqe37YwQM94UH/Ut2NX
+H4QbsJJLCQJ8Okx+X9WGJs3sELDHWw5KQX6cPeFE3FlAjXaHERNTwN/gEvkwcVh
Qh5eSkYx2gkGTQPKuoW3fH58/kM2ON9EfJ7NGCFfZJqp0i4ZsdNSz+PhdcQOo4Cx
o9TRsJ93Cq6c8DusWWtiMIKe+9HUK5oTdtsiy31DeTt2Vnrpc/yNkfqmwGx3inP3
WfYqnZjEybGlT+ksCwiOlmUJvKjeMzv5jkNbCbd6iLNxisMB+qcxugIhDeYjneLw
DkXxRov9TD/h9J2J2El+cZOKktq4waTaZZJZpYWDiCq9kzIq
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:58:51 2026 by rpki-client