Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b19d909-f30e-3e1c-9552-9b351c06b7bd.roa
File:                     0b19d909-f30e-3e1c-9552-9b351c06b7bd.roa (raw, json)
Hash identifier:          LaMlrndczug7PE7hYT1SdUkvlvVzC9St/n7pDElVezU=
Subject key identifier:   7A:DD:3D:49:38:26:F6:51:9C:57:F9:F2:51:E9:95:5E:3A:F2:6A:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F093CFB64A5B7FE460AF1AAC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b19d909-f30e-3e1c-9552-9b351c06b7bd.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     397208
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:fb:64:a5:b7:fe:46:0a:f1:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=821ff311-8148-4109-8abb-dd6f487e77d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:64:65:e5:43:98:d2:24:c6:cc:ec:0e:05:ef:
                    3f:74:b7:df:64:52:03:7f:75:85:3b:0a:4d:11:e0:
                    68:6c:e2:ba:2a:68:9f:ab:ed:c5:dd:d1:26:04:c9:
                    26:e1:e5:1b:74:ca:33:9e:cd:ef:d0:11:67:71:40:
                    f8:09:6b:28:b9:2f:85:d1:85:6c:83:54:8b:8f:8d:
                    54:31:1f:7b:2d:55:c3:54:3e:6b:fc:d8:bc:6c:43:
                    5c:a5:fe:28:58:80:bc:b7:73:88:80:21:52:15:c1:
                    84:ba:4f:9d:3c:d7:86:9a:ce:20:ac:dc:44:75:6a:
                    45:5d:6f:e6:76:bb:d2:f8:c2:fd:c1:7f:f6:e1:ef:
                    df:4d:f8:76:d9:c6:2a:f5:85:a5:25:6c:04:98:e4:
                    a7:01:f0:f9:b6:2e:60:18:16:8f:f5:17:70:ee:23:
                    2f:de:c4:6f:d2:93:54:df:c5:df:0f:4c:3e:3f:6a:
                    0f:fa:8c:bf:d7:22:8c:c0:0b:8d:25:f5:a6:49:05:
                    cc:f9:08:8f:dc:4e:23:2e:b4:7a:a8:0e:14:2c:46:
                    12:8d:32:5f:2f:ce:0f:4a:9d:2b:3c:64:81:bd:a4:
                    42:8b:f1:65:19:6a:12:55:a5:5c:11:e9:2d:c8:e5:
                    55:79:65:4c:25:16:ec:95:04:68:b8:85:cf:47:8e:
                    eb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DD:3D:49:38:26:F6:51:9C:57:F9:F2:51:E9:95:5E:3A:F2:6A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b19d909-f30e-3e1c-9552-9b351c06b7bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:01:66:fd:2c:d4:8d:53:99:64:e2:8d:1d:bc:1c:ab:98:57:
         06:1f:ba:69:40:34:58:99:d3:9a:1f:39:8a:41:a8:be:6e:5a:
         78:d3:6d:fe:db:f0:0f:f4:d9:44:90:ba:13:d0:0a:81:f5:eb:
         b7:ba:94:89:06:9c:0e:7c:7d:9d:7a:46:4f:c7:51:3e:f5:d1:
         1f:83:95:a6:58:ab:24:5d:cb:36:c8:3d:54:72:3b:09:05:7e:
         9d:54:5e:91:4c:77:ca:97:02:cb:01:1f:81:fe:28:ce:98:c5:
         f1:a4:24:f2:97:58:0d:e1:d7:62:f6:50:ec:7e:af:ca:67:36:
         2e:84:bd:fa:0c:1c:6c:17:28:b3:e4:0b:05:92:22:2c:9f:a1:
         37:e5:7c:8d:05:b8:b4:70:5c:1d:fe:aa:6f:25:a6:6d:02:31:
         52:0c:53:91:7f:08:c8:59:be:98:72:d9:b3:47:03:f1:4d:76:
         83:e0:b9:33:23:4e:50:52:ae:77:07:0b:12:9a:ca:0e:c0:38:
         81:19:bf:85:6b:5d:ed:7a:4c:d6:0e:c0:53:bd:c7:89:ae:2f:
         15:f0:9e:69:4b:44:bf:6e:32:9d:91:4f:c8:4d:7a:b4:a5:d1:
         e8:e2:e6:f9:5c:f3:48:d8:50:ed:31:99:a4:e1:6c:10:bb:5f:
         c4:97:9e:85
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8JPPtkpbf+RgrxqsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
ODIxZmYzMTEtODE0OC00MTA5LThhYmItZGQ2ZjQ4N2U3N2Q5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2Rl5UOY0iTGzOwOBe8/dLffZFIDf3WFOwpN
EeBobOK6Kmifq+3F3dEmBMkm4eUbdMozns3v0BFncUD4CWsouS+F0YVsg1SLj41U
MR97LVXDVD5r/Ni8bENcpf4oWIC8t3OIgCFSFcGEuk+dPNeGms4grNxEdWpFXW/m
drvS+ML9wX/24e/fTfh22cYq9YWlJWwEmOSnAfD5ti5gGBaP9Rdw7iMv3sRv0pNU
38XfD0w+P2oP+oy/1yKMwAuNJfWmSQXM+QiP3E4jLrR6qA4ULEYSjTJfL84PSp0r
PGSBvaRCi/FlGWoSVaVcEektyOVVeWVMJRbslQRouIXPR47rmQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHrdPUk4JvZRnFf58lHplV468mofMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGIxOWQ5MDktZjMwZS0z
ZTFjLTk1NTItOWIzNTFjMDZiN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCeAWb9LNSNU5lk4o0dvByrmFcGH7ppQDRYmdOa
HzmKQai+blp4023+2/AP9NlEkLoT0AqB9eu3upSJBpwOfH2dekZPx1E+9dEfg5Wm
WKskXcs2yD1UcjsJBX6dVF6RTHfKlwLLAR+B/ijOmMXxpCTyl1gN4ddi9lDsfq/K
ZzYuhL36DBxsFyiz5AsFkiIsn6E35XyNBbi0cFwd/qpvJaZtAjFSDFORfwjIWb6Y
ctmzRwPxTXaD4LkzI05QUq53BwsSmsoOwDiBGb+Fa13tekzWDsBTvceJri8V8J5p
S0S/bjKdkU/ITXq0pdHo4ub5XPNI2FDtMZmk4WwQu1/El56F
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:46:53 2026 by rpki-client