Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2729e73f-1226-3ab8-ba52-35b5c9cd91bc.roa
File:                     2729e73f-1226-3ab8-ba52-35b5c9cd91bc.roa (raw, json)
Hash identifier:          xlc2WHPmnye+P3bS2PlmHfMbvdZ/7JitvL+seoAvEGs=
Subject key identifier:   07:BD:ED:97:50:F0:37:2F:47:31:64:75:22:E8:A5:E9:D6:2A:74:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49886C732340F89174589D20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2729e73f-1226-3ab8-ba52-35b5c9cd91bc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     27544
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:6c:73:23:40:f8:91:74:58:9d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=17359992-aee7-4ac8-ae26-4dbc58c58beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d5:95:72:c9:bf:43:ba:56:ca:13:73:c1:76:
                    df:38:82:59:81:8b:c4:0f:0d:29:28:25:ca:e6:f9:
                    48:22:51:bb:40:ee:a9:fe:dd:e2:d9:b4:c3:ac:d7:
                    66:f2:0d:6c:85:a7:a3:6f:d9:c5:69:ae:a6:5e:50:
                    cf:5e:c8:f8:dd:2e:af:90:8b:ef:57:56:ed:1d:0e:
                    d5:be:95:43:eb:03:3a:0f:78:40:77:09:1e:00:2a:
                    92:3a:ff:06:51:bb:70:39:47:89:c0:06:af:1f:bf:
                    f0:c1:03:d1:8c:b3:93:b3:96:5a:58:c4:36:36:7e:
                    f3:5d:1c:bf:f6:72:f4:36:c7:65:e6:8d:fa:55:bf:
                    54:8c:d8:38:dd:bd:ce:cb:a9:2d:b1:73:de:1b:65:
                    f8:e1:a0:d7:fb:b5:33:f5:2c:35:cb:06:9b:85:73:
                    70:11:0c:75:41:ae:32:17:aa:10:6b:ad:9c:89:5f:
                    b0:0d:a0:f5:11:3c:a3:38:d7:75:73:3e:b7:0d:e1:
                    3b:ea:b2:36:71:cb:35:77:d1:51:24:17:fc:1f:e6:
                    0c:70:5d:ee:6a:52:3a:04:1f:25:d8:34:ff:2e:26:
                    fb:07:bb:81:58:7c:69:36:68:fa:13:dc:c1:3a:b0:
                    5c:b0:98:27:67:99:5e:fe:14:c4:b7:04:e9:e3:89:
                    81:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BD:ED:97:50:F0:37:2F:47:31:64:75:22:E8:A5:E9:D6:2A:74:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2729e73f-1226-3ab8-ba52-35b5c9cd91bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0d:0f:71:3b:42:8b:0c:2a:ed:bc:fe:42:3e:c4:3d:f9:3a:
         f9:98:78:f4:74:79:a1:26:dc:8e:69:aa:44:cd:be:d8:3f:d0:
         a9:3f:2e:3c:16:e2:30:94:e9:19:15:f3:b7:b8:07:0a:34:c6:
         38:2c:05:b3:c0:16:63:2e:19:bf:48:ee:ac:8d:28:d6:65:d8:
         16:76:c3:c4:de:9f:f7:69:a1:d9:dd:06:2c:a5:dd:8e:2d:43:
         97:e3:53:6f:21:47:bc:16:85:9f:d8:a5:a0:5b:8a:ab:18:df:
         19:8a:03:08:b3:c1:e7:7f:1f:12:6d:d6:5f:1b:ce:f5:72:07:
         3b:4e:90:6c:5b:d2:97:85:f3:cb:9a:3d:c7:bb:ee:c9:57:17:
         1d:b6:16:23:d9:f4:0d:a9:6d:d7:4c:42:a0:c4:32:49:e1:5f:
         88:1a:11:6d:6a:4b:8b:8f:8f:20:e6:45:43:38:e1:21:72:88:
         be:84:3c:54:aa:da:82:b5:0a:5a:b7:c8:86:ae:a3:a3:c9:01:
         cd:a5:ab:cc:ab:5d:ce:b1:84:a2:14:7f:8c:67:66:0e:1a:85:
         24:53:c9:9e:9d:f2:ee:50:60:54:e0:a0:de:b1:6d:63:83:63:
         a4:95:a9:66:51:b1:c1:17:08:da:ad:e6:40:6f:ce:01:ad:4a:
         50:5c:91:42
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JiGxzI0D4kXRYnSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTczNTk5OTItYWVlNy00YWM4LWFlMjYtNGRiYzU4YzU4YmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitWVcsm/Q7pWyhNzwXbfOIJZgYvEDw0pKCXK
5vlIIlG7QO6p/t3i2bTDrNdm8g1shaejb9nFaa6mXlDPXsj43S6vkIvvV1btHQ7V
vpVD6wM6D3hAdwkeACqSOv8GUbtwOUeJwAavH7/wwQPRjLOTs5ZaWMQ2Nn7zXRy/
9nL0Nsdl5o36Vb9UjNg43b3Oy6ktsXPeG2X44aDX+7Uz9Sw1ywabhXNwEQx1Qa4y
F6oQa62ciV+wDaD1ETyjONd1cz63DeE76rI2ccs1d9FRJBf8H+YMcF3ualI6BB8l
2DT/Lib7B7uBWHxpNmj6E9zBOrBcsJgnZ5le/hTEtwTp44mBIQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAe97ZdQ8DcvRzFkdSLopenWKnT0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjcyOWU3M2YtMTIyNi0z
YWI4LWJhNTItMzViNWM5Y2Q5MWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBmDQ9xO0KLDCrtvP5CPsQ9+Tr5mHj0dHmhJtyO
aapEzb7YP9CpPy48FuIwlOkZFfO3uAcKNMY4LAWzwBZjLhm/SO6sjSjWZdgWdsPE
3p/3aaHZ3QYspd2OLUOX41NvIUe8FoWf2KWgW4qrGN8ZigMIs8Hnfx8SbdZfG871
cgc7TpBsW9KXhfPLmj3Hu+7JVxcdthYj2fQNqW3XTEKgxDJJ4V+IGhFtakuLj48g
5kVDOOEhcoi+hDxUqtqCtQpat8iGrqOjyQHNpavMq13OsYSiFH+MZ2YOGoUkU8me
nfLuUGBU4KDesW1jg2OklalmUbHBFwjareZAb84BrUpQXJFC
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:44:48 2026 by rpki-client