Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e7c6ab2-808e-3352-b66e-7c779bc66ca9.roa
File:                     2e7c6ab2-808e-3352-b66e-7c779bc66ca9.roa (raw, json)
Hash identifier:          l43CImL1JI4qeR9/3Ai3TeS5UFRQjlzH4MSRUMWE9Is=
Subject key identifier:   AA:E7:48:75:D0:D5:08:42:98:B6:FA:3F:08:5B:A6:23:89:0B:67:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA793F321AF0DBA3081DC9770
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e7c6ab2-808e-3352-b66e-7c779bc66ca9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27544
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:f3:21:af:0d:ba:30:81:dc:97:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e4309d3f-fc83-4746-ab81-7d091a7408a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:15:e8:ee:73:45:03:4a:6a:b4:a7:29:df:
                    2b:7c:39:7e:fb:42:9e:03:89:bf:4c:74:29:6a:b6:
                    6f:aa:b1:f6:ac:53:c8:26:eb:3b:d2:ea:8e:5a:ad:
                    3e:52:54:4b:37:90:62:73:d5:9c:f5:aa:50:81:92:
                    c0:f0:31:89:e9:50:bc:08:ca:24:e7:53:d6:e5:71:
                    f3:60:67:85:86:b7:02:a9:27:42:53:07:ab:0a:89:
                    82:6b:88:06:fa:e9:07:8b:c6:a8:52:e8:24:fd:24:
                    63:e6:2d:0a:e1:59:fd:01:b8:00:53:cb:2f:11:a9:
                    1b:3f:16:0e:d8:a9:95:cb:d2:c6:00:3b:86:d0:52:
                    f6:27:c8:19:e8:62:70:4b:a8:ea:ab:61:6d:a2:96:
                    83:d3:d5:f4:40:7a:bb:f2:20:e5:4d:4e:69:0c:04:
                    15:45:0f:61:be:75:b4:8c:94:6b:69:af:83:10:e0:
                    c0:25:94:fd:ae:89:f3:32:58:eb:59:7f:4e:d2:e9:
                    19:a7:ed:79:c8:45:2b:9e:08:84:8c:ce:21:5e:f2:
                    8d:90:1f:fe:c2:e4:af:a3:47:0d:15:74:53:89:f2:
                    b9:95:6b:ac:c3:05:94:a4:3d:73:fa:bd:7d:d7:b0:
                    9f:27:c1:1f:c9:47:df:d2:62:9b:13:21:1e:f6:5e:
                    12:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E7:48:75:D0:D5:08:42:98:B6:FA:3F:08:5B:A6:23:89:0B:67:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e7c6ab2-808e-3352-b66e-7c779bc66ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c3:49:ea:72:19:4e:60:0c:8f:09:62:5f:88:c8:25:de:21:
         54:ad:c5:ae:01:c7:9f:39:a2:fd:d4:c9:6b:77:46:80:6c:c5:
         0c:e1:c4:a4:46:01:5f:d8:9d:f3:e3:cb:76:d6:01:07:5d:aa:
         f0:b5:d2:c5:29:b1:5b:d4:33:bf:bb:5f:3c:2a:cb:0c:27:13:
         77:a4:ef:f2:c8:20:7c:92:9e:5c:b3:13:5d:0d:49:63:4a:33:
         36:b9:9a:b2:65:b9:6e:70:93:76:3f:24:97:96:ee:0d:4a:38:
         d7:b6:27:ee:7a:0b:df:93:db:2c:1f:c2:fc:d3:1a:25:94:26:
         59:b7:a2:b3:54:ad:a1:e1:2c:0d:5b:e9:1b:fe:b4:f1:5f:94:
         c9:3f:bd:1d:c9:f1:02:41:ef:8d:cf:ad:c2:4c:81:88:62:16:
         4e:59:7c:25:b1:f1:02:e6:66:48:b5:98:04:10:d6:7f:bd:79:
         78:81:ac:c8:93:24:6a:2b:b6:11:5c:6a:17:89:28:28:d5:00:
         23:2f:64:92:ad:c5:28:f2:a1:da:39:65:61:5e:a7:73:19:3d:
         13:24:29:6a:d4:f9:ff:b9:c0:8d:63:e5:c6:23:7a:d8:87:f5:
         84:49:45:62:74:97:e1:32:33:a6:2f:01:7d:a9:a8:76:66:5a:
         c2:3c:71:d7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nk/Mhrw26MIHcl3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTQzMDlkM2YtZmM4My00NzQ2LWFiODEtN2QwOTFhNzQwOGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH8V6O5zRQNKarSnKd8rfDl++0KeA4m/THQp
arZvqrH2rFPIJus70uqOWq0+UlRLN5Bic9Wc9apQgZLA8DGJ6VC8CMok51PW5XHz
YGeFhrcCqSdCUwerComCa4gG+ukHi8aoUugk/SRj5i0K4Vn9AbgAU8svEakbPxYO
2KmVy9LGADuG0FL2J8gZ6GJwS6jqq2FtopaD09X0QHq78iDlTU5pDAQVRQ9hvnW0
jJRraa+DEODAJZT9ronzMljrWX9O0ukZp+15yEUrngiEjM4hXvKNkB/+wuSvo0cN
FXRTifK5lWuswwWUpD1z+r1917CfJ8EfyUff0mKbEyEe9l4SIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKrnSHXQ1QhCmLb6PwhbpiOJC2cgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmU3YzZhYjItODA4ZS0z
MzUyLWI2NmUtN2M3NzliYzY2Y2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGrDSepyGU5gDI8JYl+IyCXeIVStxa4Bx585ov3UyWt3RoBsxQzh
xKRGAV/YnfPjy3bWAQddqvC10sUpsVvUM7+7XzwqywwnE3ek7/LIIHySnlyzE10N
SWNKMza5mrJluW5wk3Y/JJeW7g1KONe2J+56C9+T2ywfwvzTGiWUJlm3orNUraHh
LA1b6Rv+tPFflMk/vR3J8QJB743PrcJMgYhiFk5ZfCWx8QLmZki1mAQQ1n+9eXiB
rMiTJGorthFcaheJKCjVACMvZJKtxSjyodo5ZWFep3MZPRMkKWrU+f+5wI1j5cYj
etiH9YRJRWJ0l+EyM6YvAX2pqHZmWsI8cdc=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:14:45 2026 by rpki-client